Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: /Obr2bpxoIOcSrR1c48sEoSCVqUQNwSDbKDEjuSXuVs=
Subject key identifier: A1:D7:88:A1:4E:F1:C8:99:54:1F:61:AF:7F:52:DC:63:A4:9F:1E:3D
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 01A163B38579715327F382A4408551B63ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 1439
Signing time: Thu 22 Oct 2026 13:01:11 +0000
Manifest this update: Thu 22 Oct 2026 13:01:11 +0000
Manifest next update: Fri 23 Oct 2026 13:01:11 +0000
Files and hashes: 1: PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa (hash: uNWAi4ypu2U7vKEwyptJEE3BsJukgPqN0/lL7CgpehE=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: +5VP5KlqVwoF2nW0G6HHekGzfhSH7ca21RuTsY6+uTE=)
3: bNsvbdSJD0WI7Ewm9hgAe8yTIz4.roa (hash: fjVFQSNrjHzCOHsMITQUOhjzFotcFBmj0QqIbMKaS7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:b3:85:79:71:53:27:f3:82:a4:40:85:51:b6:3e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Oct 22 13:01:11 2026 GMT
Not After : Oct 23 13:01:11 2026 GMT
Subject: CN=a1d788a14ef1c899541f61af7f52dc63a49f1e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a9:72:e9:77:b6:e7:52:8a:16:f1:b3:6b:62:
1d:cd:55:ed:c0:43:3a:10:19:b9:85:75:8c:28:40:
d3:aa:00:56:0d:1d:14:f9:95:f2:04:50:d4:63:4e:
07:c3:a0:43:21:a8:4c:73:4b:65:d0:22:c9:2a:71:
2a:db:49:4e:aa:14:ba:f0:9c:31:eb:7f:5b:95:ee:
0a:10:f1:59:db:93:44:d9:9e:5b:04:0a:e3:51:21:
f5:0c:35:f3:1d:82:d5:f4:70:40:d5:8a:35:e7:f5:
76:66:4c:05:0f:82:73:94:35:1d:64:7c:d7:59:99:
39:20:4d:da:5c:8c:15:1f:4e:1f:6c:66:b1:b7:b3:
30:13:0e:ef:49:da:e6:f0:73:3d:6a:51:6c:a1:6f:
35:8a:70:09:46:27:06:36:38:4b:6a:9c:bb:08:01:
91:76:3b:b5:50:ec:8c:f8:4b:d2:18:bf:22:1d:6d:
6e:58:9e:4a:24:a6:9a:fe:ea:e4:ca:39:8c:57:2a:
16:3b:bf:c1:f8:36:5f:c9:08:f0:35:8f:f8:38:f0:
e0:be:72:02:9f:73:04:23:9e:15:86:18:2a:04:67:
68:50:04:d1:fe:64:57:e2:8e:db:ff:33:49:6a:cf:
da:68:da:56:88:99:f2:e3:e4:e6:1e:ca:57:5c:be:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D7:88:A1:4E:F1:C8:99:54:1F:61:AF:7F:52:DC:63:A4:9F:1E:3D
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:09:b0:d4:b9:fb:e3:78:47:c7:41:2a:7e:c4:92:89:90:04:
58:89:03:73:e2:d0:08:4a:42:26:a4:08:5a:fe:46:67:f6:06:
9f:47:47:2c:9c:d1:e5:ac:fe:4e:c2:a2:47:c1:11:66:51:a8:
99:6c:1d:7c:31:e9:89:e7:3f:8a:15:f4:e9:85:2e:d3:7d:f7:
d6:ad:37:b8:d2:71:30:7b:9d:8f:77:8a:8a:e5:d7:9e:d0:fb:
5f:27:b5:cb:1a:e9:39:70:6f:a6:13:7e:f2:cc:bf:f5:ed:07:
b7:ba:25:e0:0a:49:98:7f:97:03:6a:eb:d1:38:02:f6:25:b3:
0e:7e:67:e7:ce:9d:ce:34:61:7b:4d:a8:b8:ff:f7:e3:3a:30:
e6:9f:fe:8b:bb:9b:10:e5:a1:90:22:96:25:7f:08:cc:8d:0b:
f5:f9:18:73:b3:88:e1:0f:d8:ae:2a:10:70:6e:bc:6b:43:52:
f1:38:45:b0:e8:45:95:fb:15:31:ae:ff:c7:a8:fa:71:0f:04:
b6:f4:c6:57:43:0f:b5:70:b6:df:3f:f0:1a:8f:d2:c2:21:b9:
32:9d:6d:c6:95:ad:6f:f0:02:0d:38:c8:64:55:78:d9:9a:2c:
0d:40:28:5e:7f:65:27:10:f4:d2:c2:66:1c:32:d5:7c:1b:dc:
62:3f:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:11:33 2026 by rpki-client