Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
File: Afp6rPiShM693j1MEkYvxE3rw4Q.mft (raw, json)
Hash identifier: /YJwmL2CgzhXYuYDS1KUuW+LZ/FIDmrwwBFTolrpUhU=
Subject key identifier: BB:11:7D:B7:DF:2E:5E:A7:3F:81:7B:24:BF:D5:84:FC:D9:D4:46:1F
Authority key identifier: 01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
Certificate issuer: /CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Certificate serial: 01A001DD3A35C72F9173D46426BF60503685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
Manifest number: 0F9C
Signing time: Fri 14 Aug 2026 20:01:10 +0000
Manifest this update: Fri 14 Aug 2026 20:01:10 +0000
Manifest next update: Sat 15 Aug 2026 20:01:10 +0000
Files and hashes: 1: Afp6rPiShM693j1MEkYvxE3rw4Q.crl (hash: V44lgqdBhdBbBYR2HNVbLHzDNnHcC4Fw6vl9vyl8SJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:3a:35:c7:2f:91:73:d4:64:26:bf:60:50:36:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Validity
Not Before: Aug 14 20:01:10 2026 GMT
Not After : Aug 15 20:01:10 2026 GMT
Subject: CN=bb117db7df2e5ea73f817b24bfd584fcd9d4461f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b5:44:20:1f:66:e3:0d:52:f3:43:3d:19:f3:
35:40:01:75:60:ce:05:b1:d8:2d:2b:6b:35:bc:be:
f6:84:9c:d9:ec:cb:ac:52:a5:61:a1:e4:6b:bc:df:
df:18:12:6d:be:92:2b:97:c7:29:72:e8:56:11:03:
b6:3a:25:21:5d:ff:14:d3:f2:0c:a6:64:ce:3d:ef:
90:95:77:85:5c:9d:4d:d1:14:c1:a9:11:0b:d5:e6:
88:e0:1e:95:14:fc:c9:54:50:ca:29:19:47:f5:01:
fb:65:f1:63:5e:af:8c:2c:41:cf:a2:fe:b3:0a:04:
36:57:ab:ba:05:43:37:a6:f7:30:fa:10:8f:73:a2:
ed:63:21:ac:e8:0d:38:da:8e:d7:b7:9b:85:10:4b:
4b:d4:7a:54:e0:61:7d:c9:74:48:d6:4d:06:79:6c:
2c:d9:9a:5e:eb:3b:c7:14:80:51:91:ff:f4:e3:a4:
15:7e:ca:7a:5c:63:c8:a4:05:00:64:ce:21:4f:87:
59:e8:a1:88:16:6b:0e:6e:11:1e:74:36:77:19:76:
34:6f:8f:09:28:37:4f:d9:81:18:75:e2:d2:68:34:
73:db:13:4c:d9:1c:42:39:dc:7d:92:45:fd:59:4e:
74:8a:9a:98:fa:cc:ee:64:d9:a9:f2:e5:b5:a3:96:
33:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:11:7D:B7:DF:2E:5E:A7:3F:81:7B:24:BF:D5:84:FC:D9:D4:46:1F
X509v3 Authority Key Identifier:
keyid:01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:75:dc:d6:fc:83:32:98:30:d9:2b:76:c5:d4:23:ac:7f:68:
a0:c3:85:65:e2:12:81:07:bc:97:24:41:31:ba:07:b2:f0:1d:
5f:62:da:0d:71:94:47:1b:18:1f:d4:75:3f:e2:6f:80:cd:21:
5e:b5:af:37:c4:d5:fd:98:99:dd:7b:fd:5a:73:d5:64:64:0e:
ea:11:c0:b6:9b:30:e7:5f:43:76:e0:86:ec:b0:ae:6e:4a:34:
a8:8c:fd:ec:b7:a1:55:26:8e:df:ca:56:48:d4:34:bc:09:d2:
71:de:8f:d9:42:c3:f1:04:25:aa:34:8c:f5:64:e5:6f:75:d0:
ec:d7:e8:0f:a0:7b:78:e8:90:b1:71:74:0b:77:48:15:19:84:
43:65:17:6e:bb:96:bf:aa:ca:99:2c:6a:42:df:8f:91:1a:6b:
04:cb:af:e1:6a:38:11:88:83:4c:96:e4:71:9c:6f:db:3c:4e:
48:8c:b3:18:01:2d:b1:fd:74:30:86:44:06:d2:a0:f7:e4:22:
a8:ef:c7:bf:53:e1:fb:4f:d6:01:7c:54:96:5c:d7:fd:60:0c:
ef:e5:ce:16:88:ff:20:ae:70:65:3a:8a:69:ad:c6:68:c8:bd:
a3:4f:b0:4e:3a:c2:3e:d7:4d:0a:e4:22:a0:33:35:bb:30:ce:
58:23:51:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:01 2026 by rpki-client