Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: rKC2oqWybuLtVwP3e5NoEwn1D2e9IfisbpfnZRZMV8A=
Subject key identifier: BF:28:8C:00:AA:CD:1D:69:D2:64:C6:26:F4:8E:3B:3B:CE:1C:3F:46
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 01A06E70B2015219BD33CF5922B03C4DF12A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 13BA
Signing time: Fri 04 Sep 2026 22:01:14 +0000
Manifest this update: Fri 04 Sep 2026 22:01:14 +0000
Manifest next update: Sat 05 Sep 2026 22:01:14 +0000
Files and hashes: 1: PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa (hash: uNWAi4ypu2U7vKEwyptJEE3BsJukgPqN0/lL7CgpehE=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: hGNMN3n2IHCZ5VpcScdruukZFgxk+CEkP1gub4Ums9E=)
3: bNsvbdSJD0WI7Ewm9hgAe8yTIz4.roa (hash: fjVFQSNrjHzCOHsMITQUOhjzFotcFBmj0QqIbMKaS7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:b2:01:52:19:bd:33:cf:59:22:b0:3c:4d:f1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Sep 4 22:01:14 2026 GMT
Not After : Sep 5 22:01:14 2026 GMT
Subject: CN=bf288c00aacd1d69d264c626f48e3b3bce1c3f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f9:2a:c5:8d:ec:ff:9f:07:c0:43:be:2b:8f:
f5:f6:15:86:06:e9:03:11:31:a2:42:c6:96:e7:dd:
7c:49:f3:d8:68:e6:8f:68:36:35:f9:da:98:d4:4e:
b0:f9:82:2a:f5:5e:87:5b:a5:78:01:d8:ea:64:f9:
3c:0e:ed:19:f2:73:4c:7d:9e:21:3f:d9:98:23:ba:
ab:83:b8:6c:82:53:de:4b:95:36:b4:d3:11:9d:9e:
82:19:fd:e5:82:de:5d:27:c5:a2:f8:9b:4a:6b:56:
22:f3:e5:3b:c6:e6:db:af:ed:99:5f:52:cf:8d:bb:
ae:c3:b1:2f:1b:15:58:0b:74:fa:d3:29:0b:79:2f:
85:85:05:d2:b6:27:5c:09:7f:49:3b:21:1a:2a:11:
fc:02:e4:00:2b:62:56:1d:5e:91:a6:31:96:0e:d3:
7b:f2:1e:82:0a:2b:bb:44:38:19:38:c6:8e:b0:29:
e8:2c:65:9c:54:6e:bd:aa:98:51:14:2d:16:17:a7:
2a:eb:8a:3c:8a:5d:87:1b:b2:76:7e:68:f1:9f:d0:
87:94:46:e6:f1:98:8d:19:e6:f9:ae:0b:35:5b:7d:
08:84:c0:89:c6:ca:01:4b:43:b2:10:fc:bd:95:17:
dc:0a:35:3f:b6:79:d1:6f:bf:55:03:9f:dc:bb:82:
7a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:28:8C:00:AA:CD:1D:69:D2:64:C6:26:F4:8E:3B:3B:CE:1C:3F:46
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:38:b0:ce:49:bf:9b:24:41:fd:83:a6:1b:61:10:a2:40:b0:
e5:43:00:d9:a8:ec:cd:83:be:46:e6:1e:dc:08:72:a7:c8:5d:
1a:fe:7a:fe:ac:93:b3:5c:aa:51:10:fc:1d:3c:d3:2b:0e:f0:
61:90:7f:9c:70:84:80:11:c3:28:c5:98:9d:81:f1:4a:90:cf:
33:e7:e4:5b:88:fc:74:d7:3c:14:42:5b:14:dc:43:4a:93:49:
9d:68:d1:15:6b:76:fe:69:fb:3c:21:3c:54:46:61:2d:69:71:
cf:f7:80:a3:24:37:8e:b4:ac:b2:36:a6:6e:ac:52:14:26:5d:
fa:f7:67:9e:2d:1e:db:7a:ba:85:ff:2d:06:46:06:82:c6:c1:
0c:1e:d7:fb:eb:55:23:0e:99:00:cc:4b:bb:62:ae:9d:f0:85:
10:ff:71:7c:7a:47:5c:8d:92:0a:87:30:87:c0:f2:9f:aa:ee:
e8:f3:08:70:38:c2:7b:10:eb:db:23:df:70:24:74:12:2c:f2:
ab:f8:b6:a9:50:3b:1a:06:f7:1a:f9:ba:34:0b:b0:87:19:f2:
48:2e:03:a3:52:50:87:72:44:47:b6:b9:e9:a4:f9:40:f2:22:
6b:e6:46:23:fe:dd:79:32:46:9a:7b:44:c2:54:6e:fc:a1:40:
45:4d:7e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:52:44 2026 by rpki-client