Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
File: Afq489H7PSo1xPZ6SPb2CD6rpXU.mft (raw, json)
Hash identifier: NDfhNb+IXl2YW+krXXrvNhBHtdnbIv/+mn5oC6GkstM=
Subject key identifier: E5:9A:F3:97:54:C4:20:7C:9D:ED:63:42:51:4C:43:FA:36:A5:D1:DE
Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Certificate issuer: /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Certificate serial: 019D3AF8B83B533962B8002A8EDB61C8158E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
Manifest number: 0872
Signing time: Sun 29 Mar 2026 19:01:11 +0000
Manifest this update: Sun 29 Mar 2026 19:01:11 +0000
Manifest next update: Mon 30 Mar 2026 19:01:11 +0000
Files and hashes: 1: Afq489H7PSo1xPZ6SPb2CD6rpXU.crl (hash: ztDBpd94fcNXvy7oPuWOLCLvFRafysi95U8fptLV+lw=)
2: WwxUIgZQzTDxG7ybBsjkioJXz8E.roa (hash: MbjGJ2NlvdJnsdm83ackK73GTkTFyLBuLVC/1DFPquA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:b8:3b:53:39:62:b8:00:2a:8e:db:61:c8:15:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Validity
Not Before: Mar 29 19:01:11 2026 GMT
Not After : Mar 30 19:01:11 2026 GMT
Subject: CN=e59af39754c4207c9ded6342514c43fa36a5d1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:68:35:1a:7a:8b:5f:70:8b:e3:bb:cd:55:
47:94:74:f1:01:3a:c1:5f:96:67:4a:dc:3d:63:66:
cc:9c:9c:e4:77:58:12:59:21:c0:a4:5d:35:b8:2e:
d3:10:2a:5b:98:94:fa:c3:87:b8:98:76:53:d6:e4:
0f:14:a5:66:ca:14:99:87:4c:2e:9c:42:26:80:87:
73:3e:b0:a3:2b:7e:da:67:24:06:c3:26:db:42:8b:
16:a1:95:bc:5f:e0:92:17:fa:7c:c1:b4:ac:83:5c:
2b:bd:66:b0:05:17:5c:d6:09:72:f9:29:cc:48:cc:
b4:f4:fb:0d:86:1e:a7:98:18:db:37:49:74:36:f9:
98:7d:a4:01:b4:a5:c8:08:0a:01:e3:63:ed:cd:e1:
68:93:99:e8:ac:7b:7b:84:e6:c8:aa:ea:3b:a8:b2:
fc:82:56:be:d0:5d:46:46:04:e1:75:9b:51:77:ff:
5f:e0:ba:b3:a6:1c:f0:d0:d5:e8:16:64:c2:12:fb:
40:9a:6a:6b:ac:e1:21:50:07:fd:7b:26:8b:09:74:
ec:fd:ec:38:0f:30:e5:46:a6:bb:d3:fe:52:b0:34:
43:df:d1:ae:44:78:2b:04:9d:38:f7:e0:2e:16:12:
a7:e3:28:6a:87:a1:19:4c:75:c9:e0:80:b9:78:2d:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9A:F3:97:54:C4:20:7C:9D:ED:63:42:51:4C:43:FA:36:A5:D1:DE
X509v3 Authority Key Identifier:
keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a7:01:49:78:0f:e7:c2:3e:45:91:dd:88:1c:46:42:78:f5:
64:8a:bc:a6:f4:1d:c9:e9:b8:b9:b2:f0:87:f7:74:3f:6e:c9:
c9:ab:98:f7:dc:0b:63:dc:71:f8:b7:d0:d0:58:3c:b8:14:f0:
40:bf:f8:3c:ae:e0:74:ca:ac:d6:f4:eb:86:09:10:48:a0:b3:
1f:38:88:0c:97:28:d5:f6:60:07:be:8b:5f:e7:23:8e:ce:94:
5a:86:87:97:ea:a4:46:6d:46:ac:0c:aa:22:43:37:98:01:6d:
dc:42:5d:31:83:60:4e:7f:71:df:6b:a1:75:d7:39:22:ce:12:
e7:49:f3:0c:2b:ca:49:f2:90:26:c3:e7:5a:1a:dd:ab:95:f1:
e9:81:3c:2d:b6:a8:5b:01:48:57:06:b8:7f:df:0f:05:72:df:
b6:e9:8e:ee:b1:e9:06:0e:e1:c3:ae:7b:e1:2f:f8:4e:d3:af:
0c:fd:00:00:55:ba:aa:ac:2f:48:d6:55:4f:e1:42:3d:c6:09:
b9:9d:62:5c:f7:ea:58:34:5d:ed:e3:6a:fd:68:ed:51:aa:40:
13:e4:99:56:a3:73:a7:02:23:c8:29:e6:ef:0d:5b:f8:62:25:
e6:ed:fd:27:91:40:d0:b8:55:07:91:37:e1:ee:0c:81:6d:92:
ec:c8:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:36 2026 by rpki-client