
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier: u7hc2weegTu0kJ2d9g7tUO6v+DYbQ/G35L72MhBf460=
Subject key identifier: 0C:FD:E0:94:47:A9:32:AF:1D:83:67:01:AA:C1:8F:06:DE:F4:0E:AC
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 01A185635AC8D683A79C562CED2903BB27C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number: 1AEB
Signing time: Thu 29 Oct 2026 02:00:43 +0000
Manifest this update: Thu 29 Oct 2026 02:00:43 +0000
Manifest next update: Fri 30 Oct 2026 02:00:43 +0000
Files and hashes: 1: 3lE-OFcZg5HBfiXy0gupENM3iyk.roa (hash: bLLbFDCXQ+hwG1ZI2hchMxCwkBA94qpajMIUIPVAa8Q=)
2: 3yN1WaImxLytELQ8orv8zRs2JTc.roa (hash: xMQ9DHu/OHk2/N1Hs4FxQtyh2D3+E7jpj/gCToK104o=)
3: 6tH2d7DuA0R1l2Pidcpu6hElWDI.roa (hash: CfNi98riUNvkPkY0puJ/adG9NQhrM30w+euigtAJ/Sw=)
4: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: 1A1rLhX4D3kBtAUX+lk6k6hDE9mItPE8xIw64LywEeY=)
5: TzbPsDZ-cxzqjv8-LwUqnZiNDVA.roa (hash: Fw/wCqm5ct+1+LFhxRHPMU/lUojt4L4OVaEyFt+zO+s=)
6: ddUJNLSqBtnSmNldI4m1ICrrXaA.roa (hash: 3+OVO0aN+wd5+fw851/RNy2HHQdglPinsg8QGb8dxQo=)
7: eJhW9z5ku9_qhNiO6iw_ATXoEHw.roa (hash: EPkgNIk6bKUUZeeYQssHTaftEyd1+IqUJt3qVX40j0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:63:5a:c8:d6:83:a7:9c:56:2c:ed:29:03:bb:27:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Oct 29 02:00:43 2026 GMT
Not After : Oct 30 02:00:43 2026 GMT
Subject: CN=0cfde09447a932af1d836701aac18f06def40eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:b7:f5:9f:25:8c:4e:8b:50:0d:9a:b2:56:
51:27:da:43:53:31:97:23:24:51:88:49:58:dd:47:
8d:45:af:6c:5a:01:24:3e:2e:80:66:07:4a:41:de:
6a:0a:f9:4f:b0:f4:3e:3f:9c:75:e3:98:8e:37:97:
cd:02:bd:89:9f:40:e5:45:00:69:fb:3e:1b:8b:27:
21:79:87:ca:e9:ac:39:87:8d:d4:08:a0:88:6f:c2:
e9:c5:78:41:14:dd:44:d6:7b:f2:82:1a:a2:a4:26:
8c:8e:fe:46:aa:d7:79:a0:b1:55:ca:b4:fd:df:7a:
fb:46:18:32:5e:bd:39:ac:cc:e0:e3:76:b3:cf:1b:
26:8c:a7:40:49:91:31:f0:a7:0e:52:35:35:f0:e7:
4c:bb:21:3a:a9:ad:88:56:09:3b:5a:8d:ab:22:1e:
6a:07:88:5c:3b:5c:24:90:46:2b:76:4c:e8:b5:0d:
83:df:50:88:a6:86:c3:45:01:6a:fa:58:95:d9:85:
fe:22:ed:9a:c2:28:38:3d:96:82:bc:d0:31:07:e5:
a5:b4:c4:cf:5b:b9:7f:42:68:de:1c:23:0f:a3:d3:
09:b5:0d:34:36:f2:23:e2:d6:bf:85:8e:e1:c8:1a:
3c:45:2f:77:03:3a:e0:3f:44:75:24:8c:64:73:9c:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FD:E0:94:47:A9:32:AF:1D:83:67:01:AA:C1:8F:06:DE:F4:0E:AC
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:69:f8:5b:4a:6d:22:6e:a1:5b:03:61:2d:79:25:91:22:0f:
aa:cf:71:15:e5:5c:61:87:d8:97:f6:a3:a4:c7:57:55:b8:63:
43:81:42:0f:bb:6f:2b:cb:5f:b5:d8:89:53:d4:e0:4e:40:8d:
fe:c0:e3:82:a5:2f:2c:fb:4d:11:dd:1c:36:2c:19:ce:d6:4e:
ad:30:7b:26:34:e2:3d:c7:fa:cc:cc:13:14:e0:07:2e:f3:6c:
fc:46:84:8b:a7:de:1b:08:83:20:0e:33:8b:25:b9:90:a2:0f:
c5:a4:34:8b:87:b4:78:9b:16:a8:56:64:f7:0a:1d:6d:b5:be:
1d:5f:d5:4c:3f:bc:a0:2c:b6:9a:da:ad:2f:77:f7:9b:e9:25:
59:55:f1:c9:04:8f:35:55:95:e4:79:80:b5:7b:49:84:c0:34:
a1:0c:c9:28:85:8c:ec:99:7a:53:0d:73:09:b5:c1:ac:9f:be:
b1:15:fb:3a:c0:7a:e9:2a:24:a6:d4:be:66:84:68:6f:38:1e:
63:23:39:0b:01:a9:a7:87:b5:17:51:92:1f:a4:1e:58:72:c1:
74:ba:81:d3:fe:c7:26:5b:bc:d9:c2:ae:1e:8a:ea:1d:b6:72:
38:a1:60:73:61:bc:ce:ff:c4:70:0c:fe:fb:de:22:92:a9:b7:
2d:5b:05:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:48:19 2026 by rpki-client