Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: j17XqaYLSjqE9TH6LW3hNEQwPIddw8/hkKtC9bb6m2M=
Subject key identifier: 26:1F:9A:06:BF:59:0E:3E:90:48:53:B5:32:FC:11:F9:60:93:E0:27
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 019DB27DBC069F3B2C62F9E8569CF554FB5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 1289
Signing time: Wed 22 Apr 2026 00:01:17 +0000
Manifest this update: Wed 22 Apr 2026 00:01:17 +0000
Manifest next update: Thu 23 Apr 2026 00:01:17 +0000
Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: wqCwRejuPByuS5FvpyBuEIBYNkjWLVnz+/QxElMrcwM=)
3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:7d:bc:06:9f:3b:2c:62:f9:e8:56:9c:f5:54:fb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Apr 22 00:01:17 2026 GMT
Not After : Apr 23 00:01:17 2026 GMT
Subject: CN=261f9a06bf590e3e904853b532fc11f96093e027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:ce:6e:b4:8a:01:04:af:58:ef:8d:80:81:
b5:6f:ba:e8:bc:7c:28:5c:6f:06:ef:60:c3:88:fd:
a2:2c:b8:de:7c:87:2f:1c:57:75:73:9a:64:fa:51:
5c:f9:58:39:05:fd:0c:dc:6e:63:cf:26:41:42:55:
ad:70:12:bb:3e:a8:46:b6:82:9a:43:c2:85:1c:a5:
de:68:72:47:42:88:57:03:c6:a6:02:4b:09:7b:af:
90:56:9a:68:77:f8:09:50:d4:69:d4:e6:ab:74:10:
b4:cb:9b:e8:d5:f1:19:f6:ab:92:f7:0c:1e:ad:39:
1e:ef:a2:9d:0f:c9:ce:0b:65:aa:88:11:4f:d1:3f:
7d:c4:8d:ab:c6:17:6b:ed:ae:e0:58:0d:5e:3c:1a:
0b:30:f7:4d:03:93:ea:88:15:72:9f:c2:8e:df:c3:
f7:d3:76:3c:34:3d:11:bf:e7:62:fe:c4:de:64:18:
15:43:54:a5:4a:e8:c8:c2:d4:1c:a2:a2:1b:8c:e4:
35:58:b8:86:cb:b6:38:dc:0a:c6:99:b6:95:24:34:
0d:94:d1:bc:7d:25:1c:76:ab:32:ca:0f:9b:7e:b5:
b2:d9:5f:b7:17:da:f9:57:c5:29:80:0d:4c:67:8e:
3c:39:5c:f4:3b:27:8c:9a:31:cc:35:f1:7d:98:2e:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1F:9A:06:BF:59:0E:3E:90:48:53:B5:32:FC:11:F9:60:93:E0:27
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:60:63:55:fb:5f:b2:96:01:d3:9c:db:1c:0d:3d:f6:b0:2d:
63:b6:64:91:fc:0b:ab:18:bd:92:72:05:2d:e5:36:b3:06:a9:
57:ee:b1:79:bc:66:0a:6f:9a:07:3b:6b:df:fd:43:95:c2:cf:
10:74:0f:f1:f7:c5:3f:49:ec:39:90:54:20:81:ad:2d:e1:f1:
09:6c:b4:d5:cd:ca:84:2d:a6:2b:9d:59:a9:65:93:ca:f2:a4:
91:c6:48:b6:e6:d2:cd:ad:72:64:46:7d:4d:06:00:67:11:88:
55:24:8d:6d:4c:bb:ab:eb:71:cb:0a:d3:af:7a:a3:cf:62:ca:
14:bc:6c:9c:76:19:96:3d:d5:29:3c:58:d8:78:78:0a:83:02:
04:e1:3c:c8:46:8f:52:23:2c:92:10:22:01:b4:98:6b:df:1d:
1f:68:eb:8e:e4:16:30:ef:15:03:6e:aa:8d:9e:62:73:1e:3c:
49:a4:0c:d1:6c:ae:48:18:e5:6a:d8:fd:69:42:27:8c:17:bb:
95:94:ba:82:1a:9a:da:c0:86:17:ae:3c:80:d5:7e:bc:97:54:
9b:b3:c6:29:44:2d:ea:18:e4:7c:08:36:d4:03:4d:6c:17:4c:
3f:bb:b5:e5:1f:bd:19:7f:a8:c1:5e:54:54:3e:f1:9a:e5:f3:
20:16:02:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:56:33 2026 by rpki-client