Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier: j6mQt+Nk0MXdz8aRG/RLkAW/YWOLCER+jEPAn2cCtUU=
Subject key identifier: 0F:40:7D:8B:8F:DA:EF:7B:42:77:72:65:16:A7:DC:6F:C9:ED:49:20
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 01A0024B634298FBC86FB9777F3FEB842125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number: 071A
Signing time: Fri 14 Aug 2026 22:01:29 +0000
Manifest this update: Fri 14 Aug 2026 22:01:29 +0000
Manifest next update: Sat 15 Aug 2026 22:01:29 +0000
Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: WAZFFM+k3IlCkfqEIH58t6bKN5tW2jcaUP5KBuMLkXY=)
2: v5j62T31CGbyesihQ2ZxZfpouT0.roa (hash: /9+S8FBh2KrNLclqntL3l149SX/pG8FSBZ5MZAy4TsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:63:42:98:fb:c8:6f:b9:77:7f:3f:eb:84:21:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Aug 14 22:01:29 2026 GMT
Not After : Aug 15 22:01:29 2026 GMT
Subject: CN=0f407d8b8fdaef7b4277726516a7dc6fc9ed4920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:d2:e6:64:c0:85:44:9e:29:4d:83:6a:cb:
9d:2d:1a:bb:f4:46:dd:10:5c:40:8b:60:e0:e4:94:
55:77:9b:4f:d0:e8:e1:bf:03:47:08:d2:17:37:1a:
ab:e0:0f:b9:6b:76:3a:14:b5:24:08:64:26:7a:e4:
84:16:56:54:ab:7a:f1:24:fc:18:7d:83:e3:59:ed:
54:00:5e:eb:67:ad:f3:cd:9d:2b:2b:e6:13:b7:63:
48:d4:83:e0:99:a9:6b:da:16:6a:bb:86:01:cb:5b:
32:a1:72:e0:28:6d:5e:cc:c3:4c:30:cc:2d:1b:ee:
93:db:54:b6:13:e6:3c:af:27:e4:94:d9:a1:ec:19:
a7:35:aa:f4:ce:6a:16:5b:ff:74:d5:40:5e:07:66:
bf:9a:31:37:43:11:9c:24:75:11:c6:77:24:6f:a7:
48:5f:f9:f0:15:49:0e:7d:1d:67:1e:fb:96:b3:21:
91:5b:1d:4e:78:9d:2b:09:3a:f0:99:89:ed:b9:37:
3d:bd:59:b7:7f:6b:d4:28:3e:44:fa:78:fe:00:44:
e6:a6:b0:bf:16:ce:47:60:0d:65:61:28:b7:e8:b2:
69:9f:b9:85:53:f0:28:cb:d8:01:76:3c:89:dc:b6:
52:e6:4a:03:0a:6f:97:2a:f2:38:f1:0c:d4:f6:52:
d2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:40:7D:8B:8F:DA:EF:7B:42:77:72:65:16:A7:DC:6F:C9:ED:49:20
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:45:54:cf:bd:c6:df:a9:0e:29:1a:69:9e:a6:43:07:bb:44:
06:72:b8:ea:aa:ee:8f:ab:30:e2:fd:ad:ec:18:8d:ec:3b:2c:
a1:51:b1:aa:54:06:92:75:9d:28:0b:23:b3:29:d2:10:33:18:
15:c6:2b:65:b3:77:31:9c:79:2e:76:02:31:52:c9:77:35:0b:
8e:3c:26:57:98:f5:42:9e:0e:a7:62:2d:14:15:2d:90:87:39:
fe:3c:c8:8b:86:1c:0d:af:12:14:03:d4:85:4e:67:40:b6:ec:
9b:98:50:d2:af:b1:26:00:ca:14:0a:00:12:39:b9:40:31:8c:
3d:0c:56:dc:8e:c9:33:41:a3:78:7c:fd:2f:5d:06:17:92:63:
76:19:ce:84:00:40:de:1c:3d:c2:c2:7f:39:27:c4:9d:26:28:
53:ca:af:fc:db:90:e6:fc:f3:db:76:03:2a:08:c7:7a:8c:1c:
a8:9a:cf:58:41:e0:67:23:3f:87:85:ef:02:de:3c:59:a5:21:
3b:bb:a8:6e:a0:e7:00:82:99:50:90:e0:6f:57:dd:e3:80:ec:
08:75:9f:ea:5b:d1:c9:bb:ad:52:da:83:ec:01:69:e3:a9:2b:
77:87:4d:b0:23:96:71:36:75:77:49:a9:49:33:92:d1:cd:c7:
72:c4:5e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:26 2026 by rpki-client