Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier: w2VnEBEo9Xv4V8H4j/uJ9ancdlarSmVMbS2BkAX153U=
Subject key identifier: 98:76:5E:D1:E4:02:03:53:39:DE:3C:94:BC:50:57:98:BE:69:6A:0A
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 019DCF74EF6DABF031E2E8AE8310D5EF5F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 15:00:40 +0000
Manifest this update: Mon 27 Apr 2026 15:00:40 +0000
Manifest next update: Tue 28 Apr 2026 15:00:40 +0000
Files and hashes: 1: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: Z5qAl70mmvn11bD07XyyGUeUvt9CUrR8gcB77vblpCQ=)
2: NcBIwWrVfFqKGC-Ejlu0skUAVME.roa (hash: QpyQXhGs4Yf3p6aesaO1I7bW/lGukmfPe/wqoZKA1Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:74:ef:6d:ab:f0:31:e2:e8:ae:83:10:d5:ef:5f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: Apr 27 15:00:40 2026 GMT
Not After : Apr 28 15:00:40 2026 GMT
Subject: CN=98765ed1e402035339de3c94bc505798be696a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:5a:5c:cc:37:66:14:00:d5:fb:8c:60:b2:
19:a0:10:87:5f:bb:f3:31:14:87:46:fe:a0:c7:ee:
76:9a:42:58:50:49:7f:ad:07:3f:7e:5b:e1:bf:5a:
4d:4d:fa:09:49:68:9a:0c:69:29:d3:6f:7d:b4:75:
d5:ee:91:a8:a4:de:68:0d:80:54:9c:2f:08:ad:1b:
43:e0:80:a5:ab:c3:c5:4b:75:ce:ed:3f:54:30:78:
5e:e4:5c:1e:8c:14:2e:13:b5:c1:9b:6b:fb:4b:e2:
b4:9e:28:35:17:22:24:6a:20:70:41:f6:71:4d:f9:
fe:70:f2:55:2a:99:8b:12:ef:6e:9e:74:44:96:83:
bb:98:66:fc:5e:b0:97:b9:ed:6e:d9:f2:4f:9e:56:
16:73:e9:22:61:b8:6d:88:9d:46:e5:0b:34:04:85:
f0:46:14:16:8a:58:7c:45:68:5d:bb:f3:3c:74:f7:
1c:2c:a3:cf:89:72:ca:4b:fd:1b:13:b9:e1:98:aa:
55:32:99:99:09:60:c6:e4:79:77:e9:51:83:eb:3f:
aa:84:76:71:8a:31:1a:ae:5e:09:e2:a7:8d:19:f9:
ba:d7:95:10:39:19:25:7b:31:e5:5f:81:18:ee:3a:
e9:4b:1e:a7:14:17:1c:53:db:bc:02:4f:3d:8b:52:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:76:5E:D1:E4:02:03:53:39:DE:3C:94:BC:50:57:98:BE:69:6A:0A
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:49:6b:8d:d6:83:8c:ca:d8:5e:5c:85:f8:0f:98:2a:ab:08:
2a:5a:6f:74:4b:72:11:f2:ff:d4:bf:eb:d3:29:31:a2:7f:4a:
1a:33:45:47:22:4e:06:7e:5b:94:89:a7:37:29:21:4d:57:2c:
8f:52:33:b1:b2:ff:92:60:8c:b0:9c:9e:ae:06:e6:dc:29:fc:
6e:47:f8:b2:24:4b:6a:d3:85:16:25:be:b7:63:36:6a:8b:4d:
4a:76:e3:20:94:96:be:9c:d6:2c:b6:b7:eb:5a:61:b9:cd:ef:
cd:be:cd:f0:e0:e7:16:40:25:52:c0:2c:e1:08:5a:65:63:83:
60:56:fd:19:71:d0:67:10:0a:69:e2:57:47:40:4f:72:bf:65:
bd:02:1c:53:10:ca:f0:ed:6c:54:e3:32:71:2e:33:11:ae:42:
61:fb:19:3d:ca:94:42:dd:1f:12:96:b5:96:f8:5b:3a:e2:4b:
61:3c:07:dc:73:f5:f0:eb:91:ae:d8:36:ee:ff:b3:76:1b:8e:
ef:9a:79:82:98:0c:35:f0:44:bc:3b:50:38:3d:bc:7e:8e:3c:
5b:1a:f8:c1:e7:61:78:00:20:90:fc:da:c6:eb:ea:89:77:e3:
41:de:16:2d:b9:b3:4c:9f:19:f1:6f:10:b8:21:84:93:22:68:
31:f8:6a:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdO9tq/Ax4uiugxDV719gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNTQ4ODI0MDFiMDcyNDg2NGE4Y2NjYmFlYWZlNDJjODUy
NDA0NTYwHhcNMjYwNDI3MTUwMDQwWhcNMjYwNDI4MTUwMDQwWjAzMTEwLwYDVQQD
Eyg5ODc2NWVkMWU0MDIwMzUzMzlkZTNjOTRiYzUwNTc5OGJlNjk2YTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrJaXMw3ZhQA1fuMYLIZoBCHX7vz
MRSHRv6gx+52mkJYUEl/rQc/flvhv1pNTfoJSWiaDGkp0299tHXV7pGopN5oDYBU
nC8IrRtD4IClq8PFS3XO7T9UMHhe5FwejBQuE7XBm2v7S+K0nig1FyIkaiBwQfZx
Tfn+cPJVKpmLEu9unnREloO7mGb8XrCXue1u2fJPnlYWc+kiYbhtiJ1G5Qs0BIXw
RhQWilh8RWhdu/M8dPccLKPPiXLKS/0bE7nhmKpVMpmZCWDG5Hl36VGD6z+qhHZx
ijEarl4J4qeNGfm615UQORklezHlX4EY7jrpSx6nFBccU9u8Ak89i1JzJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJh2XtHkAgNTOd48lLxQV5i+aWoKMB8GA1UdIwQY
MBaAFABUiCQBsHJIZKjMy66v5CyFJARWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUt
NDZlZTk5YTFlZTMwLzEvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUtNDZlZTk5YTFlZTMw
LzEvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvklrjdaD
jMrYXlyF+A+YKqsIKlpvdEtyEfL/1L/r0ykxon9KGjNFRyJOBn5blImnNykhTVcs
j1IzsbL/kmCMsJyergbm3Cn8bkf4siRLatOFFiW+t2M2aotNSnbjIJSWvpzWLLa3
61phuc3vzb7N8ODnFkAlUsAs4QhaZWODYFb9GXHQZxAKaeJXR0BPcr9lvQIcUxDK
8O1sVOMycS4zEa5CYfsZPcqUQt0fEpa1lvhbOuJLYTwH3HP18OuRrtg27v+zdhuO
75p5gpgMNfBEvDtQOD28fo48Wxr4wedheAAgkPzaxuvqiXfjQd4WLbmzTJ8Z8W8Q
uCGEkyJoMfhqOQ==
-----END CERTIFICATE-----
Generated at Tue Apr 28 00:06:22 2026 by rpki-client