Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: N2oAPXEgnze2n4J06atWL+0x+iWO4ZtTyos3R274MUY=
Subject key identifier: 1F:64:E1:FD:0D:D1:18:DD:C5:EE:EA:EC:D5:35:C3:1D:B4:EF:74:09
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 019DB08F4892F8F95FB6609EC0C1878C898D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 1288
Signing time: Tue 21 Apr 2026 15:01:13 +0000
Manifest this update: Tue 21 Apr 2026 15:01:13 +0000
Manifest next update: Wed 22 Apr 2026 15:01:13 +0000
Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: L+88koo9yDAS5gcMP8kJnlsHaQwnPr6dW2mQ/Vmsf/0=)
3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:8f:48:92:f8:f9:5f:b6:60:9e:c0:c1:87:8c:89:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Apr 21 15:01:13 2026 GMT
Not After : Apr 22 15:01:13 2026 GMT
Subject: CN=1f64e1fd0dd118ddc5eeeaecd535c31db4ef7409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:0a:01:db:32:7c:8d:5b:55:e0:b0:68:c9:
4b:0b:ec:47:84:de:cc:a3:54:70:69:e7:db:7d:63:
9b:3e:37:13:d2:d3:b3:56:df:2e:91:8e:9a:5c:cc:
50:2a:6a:8d:73:55:3c:05:dd:78:d2:fc:bd:b8:15:
eb:30:a1:38:22:2a:6e:6e:ab:e1:64:2e:e1:a6:48:
90:af:77:18:e4:50:39:89:0f:3f:22:7d:1f:e0:7a:
02:1a:8f:1f:48:d5:1e:1c:8b:73:03:4a:1b:9c:c8:
f1:7b:40:e9:2d:89:49:43:6a:47:fa:07:3c:ad:f0:
dd:0d:88:1e:ad:25:63:49:3b:97:d7:3c:38:a5:fd:
78:32:74:6f:28:0d:8b:dc:3c:22:3c:87:08:13:28:
1e:17:8b:47:95:f6:d1:8d:11:bc:11:3a:dc:20:92:
ad:76:fd:44:51:02:08:3e:0d:92:2d:56:4b:05:c3:
37:bc:29:e7:86:f7:1f:c2:1f:ae:f3:52:8e:38:15:
e2:c3:6d:3d:e3:1a:1a:27:53:a1:da:db:e7:a8:5f:
11:81:f7:13:71:d2:bc:a4:07:3a:35:15:32:25:a2:
b9:82:1f:94:26:98:78:fe:fe:6c:e0:f9:f9:cb:50:
0f:e3:ea:a3:7c:17:96:ec:6d:f6:de:13:27:c6:00:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:64:E1:FD:0D:D1:18:DD:C5:EE:EA:EC:D5:35:C3:1D:B4:EF:74:09
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:20:33:1d:a5:8d:c0:5c:1a:ba:51:73:15:a5:c3:ba:c7:c2:
b3:a4:e5:b3:61:23:80:68:ad:4d:e0:b9:a1:bc:22:4c:fe:1a:
99:b7:87:d3:7e:aa:4d:ba:72:c8:7f:71:d4:15:58:0e:97:6d:
68:0d:3c:bc:b3:e9:d6:95:32:0c:5b:f7:62:00:83:db:17:da:
2a:e9:73:49:cd:41:f1:39:50:2e:a4:7d:10:a3:e4:79:7c:68:
7b:a9:b6:ff:c4:25:a4:77:be:5c:b7:e2:7e:a1:5a:80:dd:4c:
3e:d2:e4:25:37:1e:56:b8:51:8d:6f:46:87:df:71:ee:96:7a:
33:d7:e4:3c:80:5a:3c:91:e5:0b:55:23:93:a9:6a:15:f6:fe:
49:bf:51:b1:20:a6:55:cb:00:e9:70:e6:2d:b5:29:4d:41:86:
27:0d:18:d4:0e:db:df:b2:26:8d:3d:3a:6f:2c:65:33:95:30:
f5:a7:57:e0:fb:b0:fb:38:a6:40:a3:03:10:1c:10:93:b0:d7:
27:14:c9:b6:2c:90:f1:81:9a:ef:9d:cb:e5:36:85:9d:f5:e5:
0d:7c:71:eb:10:42:65:18:ab:0f:e3:52:7d:88:b4:29:ea:0f:
50:81:c6:83:ae:d0:54:7f:4e:83:5b:3a:70:57:7b:c9:67:45:
22:af:2a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:42:00 2026 by rpki-client