Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
File: AF8NRLIh9LEcidtolp-Xw8cVSQY.mft (raw, json)
Hash identifier: OuXovpQypni5VMSfVLed8hct92xE5uI0l6FPXk0674M=
Subject key identifier: 85:47:B4:10:95:31:4A:8A:4F:59:DC:2B:E0:CB:2F:B5:2C:23:5C:E7
Authority key identifier: 00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
Certificate issuer: /CN=005f0d44b221f4b11c89db68969f97c3c7154906
Certificate serial: 019FA485DC02C4005E597EBBBC5A2C4123F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 17:01:03 +0000
Manifest this update: Mon 27 Jul 2026 17:01:03 +0000
Manifest next update: Tue 28 Jul 2026 17:01:03 +0000
Files and hashes: 1: AF8NRLIh9LEcidtolp-Xw8cVSQY.crl (hash: 27VSEpP9mi5AOhyMr6VR7+cR9H4Z2E9w0AggaG+d20Q=)
2: kJQsI98iVa9ZD7yxoQppC6FP-XY.roa (hash: DqgDfqLMHMB6Ed3JqGpWQxjC4rt/X0IDDmE+DZGx1YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:85:dc:02:c4:00:5e:59:7e:bb:bc:5a:2c:41:23:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005f0d44b221f4b11c89db68969f97c3c7154906
Validity
Not Before: Jul 27 17:01:03 2026 GMT
Not After : Jul 28 17:01:03 2026 GMT
Subject: CN=8547b41095314a8a4f59dc2be0cb2fb52c235ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:90:6e:2b:47:f7:12:58:7b:ef:4e:2e:c2:
a6:79:c7:c5:a8:76:b6:95:e6:6b:97:13:58:cb:d4:
6e:b1:56:42:ae:66:7c:53:b1:1f:22:25:ef:e7:a3:
f3:db:2a:97:00:a2:3a:fc:f7:bc:27:a1:c8:3c:1e:
33:3d:c0:09:b0:5e:82:28:f8:5e:44:c1:38:d8:70:
5f:2a:db:0b:e7:17:a1:50:cc:17:8a:42:e4:21:0d:
aa:cf:ec:47:c9:43:15:b1:13:c3:57:6a:79:55:30:
08:3f:0c:ac:bf:9e:3a:de:1c:4e:70:b0:83:18:fd:
96:71:1e:9d:54:72:39:48:0a:d2:71:68:39:7d:60:
18:92:13:b3:e3:7f:8e:9c:84:ec:0e:70:64:3a:4d:
3c:ca:e9:09:f1:62:b6:68:82:8e:f7:60:9a:23:68:
58:82:bf:c8:1d:0e:26:5c:52:57:90:fe:2a:53:b9:
86:91:cb:27:d4:09:8d:d1:69:dd:d0:a9:f3:33:ff:
a5:dc:c9:60:9f:0e:d9:6d:79:80:b4:57:ba:30:ad:
68:b1:ab:f3:db:62:19:35:31:fd:59:45:34:99:4d:
95:d7:31:12:18:94:96:9b:87:2d:11:ae:50:ef:10:
a7:d8:75:fc:79:25:7e:c7:c2:a2:14:14:3d:08:65:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:47:B4:10:95:31:4A:8A:4F:59:DC:2B:E0:CB:2F:B5:2C:23:5C:E7
X509v3 Authority Key Identifier:
keyid:00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8b:61:1d:0e:b8:79:d5:8c:ac:e9:69:39:bb:8a:43:e5:90:
c8:03:60:de:5e:f4:88:63:87:e2:5f:46:59:b8:60:ce:5d:11:
89:71:5a:fa:50:b8:3d:26:1c:cf:f5:c0:2a:b7:ff:47:ab:e7:
76:ab:a4:a2:97:d9:67:d4:b2:3a:70:e2:82:e8:e3:b3:c3:52:
8c:c6:92:eb:b5:80:83:16:e3:fa:31:9d:2b:92:fd:62:3e:ca:
ec:22:91:36:60:98:8a:98:b1:63:46:bd:74:08:b9:b1:80:38:
a7:7d:30:d6:b1:78:a5:e8:b3:c0:a7:a3:a8:63:a5:2c:4a:4b:
79:8c:3c:51:c8:20:43:e3:d1:2f:31:3b:0f:40:41:de:3d:c5:
c6:33:b8:2d:8b:0a:2e:ae:0e:56:0c:a4:3d:98:9d:83:2b:fc:
77:75:88:a5:1f:5a:96:4f:e2:26:87:ad:87:1b:64:12:4b:50:
bf:e5:7c:59:40:7b:50:1a:e9:97:9b:f2:e4:6d:cb:39:c2:c5:
60:21:3a:0e:50:77:7c:fa:e4:4a:22:a3:cc:5a:1c:5a:0a:54:
cb:7f:98:c1:ef:84:e4:0e:e0:df:04:42:f6:bd:92:01:d9:c9:
53:7a:59:c3:99:96:05:3e:cb:d4:d8:39:03:ad:5d:0e:2f:c0:
79:4e:6f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:15:51 2026 by rpki-client