Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: oCQGiiE5GPIF6NXPdPAYlFMuej6sj/jyiHJNV/D3V9E=
Subject key identifier: 62:81:A4:DE:1C:54:E0:EB:60:7C:5B:AA:80:95:5C:AC:C4:F3:D2:68
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 019CC8D11A254D545F26C928B49671D6000D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 1210
Signing time: Sat 07 Mar 2026 15:01:12 +0000
Manifest this update: Sat 07 Mar 2026 15:01:12 +0000
Manifest next update: Sun 08 Mar 2026 15:01:12 +0000
Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: K9lYubLk7H3kZAJACxKBnrmidGilALJ4dWj5GTGaerg=)
3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:d1:1a:25:4d:54:5f:26:c9:28:b4:96:71:d6:00:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Mar 7 15:01:12 2026 GMT
Not After : Mar 8 15:01:12 2026 GMT
Subject: CN=6281a4de1c54e0eb607c5baa80955cacc4f3d268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:58:ba:08:07:95:22:20:96:d1:99:2f:3f:dd:
fd:e7:bd:81:ec:c0:b1:66:af:10:61:c3:71:31:fe:
40:32:7e:f3:b2:a9:ea:e4:7f:13:5d:99:c7:a5:f4:
1a:1d:7b:94:35:8e:fe:02:6e:6c:c0:be:76:ec:08:
c9:e1:9d:00:4b:3b:7c:13:1c:b9:8a:a4:da:a9:97:
16:a9:f7:ee:01:00:a4:38:e8:7b:07:0e:0d:8b:3b:
41:c8:83:f5:50:6e:00:9d:d5:0b:7e:72:4f:48:2d:
57:98:97:30:06:50:53:e5:bb:07:a1:75:bd:09:cc:
79:d4:07:0e:8a:82:73:fd:97:6e:f3:8f:c2:38:77:
1f:53:b8:0c:b5:16:0d:8e:ba:ba:82:b8:2d:c7:d1:
44:71:c6:2d:ea:c7:8e:61:c0:db:74:09:2d:b7:0c:
30:87:e5:25:22:34:34:3a:6e:75:5a:ae:0b:64:6e:
11:0f:3b:5e:71:5b:df:35:27:b3:15:d8:51:dd:40:
78:60:4d:a0:f1:bd:89:a7:59:4c:0c:3c:fd:f2:b7:
d1:78:e3:af:70:20:19:74:a8:2b:f0:05:81:3b:05:
c3:cd:13:d3:8a:df:a3:46:92:a0:96:aa:a6:3d:64:
e8:b3:60:36:7a:a5:78:37:84:b6:8c:1f:8b:6d:8f:
46:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:81:A4:DE:1C:54:E0:EB:60:7C:5B:AA:80:95:5C:AC:C4:F3:D2:68
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a9:b0:e3:75:9d:c5:89:db:7f:b3:67:3c:53:2f:55:5e:ca:
f0:b2:97:b2:41:ec:39:95:59:4b:c1:e0:cc:f5:e3:54:96:89:
61:4c:80:c8:48:d8:f1:db:b1:25:4d:f1:07:17:83:52:72:74:
5a:30:c8:36:09:90:50:bd:18:6c:98:ed:3f:4e:d7:f1:dc:8b:
5c:5a:93:ab:5d:7a:02:98:ba:40:6a:6d:96:dd:7e:43:c7:7d:
94:60:56:91:50:a0:d3:d8:0b:63:60:b8:25:ab:bd:32:a8:ba:
7e:28:91:eb:1c:8b:49:2a:b6:16:ba:37:78:f5:17:af:69:9f:
9c:f9:15:eb:07:dd:b7:92:74:10:74:95:04:ec:81:bb:c3:48:
24:95:a6:db:61:95:3f:a7:b4:2c:c2:94:46:81:87:75:a6:73:
70:a9:e5:10:67:4e:7a:91:93:a7:c6:d9:5b:6f:64:02:ff:2e:
d6:10:f6:57:aa:ac:00:3d:e5:70:c1:f0:c8:c1:be:81:cb:8c:
3e:5f:ab:85:c1:16:6b:90:66:22:c7:19:6d:61:0d:b8:a4:f5:
92:48:92:78:27:48:fb:31:cf:20:40:7f:6e:79:77:74:bd:85:
d2:b7:c5:15:5d:c3:1b:0f:88:6b:f3:10:9b:21:d4:b1:1c:5b:
43:37:66:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:05:58 2026 by rpki-client