Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: TYttD/lfJSIjz+okp36+RSYWaegU0tYenhFO1HI2Now=
Subject key identifier: 2B:31:03:17:3C:1F:4C:3C:F5:95:DE:E8:41:FB:8A:0D:59:FE:C4:B2
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 019EB9FDBDE6AE1FB8F11272A80FF1247B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 18EA
Signing time: Fri 12 Jun 2026 04:01:14 +0000
Manifest this update: Fri 12 Jun 2026 04:01:14 +0000
Manifest next update: Sat 13 Jun 2026 04:01:14 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: RNSINWczKSitPWvY9+nuH8QAGcg0QG5N6ZbJzNEHT7c=)
2: xIyRvynsJDfonhuzRYt1ty9sqMY.roa (hash: EoXBFExcfd/L36PfBZw/K0nrCLVb7q9unxVkiCC6TIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:bd:e6:ae:1f:b8:f1:12:72:a8:0f:f1:24:7b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Jun 12 04:01:14 2026 GMT
Not After : Jun 13 04:01:14 2026 GMT
Subject: CN=2b3103173c1f4c3cf595dee841fb8a0d59fec4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:34:ea:4e:7f:44:9b:51:af:45:64:83:0f:
df:42:64:50:a2:8b:36:69:ca:77:ea:8d:48:e2:9a:
a6:31:00:5b:88:08:5b:2f:ec:f3:60:61:86:af:f1:
6d:5e:95:a3:ac:38:d5:54:99:42:7c:9f:be:57:79:
61:96:47:62:4c:01:91:cb:4b:e6:ea:c1:5c:0f:38:
71:91:a3:cc:ee:f0:5c:76:5f:07:b5:0d:00:b1:c2:
bd:15:de:3b:5b:04:23:db:e9:11:39:ba:12:4d:fc:
8f:44:0e:9c:12:a7:b0:23:38:de:5f:ff:36:f1:b7:
c7:8c:68:44:24:72:ed:bb:33:8a:39:21:8d:02:6a:
42:68:b7:10:a0:f2:4a:a8:ce:4b:c8:dd:96:1c:81:
f0:f0:c1:90:67:e1:ac:e5:5f:61:f9:91:71:2a:7f:
9f:dd:af:8e:bc:44:10:9e:ae:e4:5e:1b:02:6e:18:
71:b8:d5:b5:57:a3:88:68:7d:e2:6e:63:ff:e5:7a:
99:88:68:2e:de:5b:78:12:db:59:f7:7e:a8:66:91:
8a:65:42:0f:15:1f:25:c4:42:80:22:d8:88:32:bc:
af:38:cc:81:94:82:bd:01:9c:45:9b:4c:ce:b1:70:
22:aa:3c:61:56:bb:76:0e:80:45:0e:09:52:1c:cd:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:31:03:17:3C:1F:4C:3C:F5:95:DE:E8:41:FB:8A:0D:59:FE:C4:B2
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9f:84:d9:c9:9a:20:58:e9:66:5f:bd:a9:0c:a8:f2:97:33:
aa:eb:c9:7e:03:c0:1a:6b:42:df:b5:28:cc:c5:d4:cb:ad:f1:
7d:be:33:4c:e8:7b:f1:c7:57:98:0a:d1:fe:e1:11:33:e4:1a:
4f:cc:0e:bf:eb:14:dc:15:94:62:f7:95:3d:e2:0e:c8:8f:82:
19:8c:c1:2a:e1:b4:4c:7b:d3:95:56:87:bc:fb:1d:52:0f:eb:
7e:fd:46:c6:b3:d1:78:30:27:1a:01:0a:75:00:0b:cf:d9:c7:
33:ce:76:1b:52:eb:f5:67:20:cc:39:43:22:6d:57:d3:2e:b3:
ff:45:60:56:f3:27:b4:b5:9e:c9:12:3a:8e:ce:22:61:54:48:
44:7d:7e:09:41:61:8d:6b:96:29:9c:15:88:36:5f:f7:dc:e7:
bd:f1:9b:a5:d8:2f:22:d9:d7:ba:05:d8:ab:11:2e:52:2d:5f:
e1:c7:0e:d4:6c:dd:8a:21:94:23:5e:fd:1d:f3:74:06:ae:36:
58:11:35:b5:a1:f1:69:4c:e3:4d:61:e8:5f:56:6e:b4:76:04:
e0:d1:71:40:b4:21:a5:d6:85:f6:31:6f:53:87:bb:36:3b:92:
23:0f:a9:f5:7a:ad:dd:fc:a9:b8:e8:45:9c:c8:b6:1a:b4:37:
6c:1f:66:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65/b3mrh+48RJyqA/xJHuJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NTFhM2ZlZTc3ZTkyNDE0NjE3NzEyM2RkNjc1M2IwNmZk
ZTI0NTIwHhcNMjYwNjEyMDQwMTE0WhcNMjYwNjEzMDQwMTE0WjAzMTEwLwYDVQQD
EygyYjMxMDMxNzNjMWY0YzNjZjU5NWRlZTg0MWZiOGEwZDU5ZmVjNGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTs06k5/RJtRr0Vkgw/fQmRQoos2
acp36o1I4pqmMQBbiAhbL+zzYGGGr/FtXpWjrDjVVJlCfJ++V3lhlkdiTAGRy0vm
6sFcDzhxkaPM7vBcdl8HtQ0AscK9Fd47WwQj2+kROboSTfyPRA6cEqewIzjeX/82
8bfHjGhEJHLtuzOKOSGNAmpCaLcQoPJKqM5LyN2WHIHw8MGQZ+Gs5V9h+ZFxKn+f
3a+OvEQQnq7kXhsCbhhxuNW1V6OIaH3ibmP/5XqZiGgu3lt4EttZ936oZpGKZUIP
FR8lxEKAItiIMryvOMyBlIK9AZxFm0zOsXAiqjxhVrt2DoBFDglSHM3a3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsxAxc8H0w89ZXe6EH7ig1Z/sSyMB8GA1UdIwQY
MBaAFGhRo/7nfpJBRhdxI91nU7Bv3iRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQt
YTNiNTg2MjgwNjBkLzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQtYTNiNTg2MjgwNjBk
LzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJ+E2cma
IFjpZl+9qQyo8pczquvJfgPAGmtC37UozMXUy63xfb4zTOh78cdXmArR/uERM+Qa
T8wOv+sU3BWUYveVPeIOyI+CGYzBKuG0THvTlVaHvPsdUg/rfv1GxrPReDAnGgEK
dQALz9nHM852G1Lr9WcgzDlDIm1X0y6z/0VgVvMntLWeyRI6js4iYVRIRH1+CUFh
jWuWKZwViDZf99znvfGbpdgvItnXugXYqxEuUi1f4ccO1GzdiiGUI179HfN0Bq42
WBE1taHxaUzjTWHoX1ZutHYE4NFxQLQhpdaF9jFvU4e7NjuSIw+p9Xqt3fypuOhF
nMi2GrQ3bB9mpQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:43 2026 by rpki-client