Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
File: AFA0jPYGQvVOyQck3niqoD3NOOE.mft (raw, json)
Hash identifier: 7bybz/nN+ZJLb1HamJVT9wr7Rz+nGtmtfscglbmS57w=
Subject key identifier: EB:2E:2E:B1:41:16:0E:C8:D4:CB:26:04:62:4B:E7:30:B4:97:76:73
Authority key identifier: 00:50:34:8C:F6:06:42:F5:4E:C9:07:24:DE:78:AA:A0:3D:CD:38:E1
Certificate issuer: /CN=0050348cf60642f54ec90724de78aaa03dcd38e1
Certificate serial: 01A0010208DF82E214CF7F12D5675F18195F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFA0jPYGQvVOyQck3niqoD3NOOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
Manifest number: 11AB
Signing time: Fri 14 Aug 2026 16:01:45 +0000
Manifest this update: Fri 14 Aug 2026 16:01:45 +0000
Manifest next update: Sat 15 Aug 2026 16:01:45 +0000
Files and hashes: 1: AFA0jPYGQvVOyQck3niqoD3NOOE.crl (hash: yA1ehw91DsUWdfgeqJcRlfsotMoWpTwrj8ECjaONd/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFA0jPYGQvVOyQck3niqoD3NOOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:02:08:df:82:e2:14:cf:7f:12:d5:67:5f:18:19:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0050348cf60642f54ec90724de78aaa03dcd38e1
Validity
Not Before: Aug 14 16:01:45 2026 GMT
Not After : Aug 15 16:01:45 2026 GMT
Subject: CN=eb2e2eb141160ec8d4cb2604624be730b4977673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:38:dc:22:8b:9d:4e:8e:5d:d5:99:3b:1d:
5d:f9:d8:cf:eb:98:d4:fe:09:7c:41:6d:06:54:70:
13:b6:7e:cb:4f:5d:03:1a:5c:20:f0:f5:8a:29:9c:
69:b0:12:a7:8c:2b:d7:2c:45:1f:0a:58:2f:a9:7d:
18:03:ce:5f:06:37:1a:32:99:4d:d6:ae:b5:39:18:
14:b2:1c:2f:40:6b:37:e3:47:61:c8:73:f9:fa:21:
27:c3:b0:15:ec:4a:ad:3a:8c:f9:33:e7:fc:39:4a:
b2:29:94:7b:04:ce:a9:53:69:dc:8e:cf:35:a3:61:
05:e2:b4:73:04:5d:8f:20:2c:b1:ed:72:68:ab:a8:
94:0b:b6:74:a7:b1:63:8f:13:46:1a:48:b3:db:4c:
a9:27:a3:cf:8a:fa:06:ef:f6:e0:54:b4:00:5f:52:
94:20:7c:10:84:dd:eb:4d:5d:d0:11:cb:4c:56:ce:
3e:f2:9c:04:64:17:45:45:d9:bf:42:9e:21:9e:25:
64:ac:02:75:c4:a6:c8:ca:ac:18:1c:ec:92:d5:dc:
8a:0d:4d:ef:fa:83:b1:c8:f6:83:c3:6d:c7:5f:62:
8c:a0:b6:68:d1:c6:c8:59:54:64:64:ea:e9:c2:4a:
ef:7f:b3:5e:27:77:93:83:9b:09:92:9c:df:2a:36:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2E:2E:B1:41:16:0E:C8:D4:CB:26:04:62:4B:E7:30:B4:97:76:73
X509v3 Authority Key Identifier:
keyid:00:50:34:8C:F6:06:42:F5:4E:C9:07:24:DE:78:AA:A0:3D:CD:38:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFA0jPYGQvVOyQck3niqoD3NOOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:73:a4:23:e2:f0:a0:9f:24:e6:f1:0b:76:f1:4f:92:3a:22:
1b:4a:dc:2c:dd:76:39:b6:5f:5c:ac:32:b8:be:85:79:80:6c:
0a:ac:15:e4:d6:58:3c:26:f1:05:d8:aa:80:6d:d3:3b:3e:ff:
d5:49:0c:98:85:49:06:61:93:55:fe:b9:82:f5:a8:03:44:cf:
c3:3b:18:16:5b:5e:99:9e:e7:51:1a:9b:d5:b9:ca:d8:c0:22:
18:d1:b1:98:9a:ba:c2:72:73:17:04:e0:d9:79:cd:35:5a:f4:
84:bd:56:eb:3a:d0:c0:97:7a:bc:5a:1b:56:ae:0d:27:6d:7f:
f1:84:09:a8:d3:8a:c5:53:c5:52:43:55:23:8e:e5:8b:4b:5e:
6d:5e:10:ba:ea:03:9b:ef:66:b9:f2:f0:f8:95:75:5a:48:31:
7d:14:e7:34:d2:15:51:df:09:d9:2b:44:e8:7c:3f:ae:66:e2:
ef:1f:4f:09:6d:d0:77:80:7e:c7:d9:59:bc:1b:37:c1:a0:fe:
eb:b6:e4:fe:63:05:ec:4b:a6:63:fd:64:fd:90:51:25:01:d5:
d7:cb:cd:57:6e:39:58:28:f5:7d:6d:57:a5:7a:f7:ac:dc:60:
39:65:72:2e:5d:7a:1f:6a:5a:33:d7:16:7d:55:86:10:99:92:
58:ee:8c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:46 2026 by rpki-client