Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: HQFU6sU3q6PhsRm9vXn3u2P+oO/MNESYOMQduoYhF+U=
Subject key identifier: B2:B3:16:79:F6:B5:CA:29:E7:8B:FE:33:3A:93:6C:AC:C0:9D:5A:76
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 01A08F44CC23B9C9B75FE6E6DC4A88048B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 19DD
Signing time: Fri 11 Sep 2026 07:00:45 +0000
Manifest this update: Fri 11 Sep 2026 07:00:45 +0000
Manifest next update: Sat 12 Sep 2026 07:00:45 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: fXEOikY+Y4rCpj2VmXc6XmWT2JfAyiHKO9PDGwEdfhc=)
2: xIyRvynsJDfonhuzRYt1ty9sqMY.roa (hash: EoXBFExcfd/L36PfBZw/K0nrCLVb7q9unxVkiCC6TIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:44:cc:23:b9:c9:b7:5f:e6:e6:dc:4a:88:04:8b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Sep 11 07:00:45 2026 GMT
Not After : Sep 12 07:00:45 2026 GMT
Subject: CN=b2b31679f6b5ca29e78bfe333a936cacc09d5a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:62:ea:68:78:95:59:15:3d:b8:f7:89:45:
25:c9:18:8f:d3:c4:bf:d2:ec:00:34:dd:1c:20:69:
34:48:0e:2b:33:ca:cc:8b:43:2d:03:84:6f:23:91:
eb:61:ae:e4:dd:4c:8d:50:a3:b8:00:58:92:ec:af:
c6:54:e1:9c:24:bf:93:7e:6d:ad:01:fc:9c:3b:87:
63:b7:18:20:5f:61:06:85:28:e8:0b:a6:61:bd:8e:
f3:55:0a:05:64:98:f4:31:d3:2c:5a:49:fe:42:ef:
ae:e3:58:b6:03:6a:21:7e:f6:15:b5:e8:8c:78:57:
70:cd:fc:6d:5c:19:64:8b:7e:ed:d4:01:04:a5:89:
60:2e:aa:91:02:e9:c1:a3:da:d0:94:58:5d:36:dc:
17:9d:8b:81:e6:22:70:a7:a4:df:0b:40:11:f5:54:
7f:b8:aa:11:55:39:fb:56:b0:e6:36:01:2f:79:40:
9b:31:e0:81:00:9d:c3:d0:48:36:a8:63:fd:8e:ee:
43:46:23:8f:77:cd:f3:57:66:b0:d4:23:64:f3:0c:
20:a0:53:68:a7:71:75:17:1e:b3:e8:2b:c5:63:78:
40:0e:00:35:a7:cf:3d:08:8a:1f:22:55:24:c4:5c:
7e:db:c3:b0:20:d1:e2:20:df:34:cc:e2:b4:c6:91:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B3:16:79:F6:B5:CA:29:E7:8B:FE:33:3A:93:6C:AC:C0:9D:5A:76
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7b:8a:46:02:3c:d7:02:8e:c5:43:58:5c:09:4d:4b:36:cc:
52:d3:78:cb:f1:e0:3d:fc:5c:76:0f:cb:e4:67:a8:29:32:11:
b7:37:8f:3e:4c:48:e0:4b:be:9a:01:f0:e8:83:0a:d2:d6:7e:
cd:41:41:bc:6f:84:9d:48:6a:be:dd:37:a0:d1:56:f2:a6:66:
6c:45:e9:5c:f4:db:83:b9:fb:cb:0c:dd:ad:a3:2c:23:80:23:
12:5c:88:64:72:f3:a0:43:04:bb:4a:19:91:37:33:61:94:89:
d1:4f:83:20:5b:b3:5a:a9:27:17:fd:84:d4:81:ba:f4:a2:04:
d9:b0:f3:0b:5c:0e:4e:cb:9f:24:69:fd:01:e4:1c:5a:bd:89:
cb:ea:57:b7:6f:04:90:9e:00:d5:6c:7b:47:a5:c3:ed:7d:37:
9b:4c:78:9a:f1:8a:25:e0:b3:bf:14:5c:43:07:a4:5a:ba:d6:
d0:bc:e9:0c:70:2c:ff:21:b4:0a:56:80:d1:1c:7f:af:ac:26:
92:cd:94:4e:08:7f:78:da:89:86:8d:09:fe:ca:64:01:7e:e8:
a2:9e:7a:ff:3b:9f:d4:f3:84:bf:f9:04:8d:39:41:45:ed:75:
94:9f:90:10:9b:06:7f:b6:c2:88:1e:f6:7c:8e:e2:f5:85:6d:
09:9f:1d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:38:45 2026 by rpki-client