Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier: 0GcnejO5WzdClV0q41PzhKXbxmf/NW/zA6fscDBXLUs=
Subject key identifier: 67:0C:7C:CF:94:6C:20:08:BE:8F:80:89:42:A1:64:AC:04:BA:FA:2F
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 01A11FADF3003CFAE26C9C75733FE4AD8A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number: 1A9C
Signing time: Fri 09 Oct 2026 08:00:55 +0000
Manifest this update: Fri 09 Oct 2026 08:00:55 +0000
Manifest next update: Sat 10 Oct 2026 08:00:55 +0000
Files and hashes: 1: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: 1i7KYH7at4FuRdb8DqPO4PNGgLDX6QW3lZeHgajWCTo=)
2: NcBIwWrVfFqKGC-Ejlu0skUAVME.roa (hash: QpyQXhGs4Yf3p6aesaO1I7bW/lGukmfPe/wqoZKA1Vg=)
3: adqkP-2igsJaQXB-CV2qD2CLEuM.roa (hash: r8mZ1A6Rtkv/8urvYTAWhmdL97R8eXQcR57KQo0ncAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:ad:f3:00:3c:fa:e2:6c:9c:75:73:3f:e4:ad:8a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: Oct 9 08:00:55 2026 GMT
Not After : Oct 10 08:00:55 2026 GMT
Subject: CN=670c7ccf946c2008be8f808942a164ac04bafa2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:ac:55:20:94:a9:42:c6:99:0f:dd:e0:71:
bc:90:cf:b7:a1:50:dd:16:db:e9:52:78:0f:57:1b:
ed:b7:f9:56:72:25:1f:38:95:45:48:d6:de:0b:16:
d2:0e:1d:b5:9b:c6:a0:f1:3f:da:1f:fb:5f:61:e0:
a5:5e:13:25:1b:72:b4:ed:a2:7f:54:f4:43:31:cf:
b8:c3:97:3e:64:7a:80:af:47:21:31:d8:dd:83:bc:
d0:d4:c1:70:df:bd:90:fb:9c:4a:50:18:51:be:32:
e7:55:5c:8d:45:0a:c8:1c:10:e5:83:31:fc:4a:1f:
40:30:fd:c4:e2:44:d6:62:bc:df:0b:d7:82:2c:bb:
a5:9f:07:d3:cb:0c:ad:d8:5a:2b:6f:c0:60:10:a4:
aa:3e:48:12:16:8c:72:92:16:d0:ac:c8:5f:60:01:
34:9a:34:6c:2d:04:7d:81:e3:fe:67:a7:35:32:57:
d6:2c:8d:a9:11:81:f6:90:5e:0d:5e:87:bc:dd:1b:
33:2a:e1:68:c7:db:7f:44:2d:fb:a3:22:94:6d:34:
34:65:e7:5d:6a:0d:d5:ef:3d:a8:84:65:9d:1f:13:
02:95:50:03:33:86:ae:0e:43:84:76:a8:17:cd:c7:
0b:73:d4:1b:eb:a2:3c:c1:a7:9c:2c:61:29:b6:c8:
d1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0C:7C:CF:94:6C:20:08:BE:8F:80:89:42:A1:64:AC:04:BA:FA:2F
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ce:a4:ba:82:d9:18:31:47:05:0c:f7:77:02:ad:28:cc:14:
20:af:5d:fd:b1:fe:6c:21:6b:a0:54:c2:18:68:e7:2e:dc:68:
e5:0f:7f:87:b0:67:9d:1e:b4:21:cb:96:88:27:63:01:17:e1:
11:51:38:36:fa:7b:1d:3d:f6:bd:ad:20:ad:ea:c8:3f:b6:6c:
b8:72:4a:18:4a:60:79:fc:60:b3:0f:ed:71:e1:98:7b:55:db:
f4:6f:78:02:94:21:9e:45:23:24:b6:60:00:33:c4:b8:7b:86:
a1:b6:99:c7:6d:31:73:5e:8d:87:4e:1d:ff:20:dd:5c:c7:08:
bd:43:b5:45:7e:cc:b7:1b:c8:14:d8:5d:10:90:88:6e:e3:fd:
b0:c8:ab:33:06:48:fb:cf:c1:2c:a4:91:36:75:76:dc:41:e9:
6c:3e:00:8a:0d:36:8a:08:40:43:bc:ab:6a:26:c6:2a:bc:2b:
92:0a:4f:0f:b3:de:2e:1d:88:aa:02:02:cd:c8:03:b3:ab:2d:
fe:89:4a:70:87:1c:15:61:9a:6d:af:bd:20:8d:71:6c:4c:6b:
8b:26:13:07:c8:a8:74:dc:6b:1a:a6:a7:7f:0d:23:dc:34:a3:
35:ff:b2:c7:eb:ef:fd:36:93:78:e0:b4:f1:65:5b:dd:d9:d1:
00:ac:43:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:19:34 2026 by rpki-client