Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
File: Afq489H7PSo1xPZ6SPb2CD6rpXU.mft (raw, json)
Hash identifier: Z1V8PJjQ+hXI0HtTXjf8SMgdg10S8dFf52TZk+VRnKg=
Subject key identifier: 74:A0:91:C2:AF:68:0B:EC:EF:5E:0E:73:14:1B:97:AE:42:4A:62:BD
Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Certificate issuer: /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Certificate serial: 019F17F9DAFA4452067A17D375EDEE2A548C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
Manifest number: 0969
Signing time: Tue 30 Jun 2026 10:01:18 +0000
Manifest this update: Tue 30 Jun 2026 10:01:18 +0000
Manifest next update: Wed 01 Jul 2026 10:01:18 +0000
Files and hashes: 1: Afq489H7PSo1xPZ6SPb2CD6rpXU.crl (hash: xUJTucfFFhKQTNcf/LHu+Dh1PuhO1K1nny5vpX2LYM4=)
2: WwxUIgZQzTDxG7ybBsjkioJXz8E.roa (hash: MbjGJ2NlvdJnsdm83ackK73GTkTFyLBuLVC/1DFPquA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:da:fa:44:52:06:7a:17:d3:75:ed:ee:2a:54:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Validity
Not Before: Jun 30 10:01:18 2026 GMT
Not After : Jul 1 10:01:18 2026 GMT
Subject: CN=74a091c2af680becef5e0e73141b97ae424a62bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:7c:df:b6:01:69:a9:3c:15:83:70:b7:3e:
65:34:c1:ce:e1:30:cc:78:c1:ea:04:f5:21:94:eb:
79:5f:10:d1:b3:3e:4e:bd:83:bb:22:07:2f:06:e6:
67:a0:9b:96:8b:e3:c3:52:0a:c6:a4:12:32:39:61:
83:ba:95:07:0d:49:e5:be:0c:91:67:a4:17:fb:98:
84:0c:4b:ec:51:8d:42:12:5c:b2:e8:2f:e2:33:75:
b8:9a:b5:46:03:fe:ab:83:6c:db:7f:fa:0a:4c:8b:
03:bd:15:f8:fa:70:ac:f2:8b:f1:5b:56:b6:b4:46:
8f:c4:98:c6:17:67:42:73:bb:a2:ce:47:4c:8d:ae:
8c:4c:d7:79:23:22:63:36:8f:c2:06:1e:64:aa:2d:
89:b0:c8:fc:b4:1e:86:f2:29:97:e9:51:10:7a:06:
69:2d:30:46:bb:b8:26:b3:26:5b:02:ed:cd:4e:e9:
3c:b4:dd:63:84:a2:61:9f:c9:43:2f:d3:e3:35:24:
bc:48:fe:c9:0e:67:33:5d:6f:b8:dc:86:a9:a6:09:
20:b5:34:83:dc:15:83:dc:27:fb:cc:d6:33:de:b8:
ba:66:39:85:4a:f7:8d:8a:64:e0:4f:b1:b9:81:f6:
e4:44:57:2c:e8:4e:ae:51:8c:c9:0f:4b:51:b9:cf:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A0:91:C2:AF:68:0B:EC:EF:5E:0E:73:14:1B:97:AE:42:4A:62:BD
X509v3 Authority Key Identifier:
keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c4:ad:ae:67:37:a1:f2:db:66:9a:5f:a4:47:cf:ed:42:59:
42:29:b1:56:73:43:2d:52:aa:0f:53:97:20:16:2c:19:1e:96:
71:43:ec:0d:ad:57:d1:b3:bc:04:7d:91:88:8b:31:19:db:f7:
55:fc:e5:c5:c6:8c:56:65:1d:f8:39:98:89:ae:aa:99:ce:3f:
5c:ad:ca:56:2e:4d:bc:ba:38:98:87:f7:22:b0:f7:18:a4:8c:
bb:4f:4a:0e:b2:9c:6a:35:15:f8:51:fb:21:8a:42:37:79:81:
9a:25:de:35:47:cb:77:1e:94:b6:e1:11:7d:b3:78:bd:2d:23:
5d:e5:f5:76:bc:37:49:00:ab:40:a9:4e:fb:87:7e:a9:47:8b:
c0:85:5d:67:3b:44:7b:10:82:00:1d:2d:a1:85:17:98:40:7e:
0b:ca:59:59:48:ca:8e:08:ba:34:95:91:a0:e4:1a:1d:5d:f1:
18:5d:b3:7d:11:33:16:a4:8a:fb:59:42:83:88:2b:18:68:63:
31:f0:98:4a:71:e5:3b:2e:79:c6:49:f8:54:75:2c:f8:a8:4f:
3f:21:7f:66:4b:61:7f:4b:75:72:7e:01:c0:06:75:b1:a5:35:
16:ec:3f:c8:35:32:09:d9:48:95:c9:54:e6:76:09:43:19:d2:
27:a9:e7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:16 2026 by rpki-client