Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: 7rawoZsB9wIg/2Ls/dIgumlQXTn3X8gbsmKBDTZ4k0Q=
Subject key identifier: 5D:98:CF:2B:EC:0D:E4:37:DD:9B:78:13:7D:82:56:DF:9E:43:2E:F7
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 019E8D92BF0A74C95E758AA52DAE3DE38F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 12C1
Signing time: Wed 03 Jun 2026 13:01:04 +0000
Manifest this update: Wed 03 Jun 2026 13:01:04 +0000
Manifest next update: Thu 04 Jun 2026 13:01:04 +0000
Files and hashes: 1: PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa (hash: uNWAi4ypu2U7vKEwyptJEE3BsJukgPqN0/lL7CgpehE=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: T92ATZ477jq0Ia3XmIjE8U+mmCl0InYfhRXLE/O2gTM=)
3: bNsvbdSJD0WI7Ewm9hgAe8yTIz4.roa (hash: fjVFQSNrjHzCOHsMITQUOhjzFotcFBmj0QqIbMKaS7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:92:bf:0a:74:c9:5e:75:8a:a5:2d:ae:3d:e3:8f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Jun 3 13:01:04 2026 GMT
Not After : Jun 4 13:01:04 2026 GMT
Subject: CN=5d98cf2bec0de437dd9b78137d8256df9e432ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:6a:ed:67:61:b2:af:d0:20:21:bb:51:b7:
ba:b4:f8:11:ad:bb:8a:f0:e1:4a:84:71:c0:31:c8:
81:03:c7:32:1f:5a:ee:c4:4a:ca:f2:28:27:df:92:
de:26:ed:0f:d3:01:6b:eb:01:75:c8:01:c6:eb:4b:
a2:bb:f4:53:17:72:f3:53:b1:d8:47:28:59:20:1d:
b4:73:82:3a:8b:45:af:12:c7:cf:d9:2f:c6:b4:e0:
50:68:b2:9e:f5:53:73:b9:bc:87:78:21:81:54:b8:
6f:e7:6c:a5:89:eb:ea:31:04:fd:54:c8:23:39:f3:
d5:40:69:c6:f8:ea:01:12:5f:1b:ea:80:b3:3c:32:
65:21:2c:12:9b:3b:99:f7:44:45:dc:d3:11:28:80:
17:30:dd:82:9e:b4:b7:d1:57:6e:5f:78:b6:73:79:
d4:c1:04:c4:22:76:3a:69:da:26:80:d0:91:48:25:
89:51:2f:22:90:3f:25:5e:1b:dc:a6:1e:35:10:74:
9e:03:60:22:91:fd:00:42:ca:95:a2:c1:c5:d2:6b:
0e:40:f3:3f:79:44:cb:a2:65:3f:86:57:0a:a4:80:
39:23:7b:74:7a:86:af:d2:f7:fc:c6:d2:99:71:03:
14:4a:49:b0:b5:d1:90:c7:dd:d2:d5:e4:58:25:c3:
66:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:98:CF:2B:EC:0D:E4:37:DD:9B:78:13:7D:82:56:DF:9E:43:2E:F7
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:24:50:f6:0f:92:0c:7d:48:ef:bc:b3:b6:1d:b7:86:99:c4:
76:e7:b0:74:dd:05:f4:05:62:87:f2:aa:af:fd:18:5c:bc:8d:
25:9c:80:5a:61:a0:ca:32:0c:37:fd:fc:d1:9d:d5:54:58:06:
75:5a:7c:49:7b:f2:2d:1c:cb:51:4f:13:6e:ef:98:e3:29:4e:
35:99:4e:c6:74:77:5b:77:02:31:cf:2e:26:23:9b:90:76:e9:
6f:d7:b6:01:ba:70:56:89:a0:c5:01:97:df:4f:65:8e:75:07:
4f:26:2b:4a:43:15:13:49:98:df:b2:02:9b:ab:63:8b:01:a0:
93:3a:e6:77:1b:d2:9d:67:03:04:62:98:7d:d3:2a:e5:0a:5f:
a0:98:35:0e:76:26:1f:15:83:e0:40:ae:24:42:9c:71:fb:83:
41:07:bb:c1:b7:c6:51:21:cb:e7:43:20:f0:34:d6:d1:e6:cf:
65:86:94:2c:da:02:5d:88:35:2a:b8:da:15:52:b1:49:96:b2:
07:74:5f:46:79:ae:9f:a9:6f:7f:b1:2b:6f:83:ff:37:69:73:
cc:7c:7e:e8:fb:e4:58:2a:d6:67:ff:a5:20:86:ba:95:6a:f7:
0d:26:70:dc:9a:fe:11:13:37:ac:a9:86:5e:99:9d:07:b4:8a:
08:7b:d9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:57:45 2026 by rpki-client