Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
File: afAHCvh31rmGswe5vATvGcRAQz0.mft (raw, json)
Hash identifier: Z63GEwKEnwhpOLYatNBPy2bx0dd+JzV0snHY1fJ5lM8=
Subject key identifier: 20:0C:1F:FD:BF:B8:5F:5A:99:C3:18:A4:F5:61:8A:2E:28:15:92:82
Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d
Certificate serial: 01A001DD42C6F22C7F9A2883C7F849B8241F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
Manifest number: 0C35
Signing time: Fri 14 Aug 2026 20:01:12 +0000
Manifest this update: Fri 14 Aug 2026 20:01:12 +0000
Manifest next update: Sat 15 Aug 2026 20:01:12 +0000
Files and hashes: 1: afAHCvh31rmGswe5vATvGcRAQz0.crl (hash: m2EefK4H+z3dGpPuX247a+3JtZbepoM/7VBkDu+81VY=)
2: dkw8BE0MteDejxs-2qVpeffd5cE.roa (hash: OLIzwrtSctTD4rRGWSFchziybsw/DjSgiuUvhAPMb0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:42:c6:f2:2c:7f:9a:28:83:c7:f8:49:b8:24:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d
Validity
Not Before: Aug 14 20:01:12 2026 GMT
Not After : Aug 15 20:01:12 2026 GMT
Subject: CN=200c1ffdbfb85f5a99c318a4f5618a2e28159282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:3e:32:06:86:80:34:0c:b7:d8:93:1c:74:
f3:90:d6:e2:12:dc:80:52:9e:ab:1c:11:de:1a:32:
0e:08:94:59:26:cc:ef:40:e1:a6:df:64:a4:56:68:
00:7e:11:93:ef:43:67:f5:3f:5c:8b:98:fa:cb:55:
8d:5f:d0:d4:42:0c:62:56:8b:bf:b2:a6:ba:e0:a8:
9c:ec:54:d4:16:c7:e0:e0:58:7d:b1:c0:f8:ab:7a:
68:42:f2:78:1e:f3:d8:f2:44:a7:0f:1a:c4:d3:d8:
58:e5:a3:3e:de:b0:a2:27:42:91:1b:14:5a:b8:c2:
f1:52:be:dc:12:ad:bd:ef:7b:cf:2d:18:8b:88:36:
71:07:b4:92:a8:eb:5f:33:d8:8f:35:06:c1:e1:f6:
6d:c6:a5:8c:8c:27:6b:ab:e7:16:ce:68:32:96:66:
f0:10:d8:83:ef:a3:82:5c:58:0a:6d:0c:d2:15:ea:
48:63:d9:2e:eb:c4:06:6f:cc:ff:b2:dd:37:05:27:
77:73:cc:d4:e3:1d:bf:3d:0e:e1:f6:2f:36:79:fd:
32:78:f8:c3:e0:33:00:3d:f8:37:cb:99:49:03:bf:
7f:58:56:49:f0:1d:70:59:f8:89:10:38:5c:97:1f:
a2:9d:4e:d7:08:3e:6d:c6:53:41:26:71:f7:1b:b8:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0C:1F:FD:BF:B8:5F:5A:99:C3:18:A4:F5:61:8A:2E:28:15:92:82
X509v3 Authority Key Identifier:
keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2e:83:63:c5:08:a4:17:0c:87:77:cb:52:8b:4d:f2:69:81:
1d:98:dd:7d:fb:f7:3e:dc:3a:58:b3:cd:90:e2:c4:7d:bc:8f:
11:c8:29:b4:7f:dd:2e:88:be:76:1a:b0:e9:e3:14:c8:5f:f8:
24:5a:cb:19:73:b3:4a:bb:2e:a9:92:21:61:79:50:c2:b3:05:
59:2c:4c:6b:76:dc:52:bc:64:06:5e:55:23:b9:61:89:3e:47:
43:4c:46:ab:0f:09:6c:29:47:bc:4d:3a:fc:0c:10:b1:91:43:
41:ba:66:74:b8:ff:c5:a7:27:71:12:a0:74:a5:cb:b0:6e:f8:
33:cd:05:d6:b6:0b:8f:00:14:9b:3a:a0:ff:b5:34:2b:bc:f4:
bc:d0:68:49:fb:3a:d1:6c:5f:63:07:58:12:e9:9f:8c:42:64:
4b:6f:56:96:ab:2d:8f:9a:c2:c8:7e:b6:44:38:8f:09:47:ea:
55:d5:cb:b5:22:47:f6:15:7e:37:d5:2f:b8:79:31:a9:63:f7:
01:3c:dd:d8:c4:ee:32:80:3f:0a:5b:d4:3b:c8:97:9f:90:8d:
35:54:a3:f8:b7:97:b1:21:f2:6a:be:e9:5b:4f:68:47:1d:81:
a1:5d:6b:f6:6f:24:73:a2:15:8b:b1:d1:b3:a9:67:78:c7:6f:
ff:73:19:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:17 2026 by rpki-client