Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: heRdsZX70LF1OfOTKIO6QD8mKqK2aMaWvhMND4wUmLo=
Subject key identifier: E6:5E:4F:26:36:7F:1B:75:11:71:9B:D6:1A:29:38:E8:17:45:13:D0
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 01A17ADFDED366ED084F5FBAB2415F7AD4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 1A57
Signing time: Tue 27 Oct 2026 01:00:54 +0000
Manifest this update: Tue 27 Oct 2026 01:00:54 +0000
Manifest next update: Wed 28 Oct 2026 01:00:54 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: fi6EUF4jrHZt3iKLlPjREQ2iGYhYg+du8d6w+voITAI=)
2: xIyRvynsJDfonhuzRYt1ty9sqMY.roa (hash: EoXBFExcfd/L36PfBZw/K0nrCLVb7q9unxVkiCC6TIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:de:d3:66:ed:08:4f:5f:ba:b2:41:5f:7a:d4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Oct 27 01:00:54 2026 GMT
Not After : Oct 28 01:00:54 2026 GMT
Subject: CN=e65e4f26367f1b7511719bd61a2938e8174513d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:56:29:d7:e6:b8:8b:e8:4f:19:95:33:67:
51:04:5d:a3:67:88:b4:44:96:8b:d1:0f:bd:b9:a1:
37:90:71:f1:15:08:d9:34:ba:e8:f5:6a:4e:4d:80:
14:a2:4d:6d:30:5e:a5:e4:6e:85:03:19:3b:ea:74:
5f:88:81:22:4d:16:8b:d3:fe:2d:7c:e3:f4:4c:cb:
08:fa:c4:42:f5:49:dc:8f:3d:04:52:d0:35:bc:b0:
6b:07:8c:c2:67:bf:d0:04:6b:53:9d:00:29:e3:81:
cf:06:f0:bc:47:f2:67:bb:0d:d3:f7:17:9a:8e:6c:
55:16:41:d6:90:60:51:36:92:79:68:ee:42:1b:cf:
ec:2e:08:20:27:13:1c:cb:fb:0b:fb:01:83:3a:aa:
ca:01:17:d2:ec:5b:e4:29:08:7d:cc:99:c1:8e:eb:
9c:d4:70:8f:61:7d:b6:ff:40:47:46:2d:07:9b:aa:
3c:a4:51:09:10:aa:65:e1:59:fe:44:f1:10:72:af:
bb:0f:e0:22:b3:81:18:72:5b:25:00:da:9f:0b:fb:
1d:f6:d4:c7:31:db:4a:8a:a1:22:54:0e:16:16:11:
c6:8d:9b:26:18:01:a0:d9:71:ab:1a:34:3d:a7:d6:
42:90:aa:96:a0:df:1e:87:f9:a5:e5:0f:6f:12:27:
7d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5E:4F:26:36:7F:1B:75:11:71:9B:D6:1A:29:38:E8:17:45:13:D0
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:52:20:79:71:f3:48:7d:c8:62:99:c2:40:76:28:ed:5a:0b:
f8:74:f9:b6:1c:57:02:30:42:38:84:87:52:c9:5f:26:9b:cd:
15:28:fb:d0:33:b3:82:a1:01:0a:23:1b:a0:56:92:c3:26:76:
f0:7a:7d:76:5b:52:4c:b1:40:ec:f5:22:ae:5c:57:4a:4f:2a:
c9:41:0e:09:ed:ae:42:be:83:14:01:f7:7c:c2:72:15:a4:da:
ea:62:c1:85:79:96:5a:61:ce:f2:91:d4:5c:97:31:e5:08:23:
e8:a2:19:97:66:56:32:33:ad:3f:59:d1:1b:92:d4:93:9b:db:
9b:c8:8b:a4:16:c5:ce:97:75:56:eb:be:77:20:40:01:99:ec:
b6:f6:e0:0e:5d:31:2f:06:0b:e9:ed:1d:b2:c4:dd:92:e4:44:
77:89:19:53:cf:cf:2e:8a:9b:9e:fd:4d:74:7e:db:cf:bc:e2:
b6:42:55:f1:7a:56:bb:75:c9:e6:5e:d4:b4:eb:49:81:59:e5:
ae:28:df:31:3b:b2:c6:57:bf:1e:51:ea:4c:ab:19:85:09:46:
b1:a5:8f:36:1b:42:e6:36:b0:71:67:eb:37:aa:0d:56:00:ec:
a9:1a:ce:b0:b9:14:76:2b:0e:ce:f9:bc:8f:df:48:a5:d3:4d:
9a:fe:a9:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6397TZu0IT1+6skFfetS4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NTFhM2ZlZTc3ZTkyNDE0NjE3NzEyM2RkNjc1M2IwNmZk
ZTI0NTIwHhcNMjYxMDI3MDEwMDU0WhcNMjYxMDI4MDEwMDU0WjAzMTEwLwYDVQQD
EyhlNjVlNGYyNjM2N2YxYjc1MTE3MTliZDYxYTI5MzhlODE3NDUxM2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc9WKdfmuIvoTxmVM2dRBF2jZ4i0
RJaL0Q+9uaE3kHHxFQjZNLro9WpOTYAUok1tMF6l5G6FAxk76nRfiIEiTRaL0/4t
fOP0TMsI+sRC9Uncjz0EUtA1vLBrB4zCZ7/QBGtTnQAp44HPBvC8R/Jnuw3T9xea
jmxVFkHWkGBRNpJ5aO5CG8/sLgggJxMcy/sL+wGDOqrKARfS7FvkKQh9zJnBjuuc
1HCPYX22/0BHRi0Hm6o8pFEJEKpl4Vn+RPEQcq+7D+Ais4EYclslANqfC/sd9tTH
MdtKiqEiVA4WFhHGjZsmGAGg2XGrGjQ9p9ZCkKqWoN8eh/ml5Q9vEid98QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZeTyY2fxt1EXGb1hopOOgXRRPQMB8GA1UdIwQY
MBaAFGhRo/7nfpJBRhdxI91nU7Bv3iRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQt
YTNiNTg2MjgwNjBkLzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQtYTNiNTg2MjgwNjBk
LzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArVIgeXHz
SH3IYpnCQHYo7VoL+HT5thxXAjBCOISHUslfJpvNFSj70DOzgqEBCiMboFaSwyZ2
8Hp9dltSTLFA7PUirlxXSk8qyUEOCe2uQr6DFAH3fMJyFaTa6mLBhXmWWmHO8pHU
XJcx5Qgj6KIZl2ZWMjOtP1nRG5LUk5vbm8iLpBbFzpd1Vuu+dyBAAZnstvbgDl0x
LwYL6e0dssTdkuREd4kZU8/PLoqbnv1NdH7bz7zitkJV8XpWu3XJ5l7UtOtJgVnl
rijfMTuyxle/HlHqTKsZhQlGsaWPNhtC5jawcWfrN6oNVgDsqRrOsLkUdisOzvm8
j99IpdNNmv6pig==
-----END CERTIFICATE-----
Generated at Tue Oct 27 09:21:14 2026 by rpki-client