Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: pqz6Du9DbT2p0inJuqpaeJWoadlHj7x+zQWyIj878o0=
Subject key identifier: BA:6F:33:CB:A8:0B:61:06:A6:54:6B:65:19:F6:9C:EE:0B:06:16:31
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 019FA3AA3C9DDBCEF7B6F17C314FCB35C086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 1963
Signing time: Mon 27 Jul 2026 13:01:10 +0000
Manifest this update: Mon 27 Jul 2026 13:01:10 +0000
Manifest next update: Tue 28 Jul 2026 13:01:10 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: EEkbqTUfcNAyWxce5VjMyxTFEpLZ4PDgN4+CCFmT7UE=)
2: xIyRvynsJDfonhuzRYt1ty9sqMY.roa (hash: EoXBFExcfd/L36PfBZw/K0nrCLVb7q9unxVkiCC6TIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:aa:3c:9d:db:ce:f7:b6:f1:7c:31:4f:cb:35:c0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Jul 27 13:01:10 2026 GMT
Not After : Jul 28 13:01:10 2026 GMT
Subject: CN=ba6f33cba80b6106a6546b6519f69cee0b061631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0d:68:46:dd:4c:1d:a0:d1:a3:09:56:cc:96:
ae:72:79:72:92:a7:a3:d7:de:1c:68:ad:49:f1:5c:
0f:72:01:c0:ea:33:f4:28:5d:4b:e7:ce:60:5e:d9:
fe:c1:df:ce:7d:09:e2:ed:b6:0f:3e:39:bc:45:82:
9f:b9:21:35:d9:9e:08:6b:85:de:dc:30:a9:f6:8d:
c0:f0:60:cb:4b:18:a6:ee:50:37:91:88:65:0a:00:
bc:6e:81:cc:df:69:95:fa:9e:f5:d9:47:22:fb:85:
44:a6:05:2d:92:a8:b4:00:ef:bb:a0:69:bd:e5:15:
ab:d1:86:53:0b:be:a0:30:07:00:6a:54:72:fa:4f:
f4:ec:75:b6:59:de:d1:13:65:fc:67:d5:a5:f7:b8:
1d:a1:3a:a8:57:a5:90:8f:a2:30:61:1b:cf:88:8f:
0a:c0:99:64:fe:c3:6b:f6:ea:60:de:1c:26:6b:73:
41:0c:a7:e5:39:e9:f7:96:a6:dc:c1:a9:d0:57:0c:
00:d7:73:11:ee:4b:00:55:ca:0d:f9:33:87:e0:93:
03:9d:ab:1f:55:03:17:32:27:2c:66:de:a9:95:0b:
33:93:70:38:09:48:26:61:32:c6:4e:a6:97:37:16:
44:d2:6d:28:6b:3c:66:4f:9c:75:0a:8d:9c:a7:da:
d6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6F:33:CB:A8:0B:61:06:A6:54:6B:65:19:F6:9C:EE:0B:06:16:31
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:07:9f:e4:d2:78:e4:ff:19:b8:e4:54:ab:47:c0:3a:cd:0c:
63:33:cf:9c:4c:0b:66:64:8a:76:b3:77:97:f6:0a:13:51:9e:
7a:6c:16:09:47:c3:b9:8c:99:4d:bf:ee:41:ff:e6:e7:bf:e4:
bc:d8:23:05:48:15:69:55:34:c0:a6:54:03:44:1d:33:f6:7a:
75:63:5b:19:00:d6:fe:13:f4:1a:39:a0:7d:5c:79:f4:70:b8:
dd:fe:2d:5a:f0:41:2a:b9:c0:6d:5c:a3:26:48:11:ea:73:c0:
dd:d3:11:a2:99:72:ce:a2:10:14:4c:0b:5c:31:b6:95:48:57:
92:52:0c:f0:55:c9:70:65:34:77:b4:43:75:c6:6d:bd:d2:00:
61:01:5e:86:07:20:cf:d6:65:40:76:67:a2:53:e7:ea:11:86:
53:24:ec:2e:ab:2e:72:0d:56:92:82:8d:87:60:28:2b:43:8b:
47:0c:96:dd:53:75:34:04:85:79:5d:e2:1b:a0:58:bd:12:c2:
fe:4e:b1:3e:c5:a2:6e:18:a1:09:63:bd:1a:78:b7:84:3f:c1:
ce:fa:83:b9:dd:5d:da:03:85:43:73:19:e5:85:df:d9:72:fd:
da:b0:21:d4:86:97:a5:17:75:78:cc:d9:b9:af:37:d3:3a:c7:
21:cb:f5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:18:34 2026 by rpki-client