Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
File: AFA0jPYGQvVOyQck3niqoD3NOOE.mft (raw, json)
Hash identifier: xF9iYPDXYWnXn4raz4Ms5rv7dmXtD4UHWiBfpkWEzD4=
Subject key identifier: 6E:FC:79:B2:CD:5F:6E:68:E7:28:6D:F5:91:84:43:98:3F:DF:6A:1C
Authority key identifier: 00:50:34:8C:F6:06:42:F5:4E:C9:07:24:DE:78:AA:A0:3D:CD:38:E1
Certificate issuer: /CN=0050348cf60642f54ec90724de78aaa03dcd38e1
Certificate serial: 01A13DB8D2077E8A51298607B0C1CC69CB7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFA0jPYGQvVOyQck3niqoD3NOOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
Manifest number: 124F
Signing time: Thu 15 Oct 2026 04:01:24 +0000
Manifest this update: Thu 15 Oct 2026 04:01:24 +0000
Manifest next update: Fri 16 Oct 2026 04:01:24 +0000
Files and hashes: 1: AFA0jPYGQvVOyQck3niqoD3NOOE.crl (hash: CNNbbOWqM4oSW+4dq6KoXeYrWjepAABiFPBpd7+Cfgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFA0jPYGQvVOyQck3niqoD3NOOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:d2:07:7e:8a:51:29:86:07:b0:c1:cc:69:cb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0050348cf60642f54ec90724de78aaa03dcd38e1
Validity
Not Before: Oct 15 04:01:24 2026 GMT
Not After : Oct 16 04:01:24 2026 GMT
Subject: CN=6efc79b2cd5f6e68e7286df5918443983fdf6a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:e0:1e:9f:8f:7c:0e:19:e8:6e:32:16:4f:
49:19:d2:f7:fb:82:ed:11:62:8b:fe:25:04:83:09:
f4:9b:02:fe:f0:22:2c:cd:16:94:e3:55:cb:c5:c5:
36:42:f2:97:69:23:7b:dd:6c:9c:89:d6:75:de:3c:
d5:a1:5f:d2:20:d8:96:15:14:78:bd:b3:a7:8a:03:
f8:de:2e:4d:f4:87:1d:20:29:33:37:1a:b9:79:66:
2d:53:59:03:ac:f0:1e:c4:2e:4c:0e:26:0c:96:06:
cf:8a:9d:05:99:85:a0:c6:1f:f4:66:c3:d1:65:7b:
af:42:88:3c:05:ac:8b:03:36:79:b9:f1:25:57:b2:
b9:9b:d8:b1:e8:86:28:b3:7c:ee:b4:df:63:a3:59:
e3:9a:17:7b:74:0f:25:5d:26:02:cb:3f:fc:1d:25:
ed:f0:a8:19:cc:b6:09:c7:bc:aa:0f:0d:f1:44:74:
50:3e:dc:05:2d:8b:55:b9:31:08:aa:bc:15:0c:2c:
eb:e2:38:56:f9:91:0b:04:66:69:14:cd:8a:38:98:
1c:fd:b3:15:76:14:bb:d4:38:b3:79:6d:3f:34:91:
2c:03:5c:2e:e9:84:ce:c6:05:e1:3a:a5:ac:40:ed:
f0:7c:74:e4:54:37:d7:1b:a8:51:09:50:14:8a:c4:
e5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FC:79:B2:CD:5F:6E:68:E7:28:6D:F5:91:84:43:98:3F:DF:6A:1C
X509v3 Authority Key Identifier:
keyid:00:50:34:8C:F6:06:42:F5:4E:C9:07:24:DE:78:AA:A0:3D:CD:38:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFA0jPYGQvVOyQck3niqoD3NOOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ba:04:98:7b:05:0d:cf:a0:64:9c:5f:ce:5c:17:83:81:11:
93:45:a6:4e:ad:40:fa:fe:1e:ed:f7:d1:b3:eb:40:d0:4b:1e:
ca:f5:8f:f3:35:a3:69:bb:fb:b5:7a:d1:79:7c:aa:89:df:a8:
8d:26:01:26:cc:2c:0a:f4:97:b9:d3:11:10:42:2d:2d:d5:9a:
09:ea:7e:c4:e8:db:17:bc:78:a3:45:60:5a:82:2d:96:79:9f:
a4:3c:3c:98:c7:77:db:28:85:fb:ab:42:44:bd:ae:cb:df:7f:
19:2b:82:d6:f6:00:e0:c6:76:5e:d4:ed:f8:b1:57:da:75:fc:
7c:e5:6e:cf:43:e7:6b:72:db:8c:ed:e3:a1:c8:ec:6e:18:84:
a6:e3:86:a1:10:35:30:a8:83:43:f0:98:49:72:dc:28:cf:c1:
39:07:44:a1:a7:94:ec:05:be:9c:92:c6:5f:42:7b:db:ea:15:
74:35:38:b1:ab:35:71:51:cb:1c:42:20:20:83:78:62:3d:db:
5a:40:fe:59:f7:b2:6e:d8:2b:05:ea:76:76:00:bf:b2:84:a9:
9c:06:e0:fe:e8:74:ce:1d:cf:a1:04:ca:c1:b5:f6:c5:23:d7:
97:c1:a9:7f:42:02:ce:58:73:77:5b:de:74:08:01:cf:06:52:
f3:4a:cc:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uNIHfopRKYYHsMHMact6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNTAzNDhjZjYwNjQyZjU0ZWM5MDcyNGRlNzhhYWEwM2Rj
ZDM4ZTEwHhcNMjYxMDE1MDQwMTI0WhcNMjYxMDE2MDQwMTI0WjAzMTEwLwYDVQQD
Eyg2ZWZjNzliMmNkNWY2ZTY4ZTcyODZkZjU5MTg0NDM5ODNmZGY2YTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY/gHp+PfA4Z6G4yFk9JGdL3+4Lt
EWKL/iUEgwn0mwL+8CIszRaU41XLxcU2QvKXaSN73WycidZ13jzVoV/SINiWFRR4
vbOnigP43i5N9IcdICkzNxq5eWYtU1kDrPAexC5MDiYMlgbPip0FmYWgxh/0ZsPR
ZXuvQog8BayLAzZ5ufElV7K5m9ix6IYos3zutN9jo1njmhd7dA8lXSYCyz/8HSXt
8KgZzLYJx7yqDw3xRHRQPtwFLYtVuTEIqrwVDCzr4jhW+ZELBGZpFM2KOJgc/bMV
dhS71DizeW0/NJEsA1wu6YTOxgXhOqWsQO3wfHTkVDfXG6hRCVAUisTlqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG78ebLNX25o5yht9ZGEQ5g/32ocMB8GA1UdIwQY
MBaAFABQNIz2BkL1TskHJN54qqA9zTjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUZBMGpQWUdRdlZPeVFjazNuaXFvRDNOT09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMTI0YjItNDc0ZS00NWEwLWI3M2Et
ZTU0YjA2YTkzNTI2LzEvQUZBMGpQWUdRdlZPeVFjazNuaXFvRDNOT09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mMTI0YjItNDc0ZS00NWEwLWI3M2EtZTU0YjA2YTkzNTI2
LzEvQUZBMGpQWUdRdlZPeVFjazNuaXFvRDNOT09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuroEmHsF
Dc+gZJxfzlwXg4ERk0WmTq1A+v4e7ffRs+tA0EseyvWP8zWjabv7tXrReXyqid+o
jSYBJswsCvSXudMREEItLdWaCep+xOjbF7x4o0VgWoItlnmfpDw8mMd32yiF+6tC
RL2uy99/GSuC1vYA4MZ2XtTt+LFX2nX8fOVuz0Pna3LbjO3jocjsbhiEpuOGoRA1
MKiDQ/CYSXLcKM/BOQdEoaeU7AW+nJLGX0J72+oVdDU4sas1cVHLHEIgIIN4Yj3b
WkD+WfeybtgrBep2dgC/soSpnAbg/uh0zh3PoQTKwbX2xSPXl8Gpf0ICzlhzd1ve
dAgBzwZS80rM8A==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:48 2026 by rpki-client