Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier: fJXiRXQZ1L2WLo9kvRrF4mKFB0tZN/OnBjnkxqeydT8=
Subject key identifier: AC:D0:34:5F:42:ED:71:8E:53:4E:21:47:57:12:06:98:EA:BD:EB:4B
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 019DCD4F938D10C3747ADC58B791248A8D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number: 18FE
Signing time: Mon 27 Apr 2026 05:00:37 +0000
Manifest this update: Mon 27 Apr 2026 05:00:37 +0000
Manifest next update: Tue 28 Apr 2026 05:00:37 +0000
Files and hashes: 1: 3lE-OFcZg5HBfiXy0gupENM3iyk.roa (hash: bLLbFDCXQ+hwG1ZI2hchMxCwkBA94qpajMIUIPVAa8Q=)
2: 3yN1WaImxLytELQ8orv8zRs2JTc.roa (hash: xMQ9DHu/OHk2/N1Hs4FxQtyh2D3+E7jpj/gCToK104o=)
3: 6tH2d7DuA0R1l2Pidcpu6hElWDI.roa (hash: CfNi98riUNvkPkY0puJ/adG9NQhrM30w+euigtAJ/Sw=)
4: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: LMfHkguc5uhxs20MmDcwWoNPIPWdYLv8cvP7zfBC1CI=)
5: TzbPsDZ-cxzqjv8-LwUqnZiNDVA.roa (hash: Fw/wCqm5ct+1+LFhxRHPMU/lUojt4L4OVaEyFt+zO+s=)
6: ddUJNLSqBtnSmNldI4m1ICrrXaA.roa (hash: 3+OVO0aN+wd5+fw851/RNy2HHQdglPinsg8QGb8dxQo=)
7: eJhW9z5ku9_qhNiO6iw_ATXoEHw.roa (hash: EPkgNIk6bKUUZeeYQssHTaftEyd1+IqUJt3qVX40j0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:4f:93:8d:10:c3:74:7a:dc:58:b7:91:24:8a:8d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Apr 27 05:00:37 2026 GMT
Not After : Apr 28 05:00:37 2026 GMT
Subject: CN=acd0345f42ed718e534e214757120698eabdeb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:2a:2c:9a:d4:c3:a0:c2:cf:cf:2f:a8:25:
8b:07:02:4a:be:0d:31:02:8e:cf:5e:f0:44:32:d7:
f4:36:88:82:2e:e2:c7:08:2a:c9:8f:2c:d7:b3:22:
df:29:bb:a1:10:0d:dc:60:21:79:36:72:33:4f:4f:
5f:6e:01:ae:01:6e:1e:2a:ba:b3:b2:5a:2b:37:b9:
48:4d:b5:55:b9:45:85:a9:68:7b:d5:5e:6c:13:af:
96:ef:fb:27:11:9b:04:2b:0c:7a:33:f0:a3:22:6b:
c4:54:7a:8c:43:2e:d7:74:2d:4e:4f:97:e6:c4:ba:
61:76:df:41:4e:eb:38:f4:94:3a:89:d1:5d:eb:ba:
12:c3:13:ec:74:5a:32:01:95:b1:3f:31:85:f1:01:
7b:39:35:35:e8:50:92:02:a8:b5:2e:ea:79:01:a9:
5f:20:16:b5:fb:a6:96:72:3b:9f:30:36:5b:8c:f9:
c1:9b:a9:b0:27:62:06:aa:d0:99:b5:0f:1d:11:2e:
55:76:55:c1:89:62:c9:c0:9a:c8:8d:76:33:76:59:
66:bd:d6:81:4e:b8:e3:b7:52:44:94:26:e7:e1:ae:
93:27:46:75:9b:e5:c3:3f:7c:ac:52:61:9f:d0:be:
50:13:74:fa:09:27:21:4b:15:49:6e:e7:b5:e8:8f:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D0:34:5F:42:ED:71:8E:53:4E:21:47:57:12:06:98:EA:BD:EB:4B
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b8:7a:af:c8:a5:d0:8b:14:6d:fd:c0:34:fc:6b:8a:3f:0f:
f3:f1:10:77:2c:6d:da:48:45:d1:05:c8:43:95:e1:35:f3:7d:
18:e6:61:30:4e:ec:6e:d3:c3:07:c9:14:08:27:4f:90:05:7c:
63:86:f5:bf:91:ee:08:b7:a4:8c:90:3f:ac:75:5d:43:92:0e:
ef:2b:93:ca:52:bb:9a:39:a2:cc:18:d6:07:76:78:2d:4c:ce:
75:68:b1:e3:55:84:76:2b:3d:58:8f:9d:15:99:b9:b0:21:52:
26:a8:34:08:36:ff:12:90:02:23:12:71:9d:cd:d8:f8:91:8f:
ee:f4:dc:b2:e9:75:f0:c5:42:b7:3a:e3:76:78:0a:68:54:51:
8a:0b:8d:7d:81:b6:65:85:d4:32:35:f6:f5:07:bd:96:54:d8:
f5:09:72:e3:77:c0:5f:04:08:3d:bf:00:ac:50:f9:43:f3:f7:
9e:dd:6c:ee:96:fe:94:d7:9f:0d:11:de:74:72:00:16:b3:2d:
c6:31:52:d8:62:96:d5:95:aa:04:be:58:c5:a0:62:ab:d3:47:
92:a3:d7:51:5e:96:8f:83:0b:f2:55:96:bc:ff:6b:e2:50:13:
7b:fd:b9:55:13:4d:60:f0:02:fb:90:ce:db:aa:3e:8f:44:27:
22:2f:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:08:45 2026 by rpki-client