Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
File: Afp6rPiShM693j1MEkYvxE3rw4Q.mft (raw, json)
Hash identifier: TO/2x/fIIjQtgMCaadVMdfBFmB1tWIoXzOHON9yI/yk=
Subject key identifier: 8E:A7:7E:24:F6:69:F0:51:88:45:98:2D:BD:B2:A4:30:0B:73:DD:AF
Authority key identifier: 01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
Certificate issuer: /CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Certificate serial: 01A13E9484D2F9075C1A8DB0860D75B8616D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
Manifest number: 1040
Signing time: Thu 15 Oct 2026 08:01:22 +0000
Manifest this update: Thu 15 Oct 2026 08:01:22 +0000
Manifest next update: Fri 16 Oct 2026 08:01:22 +0000
Files and hashes: 1: Afp6rPiShM693j1MEkYvxE3rw4Q.crl (hash: ImrHVP9rYrZbRshqm167K0fwt1Tu73T6VWBQgpN17cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:84:d2:f9:07:5c:1a:8d:b0:86:0d:75:b8:61:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Validity
Not Before: Oct 15 08:01:22 2026 GMT
Not After : Oct 16 08:01:22 2026 GMT
Subject: CN=8ea77e24f669f0518845982dbdb2a4300b73ddaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:37:b8:1e:72:44:75:6e:c9:0b:35:ec:c0:
02:50:56:75:dd:87:40:1c:d7:00:4c:96:f4:13:c7:
e1:62:dd:f0:61:8c:2a:9e:d1:65:f1:06:50:70:67:
f0:09:29:a4:2e:5c:bb:ec:83:39:6f:ee:d5:97:16:
d4:83:3d:1b:ae:22:01:29:5c:1f:e0:71:70:1d:e7:
fe:3e:b6:43:bc:8a:4e:d2:82:be:dd:a4:48:29:ea:
13:0e:69:79:df:1b:6a:11:61:c2:3a:26:92:46:93:
0c:f8:58:62:ba:ef:38:8a:ab:dd:16:6c:de:a6:a7:
db:3e:b6:c7:70:79:3d:63:ae:63:91:90:9d:bc:1c:
da:43:92:20:d4:7d:7f:73:a6:7f:ea:3a:bb:4e:49:
a9:6d:1b:82:bb:27:1c:7b:04:7d:eb:a9:df:a8:8c:
2a:1a:4a:bd:34:51:5a:96:09:3b:82:f5:00:74:5f:
51:e6:73:83:c0:ac:dc:4e:8a:0b:b3:73:cc:20:d4:
57:b9:fd:94:3e:75:6f:b6:4f:76:d3:a8:7f:09:36:
8b:34:c9:37:0f:00:9f:b8:7f:6d:c1:29:99:fd:d2:
79:bc:30:a9:0e:71:d2:48:b3:44:2a:ae:72:6f:7d:
71:a1:c4:40:29:65:dc:f4:23:b6:13:12:78:9e:f2:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A7:7E:24:F6:69:F0:51:88:45:98:2D:BD:B2:A4:30:0B:73:DD:AF
X509v3 Authority Key Identifier:
keyid:01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:be:af:1b:15:b4:8e:c0:3c:de:48:1a:02:d8:6c:fb:36:9c:
0c:b7:c3:b1:31:0c:06:b7:db:68:8d:bd:f0:bf:95:05:81:78:
db:a8:22:94:50:04:e2:44:3c:17:99:81:ab:13:e6:a6:01:ab:
6b:b2:49:81:2d:71:8b:02:5d:6c:42:f0:16:cb:e5:0c:d8:96:
65:d9:8d:b4:ae:80:7c:45:da:4d:47:e8:49:7d:51:48:65:22:
ef:ae:e0:b6:5d:58:8f:93:62:b0:f4:3d:cb:c6:a2:59:be:bc:
38:7d:1a:ca:ba:03:d4:44:a2:c4:5a:8e:8f:95:1f:07:07:0a:
e5:15:9b:b9:7b:c4:b9:53:d4:ca:04:e2:e1:aa:62:11:61:7b:
84:7d:bf:a3:80:51:84:15:98:9c:74:89:a7:11:ec:34:a0:16:
34:46:75:bb:08:7b:ee:8e:b7:32:4e:ee:da:5d:ce:4c:c7:d0:
36:f6:fc:8b:50:ee:ae:81:5d:d3:c4:29:08:0e:eb:bc:86:be:
89:d7:5a:40:c6:65:82:7d:d5:37:8b:1e:98:2c:73:47:bb:1e:
a1:bc:f8:d4:f8:27:9e:69:a3:9b:14:42:46:c8:e6:b5:95:99:
ee:51:99:19:8c:d7:3f:85:e3:5d:37:8f:78:57:e5:fa:87:97:
ed:e8:ce:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:20 2026 by rpki-client