Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: /0kFen+k45KooKYQdnZ/yDbmlq39thRxg3LZetCqRd4=
Subject key identifier: C9:0E:7F:1F:0F:3A:7D:F2:12:24:2E:05:C4:AA:96:11:83:7C:2D:A8
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 019E9C299693169CD08435BC2BADDBE0F631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 1302
Signing time: Sat 06 Jun 2026 09:00:31 +0000
Manifest this update: Sat 06 Jun 2026 09:00:31 +0000
Manifest next update: Sun 07 Jun 2026 09:00:31 +0000
Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: oePkn+ZIj/gzLHxDgYa1LtiAjo9ssNdt1isIFpJj0II=)
3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:29:96:93:16:9c:d0:84:35:bc:2b:ad:db:e0:f6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Jun 6 09:00:31 2026 GMT
Not After : Jun 7 09:00:31 2026 GMT
Subject: CN=c90e7f1f0f3a7df212242e05c4aa9611837c2da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:4a:5d:a4:10:0f:f0:66:76:96:94:b1:c7:
84:a3:e0:54:7a:54:3e:1d:32:ce:71:2a:2e:25:d7:
d7:24:fd:9d:17:eb:8a:b6:5c:ba:d7:f2:aa:96:8a:
e1:b0:28:43:75:24:1e:e8:62:2f:d1:46:14:15:7c:
25:51:0a:79:38:e7:09:1e:5d:0a:6f:c8:fc:c4:49:
c1:b1:85:d8:6e:67:1b:3d:5d:99:d5:37:e8:37:5c:
6d:09:be:6b:53:e7:bb:1a:22:8a:81:8f:5f:e5:06:
e8:8f:cd:b9:56:d1:08:33:c5:f8:d8:61:29:74:ea:
2d:89:45:84:ba:ee:32:a7:d7:79:dc:2b:b0:4d:b1:
a4:1e:a2:20:fb:f1:ce:57:1f:69:45:9a:4b:37:89:
df:43:35:87:67:37:bf:38:31:1d:cc:75:c1:be:4c:
56:d9:cb:bc:48:63:ad:3e:bf:8d:e7:92:d3:2d:ef:
4f:3d:b5:82:58:50:10:4e:0d:ec:48:40:93:74:2a:
0c:61:cf:14:cd:37:40:fb:7c:94:16:07:f7:4b:09:
52:7a:fd:75:c5:27:88:0a:7a:c2:be:38:f3:4f:63:
63:50:4f:f0:22:2b:f8:9f:0b:3b:c9:04:31:2d:ae:
43:85:59:f8:1c:a7:79:28:75:82:f4:a5:18:6f:3a:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0E:7F:1F:0F:3A:7D:F2:12:24:2E:05:C4:AA:96:11:83:7C:2D:A8
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:71:4a:fb:ac:de:a2:04:c4:ad:93:74:0d:04:09:f8:03:bb:
fc:bb:e2:ed:9c:73:c3:50:cd:40:e0:d5:25:ad:c1:78:e0:9a:
55:d6:20:d9:9b:6b:22:38:82:72:b2:04:cc:49:3d:29:99:d1:
5b:18:e7:3b:33:a8:fb:f4:ed:7e:32:eb:31:32:5c:fc:6b:e7:
00:7c:0d:7a:8c:fc:6c:1e:26:32:62:a4:92:86:e1:24:61:d8:
a1:4e:d2:90:73:a0:86:b9:a4:6b:89:1b:39:b5:09:dd:64:fc:
60:31:da:b2:8c:59:54:35:61:50:36:91:f9:80:0e:b5:fa:b4:
29:04:19:dc:5e:46:f1:e0:9d:a0:71:4c:3e:27:6d:b7:91:3e:
fd:a6:d3:e6:c2:56:e1:5f:b1:cd:a4:f4:54:b3:81:27:9c:cb:
e5:7d:4a:61:02:25:ea:d1:b7:d1:ee:cf:3f:3b:45:5c:95:3b:
0b:6a:04:bb:b0:8f:f5:dd:2d:11:94:5d:1a:2c:90:d7:3b:55:
2e:fc:4b:40:5e:6e:f3:78:9e:06:9c:f2:8a:83:cf:89:4f:ba:
10:e2:f3:d1:09:e2:da:ea:d8:fb:0b:20:4d:c2:d6:96:5a:e7:
54:67:83:2e:e2:57:25:11:f8:b9:68:88:ca:24:0a:0d:0b:a2:
2d:88:cf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:08:53 2026 by rpki-client