Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: xWvJSwCySJmwqzoxsjmvi/qskMcTWyFoDjbUsSCUUBA=
Subject key identifier: FC:5F:5F:97:FD:B0:46:E5:26:A3:4E:F8:0A:AB:A2:BC:1D:3C:68:B4
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 01A16B6D4AB62631AD542F512BEDA37E1CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 143D
Signing time: Sat 24 Oct 2026 01:01:26 +0000
Manifest this update: Sat 24 Oct 2026 01:01:26 +0000
Manifest next update: Sun 25 Oct 2026 01:01:26 +0000
Files and hashes: 1: PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa (hash: uNWAi4ypu2U7vKEwyptJEE3BsJukgPqN0/lL7CgpehE=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: WFNO/REqczfFx9UFAWli8CXODeW7fM4pQrWDtGGIUww=)
3: bNsvbdSJD0WI7Ewm9hgAe8yTIz4.roa (hash: fjVFQSNrjHzCOHsMITQUOhjzFotcFBmj0QqIbMKaS7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:6d:4a:b6:26:31:ad:54:2f:51:2b:ed:a3:7e:1c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Oct 24 01:01:26 2026 GMT
Not After : Oct 25 01:01:26 2026 GMT
Subject: CN=fc5f5f97fdb046e526a34ef80aaba2bc1d3c68b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9e:ff:62:32:34:a8:d3:9e:8c:fa:e9:e3:60:
57:d1:c4:76:91:3f:38:96:b0:2a:e1:b4:f5:70:8a:
3a:d5:a8:7c:0c:5c:e6:3f:b8:1d:7a:98:3f:27:fb:
41:6e:17:14:64:2f:7c:b1:9e:c4:3d:7a:e5:ff:28:
f9:1b:23:a3:a0:b5:90:ba:3e:a7:d7:5d:20:d1:0b:
f4:f5:78:5b:63:16:fe:a7:8f:28:23:e2:06:b1:79:
12:3e:af:63:3b:3e:c3:6c:c8:6b:d9:fc:33:79:54:
79:dc:00:c6:b6:c7:13:ef:0e:bd:fa:26:06:15:a2:
9f:92:37:d5:11:0d:36:96:88:c9:1a:67:06:b5:5c:
ff:4e:23:59:f2:d1:05:21:3b:bf:60:a2:c2:b0:c1:
e8:0c:84:5a:3f:f6:1a:bb:66:46:a8:f6:91:64:b7:
e1:3a:01:46:7c:2b:74:0c:1f:d1:68:ad:c2:a3:73:
f4:46:8d:1d:7d:1d:e7:7f:c1:e9:95:27:96:17:a3:
f9:a0:0f:84:20:76:33:df:52:55:d3:c8:75:4a:1d:
3a:e2:64:fa:cb:e9:d3:06:6c:da:fd:89:ba:7a:d7:
e9:fb:71:1c:75:d7:82:bd:90:d0:9a:6b:ee:ac:54:
e5:33:21:f7:8c:5e:e2:2f:17:6e:ce:62:27:72:69:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5F:5F:97:FD:B0:46:E5:26:A3:4E:F8:0A:AB:A2:BC:1D:3C:68:B4
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e3:3d:c3:d2:60:81:69:a8:85:9f:15:46:99:0d:f5:cc:89:
14:e0:72:eb:95:ee:81:20:60:a5:d9:ff:e1:b5:71:88:44:ba:
df:48:91:fd:f5:28:61:a1:f3:6b:ea:e5:d2:cc:56:47:14:a0:
4f:d0:27:f5:ff:81:af:c2:26:e2:b2:40:44:38:a0:be:b9:fb:
eb:ce:0d:3e:03:06:45:c1:b8:7f:75:2f:83:00:3c:02:48:62:
47:2b:8a:e3:81:29:27:53:ff:45:e0:41:72:da:34:d5:d1:10:
14:a1:8c:17:02:7d:2a:0c:06:e0:89:b4:60:0d:eb:fa:f1:66:
67:78:1c:2d:a1:4d:96:71:8c:b2:82:19:b6:6d:5c:de:e4:16:
52:39:5d:83:10:61:78:73:ec:0a:69:cc:74:9f:44:8a:63:35:
d2:23:f9:a0:24:97:6f:31:7a:27:c6:d4:8b:ff:57:e0:ce:a6:
7d:05:9b:f6:4b:43:c1:9b:ce:b2:8b:00:a9:b3:43:04:e1:32:
0a:d0:d3:54:db:32:74:96:e0:fa:45:ef:95:11:b7:5d:55:4c:
a3:2e:c3:31:a2:f8:a9:22:e0:52:1f:cf:3b:af:d9:f1:4b:b4:
2e:c2:1f:2e:f5:3d:ec:e6:be:91:4e:0b:bf:c6:de:6b:7c:1e:
af:7d:c5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:22:23 2026 by rpki-client