Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: w9Hh7bQuNZPm2QWBrlHm1+c4PmCN+2tflk+2NNW9XrU=
Subject key identifier: DE:1A:BE:DD:C3:BE:1E:E1:B1:9E:CE:63:EB:95:A3:82:01:25:81:61
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 019DCE63764BCB3B02D3ACF9D84589E6AC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 1870
Signing time: Mon 27 Apr 2026 10:01:57 +0000
Manifest this update: Mon 27 Apr 2026 10:01:57 +0000
Manifest next update: Tue 28 Apr 2026 10:01:57 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: D0xicLEtNwID1dr0KLIRirVun1vrdbRXWb1dXyOrLBE=)
2: xIyRvynsJDfonhuzRYt1ty9sqMY.roa (hash: EoXBFExcfd/L36PfBZw/K0nrCLVb7q9unxVkiCC6TIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:76:4b:cb:3b:02:d3:ac:f9:d8:45:89:e6:ac:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Apr 27 10:01:57 2026 GMT
Not After : Apr 28 10:01:57 2026 GMT
Subject: CN=de1abeddc3be1ee1b19ece63eb95a38201258161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:61:6c:c0:73:4d:98:96:7f:1c:b6:d5:7d:28:
94:72:89:61:ee:be:6c:9f:80:55:9b:e5:34:4f:c2:
f9:32:cc:8d:9d:1f:86:a2:b7:7f:02:9e:bd:41:5b:
21:2f:0e:0d:e4:f1:4e:8a:f8:ca:b9:6c:c8:d9:08:
6a:b7:d2:1b:51:ef:e5:3b:15:ca:91:45:d2:7d:89:
c6:3e:04:57:32:51:b2:d5:df:5d:83:2d:1f:fc:72:
cb:54:4c:92:ff:27:71:34:3e:cf:67:78:76:0b:99:
db:01:0f:9b:af:fb:c7:82:e6:a0:89:ad:b4:36:36:
54:2b:a6:2b:11:94:3a:49:a6:17:27:2d:2e:0e:2b:
6a:87:10:a8:57:06:cb:a7:4e:88:82:16:a8:81:3a:
3e:6d:c9:bd:38:dc:79:95:e5:a4:bc:85:f0:2a:d4:
09:27:1a:a3:28:f6:23:42:e0:a5:3c:ca:82:76:c8:
33:90:29:bb:49:70:33:ed:b8:7f:ee:31:50:30:2f:
94:e5:d3:15:30:b2:72:01:f2:19:b9:5b:28:8e:ce:
6b:c5:7e:49:ae:78:1c:07:da:1f:bb:71:52:1b:0b:
6e:56:60:89:bb:b4:d6:d6:63:16:44:41:b3:f4:db:
c3:5e:c7:d8:cb:c1:c4:e9:69:17:8a:18:42:d2:df:
b8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1A:BE:DD:C3:BE:1E:E1:B1:9E:CE:63:EB:95:A3:82:01:25:81:61
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f6:1d:c3:7a:4e:98:f1:2a:08:5b:75:52:9e:ad:e1:15:d0:
8a:02:8e:b9:3b:c4:ab:27:21:89:eb:ad:a7:ef:64:44:94:ad:
da:08:53:df:dc:3e:01:9d:a1:f9:63:a5:a3:a6:27:9b:6e:55:
37:6c:36:cb:4d:66:07:85:a9:dd:34:2a:c6:13:d6:ea:2b:b4:
f8:7e:02:43:d9:c5:2e:38:49:ee:93:28:f4:5e:7f:c7:7f:72:
06:98:cb:89:aa:17:46:9d:a7:ca:22:ec:6d:11:75:d0:2e:a3:
50:bf:f9:2d:a4:1c:48:e5:d4:6c:e3:b0:f4:93:7e:3d:66:1d:
bf:c8:7d:06:e2:1b:71:de:ba:77:c0:9d:54:66:e3:4a:f5:b5:
73:bd:5c:a9:87:18:95:ca:36:17:45:69:b5:95:e5:34:75:d7:
df:89:a9:e6:d1:76:79:49:45:76:a7:47:00:59:6e:f2:e2:c7:
5d:1d:6b:d4:15:93:66:e1:26:c3:00:16:d9:ce:2c:b5:e0:ed:
44:b5:96:d5:e8:02:d9:a3:0a:de:0d:e3:53:fb:08:9f:02:1a:
af:99:6e:78:66:aa:15:0d:c0:3c:63:2d:0e:30:e3:89:da:7a:
26:01:3c:00:8e:bc:76:f3:04:5d:71:e2:b5:58:a8:41:5e:f1:
6e:45:4f:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OY3ZLyzsC06z52EWJ5qwmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NTFhM2ZlZTc3ZTkyNDE0NjE3NzEyM2RkNjc1M2IwNmZk
ZTI0NTIwHhcNMjYwNDI3MTAwMTU3WhcNMjYwNDI4MTAwMTU3WjAzMTEwLwYDVQQD
EyhkZTFhYmVkZGMzYmUxZWUxYjE5ZWNlNjNlYjk1YTM4MjAxMjU4MTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22FswHNNmJZ/HLbVfSiUcolh7r5s
n4BVm+U0T8L5MsyNnR+Gord/Ap69QVshLw4N5PFOivjKuWzI2Qhqt9IbUe/lOxXK
kUXSfYnGPgRXMlGy1d9dgy0f/HLLVEyS/ydxND7PZ3h2C5nbAQ+br/vHguagia20
NjZUK6YrEZQ6SaYXJy0uDitqhxCoVwbLp06IghaogTo+bcm9ONx5leWkvIXwKtQJ
JxqjKPYjQuClPMqCdsgzkCm7SXAz7bh/7jFQMC+U5dMVMLJyAfIZuVsojs5rxX5J
rngcB9ofu3FSGwtuVmCJu7TW1mMWREGz9NvDXsfYy8HE6WkXihhC0t+4AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4avt3Dvh7hsZ7OY+uVo4IBJYFhMB8GA1UdIwQY
MBaAFGhRo/7nfpJBRhdxI91nU7Bv3iRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQt
YTNiNTg2MjgwNjBkLzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQtYTNiNTg2MjgwNjBk
LzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvYdw3pO
mPEqCFt1Up6t4RXQigKOuTvEqychieutp+9kRJSt2ghT39w+AZ2h+WOlo6Ynm25V
N2w2y01mB4Wp3TQqxhPW6iu0+H4CQ9nFLjhJ7pMo9F5/x39yBpjLiaoXRp2nyiLs
bRF10C6jUL/5LaQcSOXUbOOw9JN+PWYdv8h9BuIbcd66d8CdVGbjSvW1c71cqYcY
lco2F0VptZXlNHXX34mp5tF2eUlFdqdHAFlu8uLHXR1r1BWTZuEmwwAW2c4steDt
RLWW1egC2aMK3g3jU/sInwIar5lueGaqFQ3APGMtDjDjidp6JgE8AI68dvMEXXHi
tVioQV7xbkVPhQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:46 2026 by rpki-client