Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
File: AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json)
Hash identifier: vH2KSIZTUIQUUfkA1EoDWE3k9J6N0l3s9+Tp1/O0I0o=
Subject key identifier: 70:AD:02:A1:FC:E5:9E:26:3E:9C:10:FF:7B:E5:58:FE:4F:32:8A:92
Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
Certificate issuer: /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Certificate serial: 01A140F0CF3F76705EE18FAF778A54816D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
Manifest number: 138E
Signing time: Thu 15 Oct 2026 19:01:25 +0000
Manifest this update: Thu 15 Oct 2026 19:01:25 +0000
Manifest next update: Fri 16 Oct 2026 19:01:25 +0000
Files and hashes: 1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: 2yLAEQDXF7g3F+Z0oiWLZUuuigEVc+0CThiCQokXmIU=)
2: YF-tWCFsSuAIoswUePA1e2Wc2vc.roa (hash: pEIfFvCDAADSX4Ka/xFTpfoKfdGNNPSk4G6XnaiqnGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f0:cf:3f:76:70:5e:e1:8f:af:77:8a:54:81:6d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Validity
Not Before: Oct 15 19:01:25 2026 GMT
Not After : Oct 16 19:01:25 2026 GMT
Subject: CN=70ad02a1fce59e263e9c10ff7be558fe4f328a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:99:82:4d:7e:d1:68:07:8a:5d:ab:67:f7:de:
c4:42:c0:fb:99:bf:aa:7c:80:88:b9:d5:73:f4:42:
14:f6:3a:21:2f:a6:fc:c5:cb:2b:cb:70:59:19:7b:
e0:3b:66:c5:58:e2:f2:d2:6b:e2:37:1f:78:88:f2:
e9:a7:70:34:a3:2a:cd:1d:87:b9:3e:34:e2:cd:fd:
f8:fa:7c:6b:e0:95:19:dd:ed:29:03:cd:25:27:6f:
a4:4b:02:74:36:ed:c5:71:58:8e:de:a9:b9:85:8f:
2a:03:0c:f3:9a:bc:52:70:02:d2:c2:97:d0:4c:47:
dc:cb:1b:6f:e7:ca:8c:d6:1f:5b:62:eb:50:c2:0d:
92:cb:2a:4b:9c:52:62:8e:2a:0b:83:1a:89:2a:03:
1b:30:85:83:2a:c2:05:b0:d6:bd:ab:8c:ce:b0:59:
8e:18:44:c7:23:6a:f7:a5:99:0f:2c:ee:45:f5:24:
d0:51:e1:b1:cd:9f:75:86:16:76:ad:13:6a:6c:73:
63:dd:6c:fb:ff:af:7e:0d:55:4e:85:35:ae:d4:e3:
37:ed:39:dc:a5:39:0b:f6:05:07:c1:59:ba:02:36:
53:f3:aa:53:de:1b:5f:38:85:7a:f8:9c:57:27:32:
8f:62:d0:72:22:2e:2d:da:42:5e:b0:01:c5:0a:9e:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AD:02:A1:FC:E5:9E:26:3E:9C:10:FF:7B:E5:58:FE:4F:32:8A:92
X509v3 Authority Key Identifier:
keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:00:83:24:cd:cb:18:ad:96:12:2b:7f:47:ae:51:81:e1:0c:
51:5e:74:27:82:b5:c2:ef:b6:39:80:49:5d:87:e2:1b:2e:d3:
bf:56:09:03:bc:f7:e2:22:a6:65:31:84:15:c8:15:91:8e:5a:
f6:b2:e0:b8:25:d1:fa:4e:db:5a:32:98:28:94:64:31:46:6f:
96:a9:ac:9f:13:34:c5:ac:5d:60:72:e4:45:62:a1:5d:46:5b:
22:4e:30:db:ab:15:ea:ab:08:34:44:8e:a0:98:4b:f9:e4:11:
d2:44:bd:07:aa:c7:c5:4e:a7:ce:bc:da:5d:a6:af:2b:9d:d1:
a9:db:fb:34:54:bc:3a:4f:6b:31:31:4a:2b:49:01:6a:b8:14:
b3:74:c5:4c:95:3a:7e:0d:5b:83:f2:68:44:dc:b0:5b:d3:c7:
50:ed:0d:7b:5b:48:47:30:4c:93:7d:c6:d4:63:05:d4:31:4a:
2a:bb:75:c1:56:cb:14:d8:ca:7d:fd:a7:e4:e4:8f:a0:66:65:
d2:5e:2e:86:46:02:dd:fe:34:7d:5e:78:6b:65:37:ee:03:c5:
4f:96:e2:57:05:c6:42:af:d8:7f:25:21:1e:8b:bb:81:aa:59:
37:03:16:6b:c4:88:57:43:a1:76:d3:44:b3:b7:d3:c0:6d:a5:
f4:3a:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:07:47 2026 by rpki-client