Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: D8CNvG2Wgi1BmodxO1QcYITy2bQjt2FNQAfBSfBMT8k=
Subject key identifier: 13:19:62:DE:42:F2:F6:29:1E:67:CD:EC:01:C7:3A:B3:FC:CE:DE:6B
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 01A06F83DB04DE97FC8DC3A4EA36442B05C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 13F4
Signing time: Sat 05 Sep 2026 03:01:47 +0000
Manifest this update: Sat 05 Sep 2026 03:01:47 +0000
Manifest next update: Sun 06 Sep 2026 03:01:47 +0000
Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: 43+K4SOSmzTAHLPf+NwKL/4ts+zp0eQ3BZt2lR15Ak4=)
3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:db:04:de:97:fc:8d:c3:a4:ea:36:44:2b:05:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Sep 5 03:01:47 2026 GMT
Not After : Sep 6 03:01:47 2026 GMT
Subject: CN=131962de42f2f6291e67cdec01c73ab3fccede6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a4:36:10:ad:96:60:7a:1b:6e:1a:77:fc:fa:
3d:04:b8:84:4b:86:c2:96:e7:7e:b0:e1:5e:07:74:
2d:0c:0d:f2:14:1e:9d:44:0c:6b:48:95:f3:c5:25:
9c:ee:fe:4c:f2:04:f0:13:01:c1:fe:e8:25:fc:63:
d8:bf:69:09:c1:1c:a1:40:34:91:8c:79:60:03:17:
8e:72:1a:39:09:0b:a4:a4:59:27:a9:19:58:b9:a7:
1b:75:22:ab:6b:57:d9:01:22:b4:ed:ee:84:af:a2:
4d:11:65:62:a1:e9:31:75:c1:07:e7:1d:f2:73:d6:
48:84:1a:39:7d:33:35:65:8f:86:f0:78:0f:f4:1d:
6f:36:87:6b:6c:9d:e2:b6:b3:08:89:63:06:bf:0a:
49:c5:1f:b2:42:a6:43:1c:a6:4c:d7:3a:3a:15:3e:
76:c3:27:fd:65:be:e3:72:80:9d:c4:fa:f0:16:65:
25:f4:f7:7a:57:e0:d2:8a:e6:27:a2:36:ee:a0:61:
85:8e:3d:c0:2a:c3:b9:97:42:ad:0d:f1:4d:05:ab:
14:e5:19:3f:cc:31:dc:36:ed:16:5a:d5:29:02:a9:
5c:94:37:f6:9f:16:37:ac:d4:55:17:e4:0e:8c:40:
e9:e5:70:6e:8b:ef:be:3f:76:5b:9f:b7:e1:43:42:
d8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:19:62:DE:42:F2:F6:29:1E:67:CD:EC:01:C7:3A:B3:FC:CE:DE:6B
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:9a:2e:64:71:49:c6:e3:d0:ee:dc:51:4a:c4:50:16:bb:b5:
31:2c:88:59:ca:de:da:ae:c5:1d:95:e6:76:ad:82:b6:3c:33:
2a:84:d0:bb:44:8b:76:8e:0b:09:83:16:e8:1f:bd:f5:27:ea:
c6:d1:ee:4c:8e:6f:14:c7:f9:05:43:c9:e2:33:29:0d:bb:87:
b6:cb:5e:5c:eb:7f:93:b4:71:64:47:a2:7a:55:38:cc:64:51:
c0:cb:01:48:92:dc:16:8a:bc:dc:b3:ba:de:ce:bd:55:86:b0:
5b:21:1f:91:d5:e3:24:c1:f4:0f:19:3b:f9:ce:b1:e0:c2:a6:
a7:89:0d:fc:02:cf:61:11:5f:5b:1c:49:31:44:35:ff:7c:8b:
de:7d:65:34:bb:ac:be:0d:d4:47:e4:47:a5:d6:a8:cc:1f:97:
00:c2:5e:f2:a2:66:9b:e2:b5:93:26:39:06:97:5c:6a:f8:46:
6b:6e:aa:90:9d:c6:19:0f:6f:e9:f0:07:4c:5c:18:6d:eb:12:
05:37:74:c1:3c:7d:22:33:bc:1e:39:a1:72:ee:7a:18:ca:f9:
17:30:9a:1a:59:e5:10:ba:94:bb:b2:60:f0:8a:1e:2a:14:a1:
9a:25:e5:b8:7f:e2:b0:56:ec:9b:16:99:94:22:27:1d:e9:9e:
2b:f8:c6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:50:31 2026 by rpki-client