Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
File: afAHCvh31rmGswe5vATvGcRAQz0.mft (raw, json)
Hash identifier: DWcvojHo07gm8DgV68/ha62AoQId6OdwJELcFEWrh0M=
Subject key identifier: B9:29:E9:CC:97:20:18:08:3D:0A:BA:B9:DE:D0:C0:98:71:F3:14:E8
Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d
Certificate serial: 01A13E946107B81F674B137980425EB70EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
Manifest number: 0CD9
Signing time: Thu 15 Oct 2026 08:01:13 +0000
Manifest this update: Thu 15 Oct 2026 08:01:13 +0000
Manifest next update: Fri 16 Oct 2026 08:01:13 +0000
Files and hashes: 1: afAHCvh31rmGswe5vATvGcRAQz0.crl (hash: 4F54KZj6knKFmtBEYo8Yj3klNEoP0V8r+m4orl2XOHM=)
2: dkw8BE0MteDejxs-2qVpeffd5cE.roa (hash: OLIzwrtSctTD4rRGWSFchziybsw/DjSgiuUvhAPMb0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:61:07:b8:1f:67:4b:13:79:80:42:5e:b7:0e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d
Validity
Not Before: Oct 15 08:01:13 2026 GMT
Not After : Oct 16 08:01:13 2026 GMT
Subject: CN=b929e9cc972018083d0abab9ded0c09871f314e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:1d:b2:cb:4a:d9:84:2e:cc:28:09:e4:01:
c3:1d:1e:72:cd:67:6f:d1:b8:54:18:77:b3:fa:0d:
b7:00:18:9e:82:60:c0:97:ae:2f:5e:49:c2:77:9e:
05:fb:28:14:66:10:01:c3:fe:8a:4e:e7:4f:97:57:
a7:cd:f5:93:df:a4:df:eb:39:fb:f1:4b:f9:00:f9:
6a:55:f6:1b:7d:eb:93:98:c9:2c:45:8b:06:f7:0d:
e5:60:22:9d:0f:14:95:be:a1:43:c0:65:8e:cb:78:
fb:0a:04:2a:5b:20:0d:5f:1b:d1:73:d7:65:8c:cc:
71:3d:7c:03:72:bb:35:a2:64:e7:a4:ab:aa:07:b0:
79:31:ae:7d:6c:56:cd:3c:2f:a5:d2:25:e5:6d:67:
46:6b:1f:56:c3:48:27:15:22:e6:bd:6a:94:b3:04:
9a:1e:9d:33:c9:cb:58:e3:0b:e2:80:2d:84:e7:51:
cf:19:cf:60:0b:c1:2e:04:34:87:eb:55:f9:e9:9a:
6c:fb:62:9b:92:06:b8:6f:b7:e4:08:3f:4b:77:8b:
e0:a8:d1:d5:ab:a6:07:21:a2:f8:b5:57:fb:28:6f:
d9:7d:65:93:5f:fa:42:ab:9a:95:40:54:47:9e:24:
53:26:9b:be:3e:c7:e4:bd:d5:d7:91:6c:63:65:47:
78:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:29:E9:CC:97:20:18:08:3D:0A:BA:B9:DE:D0:C0:98:71:F3:14:E8
X509v3 Authority Key Identifier:
keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:be:de:0f:97:68:72:4d:fd:2d:d1:9f:74:39:95:48:eb:3f:
fc:61:41:bb:7b:15:8b:d7:4f:ee:8a:c4:d6:55:73:d5:66:11:
4b:ec:9d:0a:e1:8e:28:93:60:0b:bf:50:65:a0:69:8b:f1:6a:
5f:d8:17:9f:d0:11:01:4c:9d:50:6e:21:bb:c6:ee:71:14:86:
e5:35:27:8a:44:dd:71:43:e0:47:aa:60:4a:4a:82:25:fb:27:
3a:fa:7b:a4:db:a0:5a:7e:b4:7a:a3:43:4f:d2:be:ea:8a:d8:
ea:19:c4:21:ef:0c:75:40:36:8e:bb:8b:88:2a:bc:18:a2:3f:
e2:07:d1:c1:ba:5f:e6:dd:5c:36:2f:45:18:76:a1:e4:c7:b7:
bc:05:fc:20:cc:e7:49:c3:3f:39:1f:9e:c6:7b:58:96:38:a5:
72:6c:b7:e2:1b:1a:5f:a9:b6:33:9b:d6:58:c8:37:f5:fa:d9:
58:fa:63:0e:d4:8e:96:09:06:da:39:8b:3f:70:a8:60:9d:cb:
02:c7:ad:a9:64:7d:1d:ad:0f:b2:c6:6b:8e:07:42:70:55:e2:
ad:01:b6:d7:e0:1e:69:d0:00:cc:e8:f5:77:13:b1:16:18:2c:
c6:7b:f9:14:88:29:5b:c1:86:46:e0:3b:52:b4:13:4f:3a:e3:
d1:cf:d1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:14:21 2026 by rpki-client