Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
File: AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft (raw, json)
Hash identifier: NCCp9YbdauFI2D1ftgyGO2FkW8k4gRZBNQVNJ+bJFs8=
Subject key identifier: B7:8C:2E:F5:E8:18:88:86:E3:3F:B9:AF:8D:BB:51:FC:D8:A4:3F:1E
Authority key identifier: 01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
Certificate issuer: /CN=01f10a032279133d6d64c82531435e5787d11d6b
Certificate serial: 01A0DD988C7A84A0508BD4D0527608396776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:02:37 +0000
Manifest this update: Sat 26 Sep 2026 12:02:37 +0000
Manifest next update: Sun 27 Sep 2026 12:02:37 +0000
Files and hashes: 1: AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl (hash: VFWYuUQgtpzaTQGx8sohiHY8RSGs2vRFWKdNJYKZH9c=)
2: ZPzCvvAXDEp6OpHBb8rDqpV1VBA.roa (hash: wVo6gN+qFZsAuQseg3rAQsoqV8pB36JzHJHizR0u3Ok=)
3: n_bUUF63fJyO6RE2_6rFYsd7xOk.roa (hash: zlA1EVISGpvLZV/DjqWIFdyGMaWRDEbajyuByb/cvqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:8c:7a:84:a0:50:8b:d4:d0:52:76:08:39:67:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f10a032279133d6d64c82531435e5787d11d6b
Validity
Not Before: Sep 26 12:02:37 2026 GMT
Not After : Sep 27 12:02:37 2026 GMT
Subject: CN=b78c2ef5e8188886e33fb9af8dbb51fcd8a43f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:da:7f:3a:2a:55:42:ce:05:ca:37:68:7e:ae:
a7:be:ea:81:8c:2d:be:a3:a4:b1:96:84:d7:41:5e:
24:4f:ee:cc:87:2f:ac:51:8e:da:eb:47:12:77:10:
8b:b2:7a:85:2e:cb:e6:31:ca:84:9b:de:36:df:6d:
85:c7:c2:2f:20:8f:2d:22:ee:8b:19:d6:99:c6:cd:
8c:21:31:df:88:8b:86:0e:f3:25:2d:3a:61:cb:f7:
cd:b0:20:13:47:7d:79:02:76:0b:8f:42:53:af:79:
c3:d8:42:8c:68:31:30:53:db:d9:91:f0:f5:7c:8b:
69:ab:73:eb:2d:fb:a1:d3:d4:97:9d:c6:07:1e:35:
18:a5:9c:44:e3:d2:bf:52:fe:fb:b7:c4:8b:c2:26:
41:b8:a7:c7:a8:8c:a3:48:fc:52:a9:1a:79:9e:64:
a1:17:bc:1f:7c:3e:8a:ca:39:a4:dc:84:84:86:70:
65:fa:6c:f9:64:e9:1f:4d:95:9d:1b:d9:bf:f5:b8:
db:73:c8:86:5f:72:61:2e:a0:b9:17:fb:e8:41:38:
a1:31:be:fd:20:e4:94:8f:fa:bf:b1:e7:d3:e9:7a:
3d:cf:c9:7d:fb:34:67:a3:2b:21:de:f4:c7:14:32:
91:e7:97:1c:ef:70:d9:3a:c7:6c:9f:f8:fc:38:31:
08:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8C:2E:F5:E8:18:88:86:E3:3F:B9:AF:8D:BB:51:FC:D8:A4:3F:1E
X509v3 Authority Key Identifier:
keyid:01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b7:9e:5c:ca:05:fe:04:03:78:07:7b:92:a6:c9:f1:f7:20:
b8:42:77:c0:d3:da:d0:24:63:b0:e9:84:8f:84:ef:38:d8:cb:
1e:e5:87:81:49:ac:14:c0:84:f2:63:12:6c:23:7b:01:f0:f7:
62:00:d6:8a:63:12:f1:2c:e7:66:e8:1a:79:e4:ee:24:8d:c6:
2c:fa:1d:f9:a6:33:a6:f8:a8:99:fc:21:66:87:e9:e4:fa:ec:
9b:95:bf:bc:bb:71:31:0b:48:c9:4d:33:66:c8:3d:ef:a8:e0:
27:0a:02:88:db:e0:df:bb:70:05:5e:b5:3d:5f:69:75:31:ee:
22:94:40:11:82:a5:b3:62:2b:fb:cf:15:24:e5:28:dd:23:82:
f9:6e:64:28:11:a3:7b:ec:c6:7e:8f:cf:bb:49:fe:55:6a:c0:
bf:60:64:b3:c3:c1:a5:33:ab:95:ef:1e:78:90:64:60:cb:34:
45:21:04:48:9b:de:17:81:d3:c6:82:d9:1b:05:75:46:93:b8:
ab:be:e6:15:6c:90:b3:f6:71:d7:ec:ab:e1:90:3c:23:43:ba:
1e:71:e2:a7:79:58:d4:77:30:12:04:f9:ff:22:d9:29:8b:a2:
e1:43:fa:96:31:9a:a1:f0:57:b4:4a:24:1d:a7:47:d4:46:c4:
6f:40:e4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:38:13 2026 by rpki-client