Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: yMuHeQqSNgzWPhmfH95b80Vi63t1ZGnn+V6pxbFRfwY=
Subject key identifier: ED:F9:20:2E:09:F6:70:DD:D1:FE:BE:3E:1E:7B:6C:04:39:C9:1E:0B
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 019F85D706AB5238A780B739527A20BC8A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 137B
Signing time: Tue 21 Jul 2026 18:01:29 +0000
Manifest this update: Tue 21 Jul 2026 18:01:29 +0000
Manifest next update: Wed 22 Jul 2026 18:01:29 +0000
Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: BkIIlyq/lhqQk5lqvAQXXAN8SHnCa+xXsxh6b2ncxj8=)
3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:06:ab:52:38:a7:80:b7:39:52:7a:20:bc:8a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Jul 21 18:01:29 2026 GMT
Not After : Jul 22 18:01:29 2026 GMT
Subject: CN=edf9202e09f670ddd1febe3e1e7b6c0439c91e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:56:0d:2c:56:4b:78:68:43:bd:dd:2f:4c:f4:
fa:5b:ce:1b:15:fe:8d:67:b2:6e:1c:50:f4:fc:ca:
22:e5:0b:19:e4:91:91:e7:41:5e:41:21:d8:a2:2e:
90:6e:79:8a:aa:15:1a:53:43:bd:ea:78:ac:64:76:
d3:7b:ef:b4:c9:2a:87:de:8e:de:b5:fb:c2:1c:a6:
52:00:f2:74:c5:1a:bf:ef:23:95:9c:ce:ee:95:e9:
9e:42:5b:9b:aa:22:ec:53:e5:aa:04:d8:3f:9c:b4:
9f:07:f8:9a:ac:d0:05:7d:5c:bd:ab:c8:11:75:f6:
8a:79:ee:d5:f2:15:c3:46:6e:39:0d:b9:f1:2e:9c:
c9:17:93:46:a3:d6:92:54:f7:5a:68:ae:04:1f:2c:
1d:db:87:71:52:a9:8d:66:60:47:f6:6f:ee:4f:c4:
ec:81:19:dc:05:e0:d7:6e:25:0f:27:59:18:2a:16:
d5:79:88:b9:4e:7c:d4:78:34:14:74:cc:78:87:4b:
c6:d5:14:21:f0:f4:8f:85:95:92:d5:a7:39:ff:79:
e5:0d:c4:43:3e:21:c8:26:69:9e:1e:af:8e:a0:c3:
e5:bb:e5:ce:0d:30:cd:1e:f0:c7:e2:41:7e:a4:70:
e6:c1:ea:a2:05:d6:b3:9c:e2:6c:5a:f1:9b:29:19:
47:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F9:20:2E:09:F6:70:DD:D1:FE:BE:3E:1E:7B:6C:04:39:C9:1E:0B
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:cb:e2:42:83:b4:db:1a:f3:cf:ed:f4:00:46:b5:8f:53:96:
7b:f7:53:85:8a:3d:41:74:36:63:25:88:98:43:43:01:e1:d9:
7f:02:6e:de:f9:1c:b5:04:1b:03:8a:45:f5:eb:fd:da:aa:c2:
6e:37:8d:4c:fc:27:56:d3:af:ac:08:d4:98:1b:3f:b7:7f:27:
e7:3b:4e:d3:03:e1:7c:23:95:e2:f2:a0:89:a0:18:9e:3f:7d:
08:52:6a:71:72:14:26:d0:ad:3b:e6:bf:81:8a:48:ea:11:05:
c7:74:ab:39:64:8d:dc:8e:b9:f1:f4:6e:2d:76:b7:a3:5b:47:
db:a7:fb:ef:5c:56:71:6a:c3:90:12:8f:3b:53:45:6c:ad:ac:
90:88:f0:3f:27:2c:cc:fc:72:d6:88:80:9a:70:bb:1b:a4:a6:
53:c7:e5:0c:cf:a9:84:a1:31:b8:01:89:56:f3:0a:fe:b5:8c:
55:4f:a2:a3:ef:e8:c8:93:e4:6c:09:be:e9:11:5f:61:8b:fd:
d0:78:3d:8f:4c:ad:39:06:b3:e8:c0:9e:3a:e4:87:f1:23:af:
71:af:11:39:37:01:41:ca:52:d6:58:f5:2c:d6:16:d9:d7:ac:
70:3d:b8:24:f9:3e:68:48:c6:ce:fa:bc:c2:20:bc:5e:62:8c:
26:b5:96:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1warUjingLc5UnogvIpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMDdjNmI1NmVmMWYyMzliMDI4ZWY0MjM3NWEyYTE3NjVi
YzA4YjgwHhcNMjYwNzIxMTgwMTI5WhcNMjYwNzIyMTgwMTI5WjAzMTEwLwYDVQQD
EyhlZGY5MjAyZTA5ZjY3MGRkZDFmZWJlM2UxZTdiNmMwNDM5YzkxZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilYNLFZLeGhDvd0vTPT6W84bFf6N
Z7JuHFD0/Moi5QsZ5JGR50FeQSHYoi6QbnmKqhUaU0O96nisZHbTe++0ySqH3o7e
tfvCHKZSAPJ0xRq/7yOVnM7ulemeQlubqiLsU+WqBNg/nLSfB/iarNAFfVy9q8gR
dfaKee7V8hXDRm45DbnxLpzJF5NGo9aSVPdaaK4EHywd24dxUqmNZmBH9m/uT8Ts
gRncBeDXbiUPJ1kYKhbVeYi5TnzUeDQUdMx4h0vG1RQh8PSPhZWS1ac5/3nlDcRD
PiHIJmmeHq+OoMPlu+XODTDNHvDH4kF+pHDmweqiBdaznOJsWvGbKRlHDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO35IC4J9nDd0f6+Ph57bAQ5yR4LMB8GA1UdIwQY
MBaAFPwHxrVu8fI5sCjvQjdaKhdlvAi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQt
Yzg3MDBhMTQ3NjFiLzEvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQtYzg3MDBhMTQ3NjFi
LzEvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcviQoO0
2xrzz+30AEa1j1OWe/dThYo9QXQ2YyWImENDAeHZfwJu3vkctQQbA4pF9ev92qrC
bjeNTPwnVtOvrAjUmBs/t38n5ztO0wPhfCOV4vKgiaAYnj99CFJqcXIUJtCtO+a/
gYpI6hEFx3SrOWSN3I658fRuLXa3o1tH26f771xWcWrDkBKPO1NFbK2skIjwPycs
zPxy1oiAmnC7G6SmU8flDM+phKExuAGJVvMK/rWMVU+io+/oyJPkbAm+6RFfYYv9
0Hg9j0ytOQaz6MCeOuSH8SOvca8ROTcBQcpS1lj1LNYW2descD24JPk+aEjGzvq8
wiC8XmKMJrWW8A==
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:59 2026 by rpki-client