Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
File: AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft (raw, json)
Hash identifier: wmCzWJcWiohaYs6CAgNzPVz9ov4n4zeVPlAVMxrRA7w=
Subject key identifier: C5:4F:62:AE:30:70:3E:5F:0C:E6:9C:2A:65:26:D3:8B:FD:F1:B0:D9
Authority key identifier: 01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
Certificate issuer: /CN=01f10a032279133d6d64c82531435e5787d11d6b
Certificate serial: 019FDACFAFE1B9A760F1CF81007194DBCF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
Manifest number: 66
Signing time: Fri 07 Aug 2026 06:01:11 +0000
Manifest this update: Fri 07 Aug 2026 06:01:11 +0000
Manifest next update: Sat 08 Aug 2026 06:01:11 +0000
Files and hashes: 1: AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl (hash: nn/PgUfa1Hl7g0hV3euHn+om/a/Ule4Yc9fUhfXkq/Y=)
2: ZPzCvvAXDEp6OpHBb8rDqpV1VBA.roa (hash: wVo6gN+qFZsAuQseg3rAQsoqV8pB36JzHJHizR0u3Ok=)
3: n_bUUF63fJyO6RE2_6rFYsd7xOk.roa (hash: zlA1EVISGpvLZV/DjqWIFdyGMaWRDEbajyuByb/cvqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:da:cf:af:e1:b9:a7:60:f1:cf:81:00:71:94:db:cf:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f10a032279133d6d64c82531435e5787d11d6b
Validity
Not Before: Aug 7 06:01:11 2026 GMT
Not After : Aug 8 06:01:11 2026 GMT
Subject: CN=c54f62ae30703e5f0ce69c2a6526d38bfdf1b0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:01:b0:6f:39:bb:ae:0d:37:58:24:0b:cd:
a8:ea:5a:3d:48:a0:ca:14:38:db:7d:87:64:c4:33:
28:83:e6:e5:fe:c0:49:b4:dd:86:76:ff:aa:56:27:
2c:ee:86:69:ab:cc:eb:dd:cd:3a:32:e5:e3:81:08:
8d:19:6f:2d:98:c9:d0:f2:e2:08:5a:eb:89:7b:d9:
0d:91:01:d5:9e:f5:40:07:bb:28:64:d1:7b:b6:5a:
ed:93:62:22:ac:80:a8:49:b9:18:8f:f4:c9:53:07:
b4:39:35:d3:db:b7:a7:0c:db:ba:83:2c:3c:39:a9:
7a:6b:c9:a0:74:9e:64:4a:3e:bd:b9:ee:1a:76:44:
58:ca:8c:e1:34:c2:b3:f0:13:0b:12:5f:cc:05:1d:
81:a3:f6:c5:a0:4b:cf:e8:38:2d:0e:e4:e2:0f:40:
f6:a3:89:f8:f6:90:08:8f:b9:d1:f8:a0:fd:a0:82:
87:2f:cd:1c:ff:23:ac:2b:cd:ab:9e:f8:d9:35:ef:
49:13:06:2d:d8:fc:08:54:f6:2a:4b:dc:62:15:ff:
be:f3:12:69:23:5e:ac:69:5c:b0:0d:78:ce:62:69:
13:02:78:2f:f6:21:f5:ed:bb:06:e9:e9:86:7c:a3:
b4:89:3d:1c:06:6c:51:c8:9e:ed:d7:7f:d4:43:c1:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4F:62:AE:30:70:3E:5F:0C:E6:9C:2A:65:26:D3:8B:FD:F1:B0:D9
X509v3 Authority Key Identifier:
keyid:01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6d:25:cc:19:fa:bd:92:b3:7d:91:51:7c:a4:95:a4:67:05:
41:9b:c5:9f:45:86:6e:2d:9c:e1:f9:82:c7:76:e7:b4:31:50:
da:ce:33:be:32:99:75:92:ef:db:c3:14:b5:87:ce:eb:94:48:
7e:28:07:49:e9:05:4e:ac:a8:71:21:bf:16:ce:e2:3c:6a:bb:
db:5e:9b:39:1d:5c:4e:20:e1:15:dc:34:2e:dc:50:20:24:b7:
22:1c:0d:0b:5f:30:df:b9:af:7c:d3:d4:1b:6c:4f:c9:0b:9f:
4a:32:77:f3:dd:ce:5b:ad:85:13:79:d0:44:96:12:31:b0:5f:
f3:38:7c:3d:74:b5:8c:0f:92:9a:00:06:eb:1e:36:1b:4f:65:
be:98:54:c9:3b:5a:95:37:7e:bc:3c:96:85:d9:4e:78:fb:4d:
9c:b6:fe:e8:c8:e5:12:98:9a:b4:77:57:06:54:8e:88:8d:79:
d8:3d:4d:7a:d7:03:d6:7b:01:06:00:27:3b:1d:38:86:f3:9f:
c9:71:7f:fa:1a:1b:a8:e7:c9:7e:f0:77:e8:ef:20:cd:6e:3a:
78:42:87:37:3e:2e:98:d2:dc:0d:51:7d:76:87:51:96:50:e2:
46:c2:6c:4b:c8:72:17:62:d3:31:c3:60:5f:f7:f3:d0:de:ab:
27:9f:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:36:05 2026 by rpki-client