Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: +NtC2wRyoTAzDInVOveORle7tmTue7xRLN0Ju5HB1Gk=
Subject key identifier: 85:85:F2:2D:D1:BF:1C:60:8D:1D:BA:4F:31:29:85:6F:C3:3E:83:80
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 01A1724B9F64AE8CF93227D27FDDFF6BA67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 147A
Signing time: Sun 25 Oct 2026 09:02:00 +0000
Manifest this update: Sun 25 Oct 2026 09:02:00 +0000
Manifest next update: Mon 26 Oct 2026 09:02:00 +0000
Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: NRUaluwmZi3m0xQtayk3I+yyMcez5a/oHC0kKQZ1+RA=)
3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:4b:9f:64:ae:8c:f9:32:27:d2:7f:dd:ff:6b:a6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Oct 25 09:02:00 2026 GMT
Not After : Oct 26 09:02:00 2026 GMT
Subject: CN=8585f22dd1bf1c608d1dba4f3129856fc33e8380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:8f:52:1a:f7:1f:cf:95:52:ae:f8:45:17:
f2:2e:18:94:b9:2b:8d:8c:62:53:97:e1:8c:c6:23:
b5:a9:4f:7a:d0:1f:4c:ec:02:b9:cd:e0:a5:90:8e:
cd:7d:31:b9:40:b3:d1:da:bd:d5:a6:e0:bd:8c:fe:
72:68:18:e8:6d:b9:a6:32:6b:10:c5:e5:47:da:7d:
0f:77:73:ab:4a:94:2d:56:0d:51:03:a6:e7:a1:03:
cc:02:e0:ea:ec:63:65:96:a4:5f:34:f5:aa:22:81:
a5:2a:d0:b0:02:21:f8:6f:40:72:a8:11:0b:7d:5a:
b5:cc:94:f7:bd:34:eb:93:4a:e5:a0:4f:2b:7b:4d:
d1:0a:0b:c0:b1:6a:be:21:b0:09:58:67:d8:0a:6c:
fe:bf:61:92:cc:d6:2c:5e:4d:45:66:b8:4f:5a:3c:
2e:d0:74:c0:d4:81:e6:35:2c:0f:f0:ec:80:4f:08:
d9:18:00:20:58:94:70:0d:d0:43:af:92:da:88:34:
60:00:7e:8d:e8:ad:3e:c4:2b:1d:2e:e7:22:a5:5b:
29:3f:06:82:d5:28:45:2b:80:b7:15:74:d0:62:a7:
fe:1d:d4:77:e5:29:d3:06:a6:00:74:1c:30:4e:03:
97:bf:f6:af:8b:5d:68:7b:ab:b6:92:dd:f0:1e:0c:
ad:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:85:F2:2D:D1:BF:1C:60:8D:1D:BA:4F:31:29:85:6F:C3:3E:83:80
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:42:f8:94:a3:fe:56:8f:53:7b:b1:ee:de:3d:e7:a7:38:49:
3e:7b:f8:62:e4:49:13:da:3b:03:37:b8:57:2c:22:0a:a6:c7:
e3:9d:d2:04:2e:4b:2b:46:82:5f:fd:52:37:8a:c1:41:ff:31:
3a:d7:11:00:8a:ab:ae:b1:79:30:c0:8d:cd:17:c4:75:08:6d:
ca:58:a0:32:04:79:ba:2f:89:ed:22:20:ef:4f:6f:b7:b8:bf:
af:61:3b:aa:24:53:f6:53:72:88:79:a2:75:7a:d2:35:85:fa:
cf:80:8c:d2:7a:a3:59:a9:a0:3d:2d:74:de:71:51:20:f8:5c:
17:ad:48:93:79:87:03:be:a6:ea:11:e8:db:ae:4c:e0:c4:45:
0c:72:42:b7:6c:dc:17:8f:e0:56:62:c3:fd:82:f7:63:85:8e:
9c:6b:49:03:43:96:cb:47:f5:05:1a:d8:33:df:9d:5c:a9:08:
e8:04:60:9b:a5:e3:95:ff:70:78:40:31:8d:e7:93:06:5e:e9:
b2:a5:4b:4d:87:e1:79:61:ec:ea:ee:ed:d3:07:5c:6c:b3:80:
f5:da:f1:12:69:30:86:55:1c:be:ed:49:87:86:c8:f0:df:6f:
2f:01:9c:fa:ed:0a:71:c5:06:cb:3b:29:fe:0f:17:7d:8b:53:
a8:bc:7e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:24:41 2026 by rpki-client