Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
File: AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json)
Hash identifier: nKRqb8pRV7HSgdPC6HAYyweWQnO7gFa5Kz0I8BU3/9E=
Subject key identifier: 5F:EF:AA:D2:9D:82:0B:90:D5:C9:FD:D8:8D:74:B0:E2:18:4F:07:E7
Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
Certificate issuer: /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Certificate serial: 01A0005CAF026813A650AE7EBA17631E4DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
Manifest number: 12E8
Signing time: Fri 14 Aug 2026 13:01:08 +0000
Manifest this update: Fri 14 Aug 2026 13:01:08 +0000
Manifest next update: Sat 15 Aug 2026 13:01:08 +0000
Files and hashes: 1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: QQjYBPsr5JrgY9XY10vkYLg/fIZVMp+B99Nmv4eJzzs=)
2: YF-tWCFsSuAIoswUePA1e2Wc2vc.roa (hash: pEIfFvCDAADSX4Ka/xFTpfoKfdGNNPSk4G6XnaiqnGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:af:02:68:13:a6:50:ae:7e:ba:17:63:1e:4d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Validity
Not Before: Aug 14 13:01:08 2026 GMT
Not After : Aug 15 13:01:08 2026 GMT
Subject: CN=5fefaad29d820b90d5c9fdd88d74b0e2184f07e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e0:ca:bc:f5:9e:80:b7:1b:ae:42:46:45:4d:
9f:6a:13:44:96:2e:06:9b:ea:e0:00:8c:6b:5b:b9:
4b:f6:9f:05:a0:c7:a2:15:34:ce:f7:65:12:ae:ae:
cf:e5:bb:d2:44:7a:cb:b8:15:fd:3d:7d:3d:f2:0c:
74:a7:e2:47:8a:27:ac:56:6f:72:73:f3:16:3e:67:
e5:d4:a0:21:f6:89:4a:a2:c6:6d:3f:79:31:2c:2c:
09:cb:6b:7e:95:1a:ce:53:9c:51:bb:3d:d3:f8:10:
81:0d:fa:89:b8:06:78:90:b9:b2:41:1a:5a:76:98:
7c:3a:ed:26:fc:32:8b:cb:95:b1:62:cc:74:58:97:
15:57:86:6d:24:9b:4a:50:8f:1a:4e:11:2f:e1:88:
04:e0:88:62:1c:19:2a:65:e8:75:4e:90:d7:08:00:
c3:3d:bb:d2:86:25:8b:85:b7:d5:69:4d:6e:96:fa:
77:30:9a:10:9a:75:12:c5:56:85:40:9b:9f:cf:16:
2f:fe:16:77:2c:6d:02:11:f3:a2:f3:a6:8e:69:7f:
bf:3c:6a:26:f7:0f:52:9c:b3:03:2b:c1:bf:d4:dd:
b6:5d:40:fa:c7:5a:b2:4f:b3:81:0b:e7:5e:03:f7:
91:98:e3:0c:39:1e:3e:4a:86:f4:3f:4f:02:2a:ea:
97:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EF:AA:D2:9D:82:0B:90:D5:C9:FD:D8:8D:74:B0:E2:18:4F:07:E7
X509v3 Authority Key Identifier:
keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d4:9f:d0:df:4a:bc:2b:7e:be:08:46:0a:9c:71:2c:4e:2f:
f7:1e:81:35:ad:a8:26:f7:95:f7:ea:a4:af:f6:e4:32:ba:20:
46:d6:42:6a:3d:1e:b3:a8:ed:f4:48:f5:9f:32:17:c5:b2:fc:
b1:ee:c3:38:0d:d0:0c:40:e1:f7:87:a1:e3:d6:7d:4d:cf:e5:
1d:65:81:3e:ee:71:12:f5:e0:e4:3a:e1:27:e1:88:3a:22:09:
04:ef:f6:0c:5a:e5:65:ed:cf:69:00:af:52:77:ea:80:56:98:
47:fc:4d:37:a0:d9:32:3f:49:e6:fd:ec:0d:68:cd:16:ed:82:
fa:04:fd:5d:27:5a:cc:12:cd:8f:cf:72:80:68:b5:5f:40:03:
f4:cd:69:63:c5:b5:67:81:d6:4c:8d:db:46:53:cc:26:0a:de:
53:a3:aa:89:6e:4a:0c:a0:da:82:ca:99:e1:d4:7f:73:40:3e:
0c:b5:08:ea:22:7e:19:d1:50:b8:d0:f4:74:6e:21:ab:cb:fe:
35:47:2c:65:88:4e:80:00:ed:83:8b:b2:b4:63:84:ff:99:5b:
50:09:58:d8:17:55:4c:6c:de:ca:ee:6f:e5:67:7c:99:52:a8:
5c:7c:e1:15:0e:ac:f2:7b:c0:90:cd:6d:01:99:49:78:f3:03:
b1:c0:68:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXK8CaBOmUK5+uhdjHk31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNTdhZDA5YWU5YTFhOTgwMTIyNzU4NTFhYWJlNjllNGUx
NWEyZjQwHhcNMjYwODE0MTMwMTA4WhcNMjYwODE1MTMwMTA4WjAzMTEwLwYDVQQD
Eyg1ZmVmYWFkMjlkODIwYjkwZDVjOWZkZDg4ZDc0YjBlMjE4NGYwN2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eDKvPWegLcbrkJGRU2fahNEli4G
m+rgAIxrW7lL9p8FoMeiFTTO92USrq7P5bvSRHrLuBX9PX098gx0p+JHiiesVm9y
c/MWPmfl1KAh9olKosZtP3kxLCwJy2t+lRrOU5xRuz3T+BCBDfqJuAZ4kLmyQRpa
dph8Ou0m/DKLy5WxYsx0WJcVV4ZtJJtKUI8aThEv4YgE4IhiHBkqZeh1TpDXCADD
PbvShiWLhbfVaU1ulvp3MJoQmnUSxVaFQJufzxYv/hZ3LG0CEfOi86aOaX+/PGom
9w9SnLMDK8G/1N22XUD6x1qyT7OBC+deA/eRmOMMOR4+Sob0P08CKuqXbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/vqtKdgguQ1cn92I10sOIYTwfnMB8GA1UdIwQY
MBaAFABXrQmumhqYASJ1hRqr5p5OFaL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUZldENhNmFHcGdCSW5XRkdxdm1uazRWb3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80YzMyYjktZjc3NS00ODY4LTkyM2Qt
ZGNhMzhkNTlhMTU4LzEvQUZldENhNmFHcGdCSW5XRkdxdm1uazRWb3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy80YzMyYjktZjc3NS00ODY4LTkyM2QtZGNhMzhkNTlhMTU4
LzEvQUZldENhNmFHcGdCSW5XRkdxdm1uazRWb3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9Sf0N9K
vCt+vghGCpxxLE4v9x6BNa2oJveV9+qkr/bkMrogRtZCaj0es6jt9Ej1nzIXxbL8
se7DOA3QDEDh94eh49Z9Tc/lHWWBPu5xEvXg5DrhJ+GIOiIJBO/2DFrlZe3PaQCv
UnfqgFaYR/xNN6DZMj9J5v3sDWjNFu2C+gT9XSdazBLNj89ygGi1X0AD9M1pY8W1
Z4HWTI3bRlPMJgreU6OqiW5KDKDagsqZ4dR/c0A+DLUI6iJ+GdFQuND0dG4hq8v+
NUcsZYhOgADtg4uytGOE/5lbUAlY2BdVTGzeyu5v5Wd8mVKoXHzhFQ6s8nvAkM1t
AZlJePMDscBoUg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:14:23 2026 by rpki-client