Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier: BQ4zBQn7prts9rI4pkV/7U0PpzVl79tyLxaxLq4l5ac=
Subject key identifier: 19:20:A2:7C:B2:5E:BF:55:88:5A:38:4A:68:6A:3A:D7:53:72:D6:D9
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 01A0017025BF9C5639D74A9257E19CF87D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 18:02:01 +0000
Manifest this update: Fri 14 Aug 2026 18:02:01 +0000
Manifest next update: Sat 15 Aug 2026 18:02:01 +0000
Files and hashes: 1: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: wJqicLTV6mCmyX/eM/jhjmzUPC8Hm25Ge/D0YGdmTe4=)
2: NcBIwWrVfFqKGC-Ejlu0skUAVME.roa (hash: QpyQXhGs4Yf3p6aesaO1I7bW/lGukmfPe/wqoZKA1Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:25:bf:9c:56:39:d7:4a:92:57:e1:9c:f8:7d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: Aug 14 18:02:01 2026 GMT
Not After : Aug 15 18:02:01 2026 GMT
Subject: CN=1920a27cb25ebf55885a384a686a3ad75372d6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:17:08:28:c9:89:c8:bd:ef:ce:1e:62:f5:
9a:12:b4:4c:2f:18:0b:ff:e0:38:1b:b3:e6:ec:b8:
a7:fc:80:d7:26:0b:b7:54:0f:19:7d:06:d7:69:27:
1f:14:3e:1b:17:06:b1:bc:fe:58:5c:03:1c:ad:d4:
cf:59:fa:97:42:c5:2b:8c:e6:04:db:14:3b:ae:3d:
44:a1:02:b7:92:7c:2b:06:d8:a9:86:d4:4a:b2:87:
b0:e3:6a:0f:23:1c:65:56:5a:f9:7b:c9:9a:9c:75:
50:f4:d5:63:64:30:fc:05:99:06:ea:15:39:7a:bb:
7b:ff:a8:36:9f:15:a8:1f:33:0c:30:d0:5b:71:f3:
ef:3b:b6:bc:26:3b:a5:a2:7b:07:76:96:83:a1:20:
d4:09:da:49:4a:a1:64:ac:75:f1:de:ee:af:87:01:
ee:fb:15:d1:05:5a:78:43:8e:f5:c9:4e:1d:0f:2b:
f3:4d:69:b5:ed:31:a2:af:48:4a:d8:0f:0a:b3:65:
63:b4:a8:79:f3:6a:49:14:ca:db:ef:2c:8b:77:23:
59:29:98:92:5f:d2:8c:b7:7e:c3:33:8b:ad:6e:60:
d1:c7:69:08:96:9c:9e:32:5a:85:6a:de:7e:ea:6b:
cf:24:0c:7e:46:f6:76:51:86:ee:bb:af:e7:e5:28:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:20:A2:7C:B2:5E:BF:55:88:5A:38:4A:68:6A:3A:D7:53:72:D6:D9
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:79:c8:c1:f7:eb:c4:72:03:f7:cb:3f:29:7c:48:26:67:55:
b5:a1:65:3f:c9:e9:ac:7a:33:80:49:07:49:a2:93:b4:69:b2:
18:35:e0:12:5c:05:dd:8b:6f:83:9e:77:97:f6:b6:32:8e:3d:
cb:a6:09:ad:f7:8d:e9:90:69:f3:60:a0:5f:dc:13:91:30:c3:
ab:8a:7a:d4:27:d1:14:fc:20:be:0d:6f:db:3f:61:04:ce:b6:
f8:89:c9:6b:4a:df:38:73:1b:70:f6:34:e3:3d:ac:d2:a1:3e:
6a:f8:40:65:71:6a:56:bd:3a:e3:1e:05:a2:7f:1e:78:01:94:
99:36:7c:3f:5d:05:2b:40:42:65:f7:82:32:e6:05:cb:4c:df:
9f:f2:57:00:de:76:5a:4d:8c:f5:32:3e:21:28:ae:51:de:8b:
8e:fa:e7:99:a9:d7:7b:ac:7b:18:eb:00:46:c4:c1:27:2d:d8:
f2:09:6e:bf:69:2c:41:ea:d8:22:7b:58:0f:c7:1c:f6:ed:e9:
cf:ce:e0:ae:59:6a:28:c0:4a:c3:33:30:54:36:35:da:f7:3b:
7d:53:98:28:60:a3:0f:79:68:99:fd:04:e5:21:e4:fa:ea:38:
d2:7c:7d:db:e4:bf:01:d6:4a:8b:6f:9a:51:bb:29:0b:f3:f4:
5e:5d:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:59 2026 by rpki-client