Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: 8k2RsW5U+5CY92EcE9JRxHwxO0cE43MNcFoEANU0JOU=
Subject key identifier: 4E:B6:C1:AF:EB:9E:82:DF:F4:6D:3D:96:81:6B:9C:B0:6D:FB:AD:32
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 019D37C04B7E1419E9D9F1423AA3F0093552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 1210
Signing time: Sun 29 Mar 2026 04:00:42 +0000
Manifest this update: Sun 29 Mar 2026 04:00:42 +0000
Manifest next update: Mon 30 Mar 2026 04:00:42 +0000
Files and hashes: 1: PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa (hash: uNWAi4ypu2U7vKEwyptJEE3BsJukgPqN0/lL7CgpehE=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: Wgisz48wGKqmGKpEHMcpNNfWxxHyk+h0QNpNDg3HOfI=)
3: bNsvbdSJD0WI7Ewm9hgAe8yTIz4.roa (hash: fjVFQSNrjHzCOHsMITQUOhjzFotcFBmj0QqIbMKaS7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:4b:7e:14:19:e9:d9:f1:42:3a:a3:f0:09:35:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Mar 29 04:00:42 2026 GMT
Not After : Mar 30 04:00:42 2026 GMT
Subject: CN=4eb6c1afeb9e82dff46d3d96816b9cb06dfbad32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:d3:78:29:0d:b9:da:30:c7:cc:e1:89:00:
9b:f2:51:e0:54:85:a3:f9:17:2e:8e:80:da:13:72:
fc:c6:bd:c8:1c:c1:de:84:f2:37:9d:39:01:16:b9:
00:15:1b:3a:7c:81:9c:cc:18:96:c4:2a:97:c7:a8:
53:bf:58:d7:82:c4:54:80:c6:ec:97:df:35:9c:a1:
1e:2e:83:f8:6d:9f:d9:cb:bf:24:7b:b1:14:0a:93:
fd:34:9c:df:8d:ff:69:f7:78:3b:3f:79:aa:ed:79:
14:22:d6:de:7f:6b:fc:67:88:a0:71:1f:39:af:2e:
a4:ec:f3:7c:27:05:ab:65:2d:22:71:d6:08:8d:2b:
9b:2f:f4:3f:25:e4:d5:8f:3e:0e:f4:34:f8:88:e0:
1c:28:4c:15:78:bc:ae:72:4b:60:ce:f8:ea:f6:d9:
7c:72:fd:2b:cf:74:95:9b:76:b8:34:6a:22:f2:66:
95:62:cb:d0:ad:9f:ed:2d:5e:a2:c9:cd:58:9d:ae:
9d:9f:54:90:e0:ca:73:f1:65:a3:21:34:de:67:06:
52:db:a2:b6:ec:bc:e9:ba:c9:b6:f9:bf:b4:83:14:
bf:92:c3:55:79:d6:91:39:65:67:f1:dd:48:26:82:
ad:88:fc:a3:4d:1c:4f:9d:7a:6b:f6:4b:3a:9e:3a:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B6:C1:AF:EB:9E:82:DF:F4:6D:3D:96:81:6B:9C:B0:6D:FB:AD:32
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:41:e8:70:61:44:4f:6b:0b:b8:26:2f:da:2f:04:1d:4e:3c:
c3:a6:23:6e:df:6c:25:d4:e2:65:ce:d6:0d:7a:3f:f1:51:6c:
90:5c:e4:31:8b:0c:29:78:5b:ed:63:e7:9f:a6:a3:be:51:0a:
2b:eb:d0:55:d0:1c:e8:00:17:61:86:b8:d4:97:86:0a:d0:c5:
78:c6:9d:bf:47:4f:99:34:aa:e5:49:2c:43:f3:f3:e6:a0:6b:
47:d2:3a:6c:2c:6f:14:c3:af:b8:95:14:de:4e:ff:67:eb:5f:
de:34:51:7c:8c:c7:06:6e:fa:ee:9d:d2:3c:48:cb:12:69:49:
81:b6:c3:44:65:2a:90:d7:0a:c7:44:a0:bb:0e:01:2e:75:57:
a8:f1:5c:49:83:7f:92:e3:c0:ae:52:29:2f:5c:cc:9e:ea:e8:
d5:20:4e:ee:7f:b3:33:6d:49:47:c1:06:65:ff:2b:a9:3c:4a:
a8:d4:87:72:3d:c3:41:9b:c7:e4:94:26:fe:5b:6e:6d:3c:c1:
ad:1f:91:09:3f:3e:0c:f4:07:4f:5b:07:6d:d7:34:60:24:6f:
ac:77:f2:7f:9c:83:1e:a1:8c:75:45:4f:2a:b3:47:da:88:0a:
eb:de:4d:ff:fd:42:a8:c8:5a:43:aa:14:5b:b6:39:c1:39:7b:
42:8d:c3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:45 2026 by rpki-client