Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
File: afjrNm_GyKCb-xQPFQX57GddQuQ.mft (raw, json)
Hash identifier: RrFqf++O1NCLXbf7Ft9Aj94hIz1nxMqX/NKSS9ZNeWw=
Subject key identifier: 2E:AB:DC:9E:35:7C:EB:4F:AA:9B:A2:09:1A:23:99:24:95:F4:91:6F
Authority key identifier: 69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
Certificate issuer: /CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Certificate serial: 019D3865A5B923D1E3EA64F50879145D75E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
Manifest number: 0B63
Signing time: Sun 29 Mar 2026 07:01:18 +0000
Manifest this update: Sun 29 Mar 2026 07:01:18 +0000
Manifest next update: Mon 30 Mar 2026 07:01:18 +0000
Files and hashes: 1: afjrNm_GyKCb-xQPFQX57GddQuQ.crl (hash: +3H1SLOA4RpEUFNKazsbd8N/3wG/P1T74riFRYyCBWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a5:b9:23:d1:e3:ea:64:f5:08:79:14:5d:75:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Validity
Not Before: Mar 29 07:01:18 2026 GMT
Not After : Mar 30 07:01:18 2026 GMT
Subject: CN=2eabdc9e357ceb4faa9ba2091a23992495f4916f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:8f:f9:3b:cc:5e:ba:00:6c:6f:2c:b3:d6:
74:3d:2e:fc:98:3d:de:bc:8c:58:62:1e:06:c3:9c:
8b:ba:2b:b3:1d:99:0b:d4:e9:6b:a1:87:12:05:85:
70:4c:cb:df:71:d9:77:e2:fc:09:de:9e:b6:8e:b8:
1a:83:b6:a7:c0:86:90:d1:2d:65:05:d5:67:04:c7:
bf:ad:51:8f:e0:19:a6:bd:8c:84:81:f0:f1:83:b7:
5b:c8:68:11:84:d9:23:81:0f:cb:eb:0b:75:76:96:
78:28:f7:cb:e2:29:e5:92:7a:5c:c6:03:a9:e3:58:
e6:bb:85:a2:de:53:77:b3:02:82:c2:af:60:3b:df:
12:5f:7c:09:89:d4:e3:68:e1:39:f8:f3:eb:21:a4:
c3:7b:0a:15:d8:19:10:fd:24:0d:61:ab:09:d2:e6:
1d:a6:63:fa:de:ad:31:f6:46:f3:bc:1d:b2:24:77:
4c:a0:4f:e1:3f:10:6c:89:cb:57:3f:39:0f:83:01:
22:0a:de:fa:47:02:46:db:a5:d4:ad:4a:95:fd:6d:
e3:04:cd:00:cb:de:1b:1c:b0:d3:9a:01:dd:19:f9:
c5:a5:f2:9d:3c:0a:e3:fe:ad:5d:23:18:f8:e8:18:
ff:56:b6:19:e2:27:07:3e:fa:76:04:3c:5c:78:d4:
a2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AB:DC:9E:35:7C:EB:4F:AA:9B:A2:09:1A:23:99:24:95:F4:91:6F
X509v3 Authority Key Identifier:
keyid:69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c4:ec:bf:09:ea:5e:06:f7:5d:c5:85:f6:b4:5e:a6:25:26:
1d:18:f0:09:1c:31:d4:50:97:14:26:b8:dd:05:18:f9:3e:93:
31:b1:a3:5f:70:16:7a:3d:11:88:b0:64:50:23:d6:f3:92:2f:
b9:95:99:97:6e:1b:f0:d1:45:04:56:27:a0:89:88:94:ec:d4:
e4:c5:d5:07:83:55:25:2a:95:69:ac:03:94:df:0d:85:7e:c6:
be:0e:57:f2:71:1e:86:50:8c:c8:66:68:e0:d3:e2:1e:a0:5b:
06:a9:33:ed:1a:21:69:7c:ea:4b:3c:39:2b:0d:3e:ad:9f:80:
3e:d0:11:2f:3f:38:fc:22:ed:01:ee:2f:1b:27:c4:de:ae:98:
8e:4e:37:5d:1b:f9:5f:37:b6:b0:c6:d7:c1:e7:72:38:9f:a8:
de:dd:18:c8:c8:e0:ce:72:24:83:13:63:4c:41:2b:cb:85:a4:
0c:a1:69:65:ea:ad:84:92:cd:c7:86:df:dd:73:aa:c2:91:06:
78:4a:c1:30:1e:55:ca:5d:60:17:8e:fb:95:45:86:e2:b8:b6:
9d:b3:4b:12:c7:87:73:22:7b:e8:45:ee:6c:9c:fb:b4:e0:43:
af:47:b6:77:aa:67:99:b4:bd:9a:00:bd:bf:9d:c1:5f:d1:37:
b8:0b:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:07 2026 by rpki-client