Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
File: afURWpSbKIPEzDxJX_uJk97Z2F0.mft (raw, json)
Hash identifier: 3ZxKkRQ9XxBnLS6A9Ejv4TimWNz57erD4Oq6NTzZeKA=
Subject key identifier: 7F:52:BE:A6:4A:8C:97:3B:EE:55:54:E6:1F:F9:0B:B1:CD:F7:5F:84
Authority key identifier: 69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D
Certificate issuer: /CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
Certificate serial: 019DCF3E270DA0177B3ADFB3F70D92085708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
Manifest number: 02FB
Signing time: Mon 27 Apr 2026 14:00:50 +0000
Manifest this update: Mon 27 Apr 2026 14:00:50 +0000
Manifest next update: Tue 28 Apr 2026 14:00:50 +0000
Files and hashes: 1: F0NU8SzenQKyHyDow73tXbiGwdo.roa (hash: iOBS39tMhlNuj1wPQ/s8NHjEci7w9ozCqefNCKugJMg=)
2: afURWpSbKIPEzDxJX_uJk97Z2F0.crl (hash: DQroTB/O/kfKUwNA/yq17Dgzg16eUamGj4DmL6zYsAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:27:0d:a0:17:7b:3a:df:b3:f7:0d:92:08:57:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
Validity
Not Before: Apr 27 14:00:50 2026 GMT
Not After : Apr 28 14:00:50 2026 GMT
Subject: CN=7f52bea64a8c973bee5554e61ff90bb1cdf75f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:54:11:0c:8c:2e:92:a3:ef:ec:53:5f:dd:
27:30:b7:0c:fb:95:40:b1:df:7b:c8:dd:cc:cf:74:
c9:12:31:08:2a:7c:c3:e9:e2:75:62:59:42:e8:b8:
a4:e5:d4:d9:69:2b:4f:a1:57:9d:ff:1b:60:a7:96:
dd:21:77:d8:38:e8:83:43:68:98:06:ae:d3:84:1e:
42:18:c1:ad:b9:d0:54:04:f8:59:8c:98:d5:8d:dd:
d7:23:a0:25:ca:0c:5a:1f:ed:d7:cf:b9:af:c9:ab:
f0:8e:24:27:9a:06:02:12:b8:7f:33:29:6b:21:9e:
3b:75:d6:92:7d:0b:45:13:3b:e8:4e:df:d9:53:53:
15:ab:ce:f5:46:42:be:30:80:08:4b:a7:d9:ad:f2:
c4:e7:3c:e3:21:2e:58:90:48:a6:8c:42:22:02:be:
20:a7:2b:65:df:e2:ae:ed:67:d4:fd:0d:d5:39:63:
35:80:c1:07:1d:2f:97:8e:3b:ce:1a:14:0d:ce:ad:
54:93:50:b9:b3:3e:d2:17:67:01:4c:bd:43:24:99:
ec:72:2f:c0:2a:65:29:a6:93:9a:1f:ee:f7:11:f4:
31:08:37:17:13:de:c0:da:97:e8:ac:ff:b0:0d:58:
8d:7c:b4:3e:21:69:f9:8d:47:d8:37:24:fb:7b:11:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:52:BE:A6:4A:8C:97:3B:EE:55:54:E6:1F:F9:0B:B1:CD:F7:5F:84
X509v3 Authority Key Identifier:
keyid:69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:62:62:99:d2:4d:a0:8b:89:1c:58:09:34:0d:1e:68:16:1a:
f6:b4:2e:76:d4:09:8e:d1:30:44:03:6d:0b:86:b5:ab:c8:cd:
59:b8:12:21:2a:ce:5e:f3:11:29:3c:b8:28:5c:7f:bb:a0:f8:
f0:e4:4e:ce:1c:5d:2c:15:d0:e3:aa:78:15:a3:92:47:9b:84:
0e:d8:b0:8e:9f:a2:ef:e4:ad:36:71:3e:72:28:9c:97:fd:5f:
ab:35:59:3c:1d:0d:0d:10:3c:e5:d5:49:2a:ea:e5:b1:19:3b:
d1:1b:a7:fe:3a:d7:dd:0f:a7:cc:b0:dd:69:33:d6:82:9d:ee:
3f:98:a1:b6:ad:7f:28:27:e2:48:e9:82:06:4c:92:23:9a:e9:
2f:7f:f0:97:7f:c3:cb:6f:87:6f:5b:8e:73:39:6e:53:19:ba:
da:b8:f8:12:ac:8c:4b:84:15:1a:17:a3:07:9d:4d:68:68:e4:
a9:40:b2:2e:ac:c4:70:8c:e4:4a:c8:4a:15:9f:5e:eb:41:03:
41:cf:95:d4:b4:ac:57:90:0c:25:ee:c5:a7:4f:36:22:62:0e:
54:85:98:64:59:5f:ce:c9:c3:79:24:dc:49:bc:d4:8c:39:7b:
b8:14:4a:05:cf:6a:79:48:6b:ec:26:69:60:5c:08:d4:68:a7:
3a:bf:f2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:21:30 2026 by rpki-client