Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
File: afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json)
Hash identifier: ceeykY8RaUYWatzlCgup0HvDQ4mYa108ADrYpppvm9w=
Subject key identifier: 25:21:E7:E8:29:64:43:98:17:8B:1D:E1:C0:4F:43:E2:6A:EA:B5:C8
Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
Certificate issuer: /CN=69f1a6b4804bb6a3854a44e1069f257267417805
Certificate serial: 019D3909B29C47393B3739D30244EA2D755A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
Manifest number: 0666
Signing time: Sun 29 Mar 2026 10:00:29 +0000
Manifest this update: Sun 29 Mar 2026 10:00:29 +0000
Manifest next update: Mon 30 Mar 2026 10:00:29 +0000
Files and hashes: 1: EWm46AI1rMUSMZthGRFJLKzdg5w.roa (hash: VkQfmMtNp47GhBpBHPy5YMBbYpA58g2YnMi7hmT4lRU=)
2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: ibNTTAvC3eg7wZbMZ19LiFmvcINUvF2pQlssqII9BC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b2:9c:47:39:3b:37:39:d3:02:44:ea:2d:75:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805
Validity
Not Before: Mar 29 10:00:29 2026 GMT
Not After : Mar 30 10:00:29 2026 GMT
Subject: CN=2521e7e829644398178b1de1c04f43e26aeab5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9e:de:bf:e4:4a:ca:4a:16:12:e1:be:54:0a:
2e:9f:c4:b1:89:15:bf:cc:fe:45:68:7b:c2:89:84:
e5:14:e5:7b:8a:25:ed:e5:9d:6b:26:28:dd:0a:e2:
4b:93:0a:d2:83:b6:46:81:b4:4a:d0:ba:7f:27:5b:
e9:1f:eb:e6:b1:d1:a5:51:ff:48:30:86:83:c6:5a:
d4:f1:54:fc:a5:9d:f7:c6:a2:d7:51:33:f1:ac:a0:
7a:12:1a:b2:47:53:33:36:e2:8e:3c:57:ba:21:a7:
1b:bb:f6:d2:93:dd:f3:a0:ab:c3:c1:5b:81:7d:af:
a5:6c:c8:d1:38:7c:17:6d:6d:ca:6c:bc:d9:c0:24:
c1:0a:ae:2c:5c:8b:20:ef:65:0e:69:33:e6:95:55:
21:c0:1d:d5:a4:03:0a:9f:0e:ce:40:3b:7a:82:62:
c8:4a:04:22:1c:81:f3:07:44:41:fe:66:32:8c:d8:
aa:eb:f4:d6:0f:6f:c6:0d:f4:fa:ea:d4:8b:f3:bb:
da:06:63:f1:74:26:b2:1d:ed:5b:54:1d:25:18:b2:
db:b6:e9:0a:ed:d8:c9:52:0a:26:f9:1a:ec:c9:f1:
35:4a:8f:3c:1e:0d:e3:d1:e1:72:0b:9c:ca:fe:0c:
ef:8d:7e:2b:c1:cf:47:7e:b4:b0:dc:9b:d5:c8:47:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:21:E7:E8:29:64:43:98:17:8B:1D:E1:C0:4F:43:E2:6A:EA:B5:C8
X509v3 Authority Key Identifier:
keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c9:66:2b:b0:0a:83:7d:1a:35:e5:90:49:2f:60:0c:e5:37:
71:07:f4:64:2d:46:68:f2:97:d7:2b:6d:f6:ad:6f:40:46:3c:
26:79:31:fa:4f:77:75:0d:f9:08:b0:63:37:59:ea:2a:35:05:
3c:ff:5d:89:f7:8c:c8:61:cb:5c:66:4b:4c:d8:04:2f:48:57:
fb:f6:61:76:cb:8e:e3:ea:27:85:b3:6a:de:4b:75:db:53:64:
30:d0:74:8d:60:42:56:22:8e:2d:39:a5:8c:9f:23:eb:a3:40:
03:15:18:69:3e:8b:8b:37:10:27:52:9f:47:5e:79:79:d0:8c:
ee:74:a9:7a:0b:20:87:b7:73:71:49:06:4b:e5:87:73:2d:05:
93:1c:68:19:d6:14:10:17:73:86:7e:4b:7e:96:84:c5:e9:d6:
9a:9b:ac:f5:39:48:af:9b:7f:80:75:93:12:aa:2d:6d:29:f1:
64:5c:ff:18:b4:89:72:ab:8b:6f:89:04:1c:bd:b7:28:07:82:
72:24:8b:93:a2:54:7e:c1:a8:53:63:21:2f:b2:fd:b8:99:54:
b8:60:b9:96:27:45:40:b9:1d:9c:ac:19:6c:34:7a:13:60:bc:
7e:68:ef:c2:6e:f6:15:2f:32:06:fd:31:10:f3:17:c8:43:fc:
14:80:be:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:30 2026 by rpki-client