Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: 7tId3YdhdewPHrjHSpzP+NuDNi8ZtVSxN3L19U9ITNM=
Subject key identifier: 7D:5C:1E:5A:BE:B9:79:D8:35:71:6C:60:E1:A5:22:F1:42:64:FC:A4
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 019CE4B65A0D5DAF163EC6EB7D877AFF40D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 17F7
Signing time: Fri 13 Mar 2026 01:01:21 +0000
Manifest this update: Fri 13 Mar 2026 01:01:21 +0000
Manifest next update: Sat 14 Mar 2026 01:01:21 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: b9PVYMXBgYyviy2fqzi+lv/q84hRE4Y0PWdi1ZKzHgs=)
2: xIyRvynsJDfonhuzRYt1ty9sqMY.roa (hash: EoXBFExcfd/L36PfBZw/K0nrCLVb7q9unxVkiCC6TIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b6:5a:0d:5d:af:16:3e:c6:eb:7d:87:7a:ff:40:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Mar 13 01:01:21 2026 GMT
Not After : Mar 14 01:01:21 2026 GMT
Subject: CN=7d5c1e5abeb979d835716c60e1a522f14264fca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:65:c5:bb:f5:75:ee:72:b0:58:33:1d:93:
31:97:11:b9:b2:fc:9d:0b:75:92:b4:e1:9a:5e:9b:
be:75:22:43:c3:b8:84:d6:7e:52:13:fd:e8:5b:16:
24:d7:4b:94:f5:a5:d4:ed:43:dd:e3:d5:e8:a5:69:
a9:a9:d6:5e:af:bc:93:24:9f:5c:9c:17:66:9b:8d:
b7:a4:64:0a:77:26:12:51:7f:8b:33:70:6e:9e:df:
72:ab:ec:7f:8b:59:7c:81:63:17:2b:78:82:c7:da:
37:90:e3:54:75:9c:6f:bd:c7:96:7c:3b:66:db:11:
17:99:44:04:eb:c4:11:c1:34:7c:2f:0c:e3:40:b9:
7b:ce:24:98:5c:a1:e0:71:ff:f8:8a:85:e0:6f:40:
ac:61:6d:c5:16:60:29:74:55:d0:4b:af:68:0c:fc:
3c:bd:0c:f4:81:fb:78:ef:e8:08:ef:aa:84:6a:75:
1a:b4:73:21:4d:4b:fb:74:69:2f:8d:f2:65:75:60:
b3:d3:39:fd:48:d0:1d:04:08:69:37:c8:98:89:22:
d6:9c:2d:27:87:bb:4b:06:31:1c:29:d7:94:2c:5d:
2b:75:64:a3:36:e6:25:69:bb:0a:2e:ff:be:b1:6f:
93:ee:7b:77:a5:e6:c4:4d:38:be:74:ea:d3:74:1e:
0e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5C:1E:5A:BE:B9:79:D8:35:71:6C:60:E1:A5:22:F1:42:64:FC:A4
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:06:17:bc:48:a9:4e:86:6d:ba:9a:88:d5:33:5b:60:a3:dd:
dc:26:0b:4c:31:0b:80:7e:01:05:c1:1b:0e:d8:a4:a4:83:b8:
1d:16:54:89:4e:57:71:65:40:b6:fe:60:bd:e7:6c:b1:34:18:
9a:1e:d6:18:54:ad:f8:f4:b6:c1:f8:7f:e1:8d:20:b7:2c:d3:
54:76:52:f5:14:a6:3e:18:c9:6a:7d:37:84:6f:25:3f:1e:5f:
83:e9:a0:9d:e8:39:f1:57:2b:b2:93:8d:9e:f4:b4:2c:12:bb:
c2:67:46:31:25:b7:70:c3:36:d3:28:81:12:fa:b8:d6:67:7f:
ff:6e:9d:97:26:86:41:64:dd:75:e2:61:c7:4d:d9:b2:c6:3c:
37:2d:6b:74:f1:1e:11:de:49:16:df:e7:88:70:7e:95:58:c8:
31:e7:3f:a6:04:01:f6:1a:c2:03:22:0c:59:09:4d:5a:51:4b:
df:89:6f:90:98:ff:53:00:2d:9d:3d:c6:8d:da:c5:92:b2:de:
bc:44:01:d2:09:7d:2e:5e:be:f9:59:52:28:7a:7b:db:1d:a9:
92:8e:8f:d3:16:31:d1:8e:a1:30:4e:c9:ef:c4:d4:05:68:8c:
a2:e3:5c:f1:49:af:8e:f1:88:d7:c2:71:e7:db:cc:0d:73:4e:
73:16:28:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:30:15 2026 by rpki-client