Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
File: afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json)
Hash identifier: JPwmdQ6iHTyBMeOJdN6/urw1QM/2XfjYbc5qic7nimY=
Subject key identifier: E9:B1:99:E6:E6:FA:1F:78:AE:56:C6:78:1B:06:55:04:81:1E:03:4C
Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
Certificate issuer: /CN=69f1a6b4804bb6a3854a44e1069f257267417805
Certificate serial: 01A1404C7EC63E0D0F0095F99C71D6DFC10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
Manifest number: 087C
Signing time: Thu 15 Oct 2026 16:01:57 +0000
Manifest this update: Thu 15 Oct 2026 16:01:57 +0000
Manifest next update: Fri 16 Oct 2026 16:01:57 +0000
Files and hashes: 1: EWm46AI1rMUSMZthGRFJLKzdg5w.roa (hash: VkQfmMtNp47GhBpBHPy5YMBbYpA58g2YnMi7hmT4lRU=)
2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: PclYJspCwqlLzG/FhGo5sUzuXwheqfiIxvzDy7mSLUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:7e:c6:3e:0d:0f:00:95:f9:9c:71:d6:df:c1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805
Validity
Not Before: Oct 15 16:01:57 2026 GMT
Not After : Oct 16 16:01:57 2026 GMT
Subject: CN=e9b199e6e6fa1f78ae56c6781b065504811e034c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2a:f8:f2:da:06:38:3c:7f:70:fb:8f:4f:29:
19:9f:9c:bd:e3:3b:fc:0d:4e:d3:12:bf:56:5d:0f:
47:36:b2:3b:eb:90:d6:f2:db:fe:84:f8:14:35:36:
c0:e5:78:26:16:6c:e9:d3:09:88:8f:ca:82:dd:80:
d5:d3:e7:18:f6:e3:b6:28:25:43:d5:73:fc:bd:3d:
5a:14:24:dc:55:43:29:0d:05:e9:45:9b:a5:9f:98:
f6:b9:95:bd:5e:f4:25:6b:e8:d7:9f:be:76:12:e3:
ff:85:6a:c0:2f:83:f6:06:d7:f3:db:86:84:48:f7:
ae:b7:39:59:08:5b:a7:b6:77:c7:30:a9:0c:04:4b:
a3:b5:7f:c1:db:3f:fb:93:97:40:a9:f0:31:e3:1c:
01:b3:71:b9:87:71:40:7a:5c:a6:36:55:b4:ae:c2:
25:1a:ba:e8:1f:28:d1:2c:0b:f3:28:74:26:72:53:
c6:2f:bc:ce:9a:94:b8:31:5c:26:fc:70:09:c9:53:
5f:64:d7:43:41:e5:61:01:48:bc:2d:73:ed:68:ef:
d2:77:b7:7c:e8:38:ea:74:cc:b4:7d:59:fa:bb:55:
46:76:d7:60:4d:19:3d:12:a7:e1:e5:77:9b:c9:53:
bf:82:38:7c:68:87:f9:9f:34:1d:89:c2:3a:d3:75:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B1:99:E6:E6:FA:1F:78:AE:56:C6:78:1B:06:55:04:81:1E:03:4C
X509v3 Authority Key Identifier:
keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ef:fa:64:c3:7a:b2:65:26:e0:2b:e2:63:25:02:51:73:48:
ec:bd:5c:d6:1a:81:4b:54:99:02:4b:cd:a5:7f:8e:5c:b7:6d:
4e:c5:9a:0b:3e:0c:22:89:1f:da:d9:3a:3b:99:2e:eb:1f:c9:
46:a7:ce:db:00:0b:31:a9:2b:67:1a:18:63:c1:c0:28:74:e2:
61:9f:68:f3:c7:94:0f:ba:8d:09:01:69:af:96:9a:c5:47:ff:
24:a8:7b:e1:26:ee:cc:30:83:70:d7:cf:d8:28:24:c7:f0:50:
b7:5a:b5:f2:d8:21:d4:47:75:09:71:0f:ed:db:b3:be:c8:31:
b2:83:d8:10:f7:ed:0f:17:27:c1:0b:4d:ef:4f:3a:80:cc:d2:
12:e6:00:7d:24:c9:cc:94:45:8d:79:dc:59:24:c9:f6:52:47:
0c:d0:0c:c6:f6:b2:1e:0c:10:1a:d2:6b:b8:7e:d6:95:12:7b:
ed:ad:6f:af:4d:22:1d:cf:45:c4:fe:e6:2a:ac:c7:01:ea:63:
90:df:0f:e8:dd:a9:71:98:16:c6:32:a6:45:2a:ef:e4:d1:9d:
d9:0c:c5:f6:54:82:86:b5:c9:b1:78:f9:bb:74:bf:5d:76:6c:
b1:75:99:6a:e4:3a:1d:81:ac:8a:5c:48:fb:33:1f:0c:93:54:
76:fa:64:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFATH7GPg0PAJX5nHHW38EMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjFhNmI0ODA0YmI2YTM4NTRhNDRlMTA2OWYyNTcyNjc0
MTc4MDUwHhcNMjYxMDE1MTYwMTU3WhcNMjYxMDE2MTYwMTU3WjAzMTEwLwYDVQQD
EyhlOWIxOTllNmU2ZmExZjc4YWU1NmM2NzgxYjA2NTUwNDgxMWUwMzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Sr48toGODx/cPuPTykZn5y94zv8
DU7TEr9WXQ9HNrI765DW8tv+hPgUNTbA5XgmFmzp0wmIj8qC3YDV0+cY9uO2KCVD
1XP8vT1aFCTcVUMpDQXpRZuln5j2uZW9XvQla+jXn752EuP/hWrAL4P2Btfz24aE
SPeutzlZCFuntnfHMKkMBEujtX/B2z/7k5dAqfAx4xwBs3G5h3FAelymNlW0rsIl
GrroHyjRLAvzKHQmclPGL7zOmpS4MVwm/HAJyVNfZNdDQeVhAUi8LXPtaO/Sd7d8
6DjqdMy0fVn6u1VGdtdgTRk9Eqfh5XebyVO/gjh8aIf5nzQdicI603URYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmxmebm+h94rlbGeBsGVQSBHgNMMB8GA1UdIwQY
MBaAFGnxprSAS7ajhUpE4QafJXJnQXgFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZjFmMmUtNWM1Mi00ZmIwLWI1Mzgt
MTczNjZmZjk2Mzc5LzEvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zZjFmMmUtNWM1Mi00ZmIwLWI1MzgtMTczNjZmZjk2Mzc5
LzEvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+/6ZMN6
smUm4CviYyUCUXNI7L1c1hqBS1SZAkvNpX+OXLdtTsWaCz4MIokf2tk6O5ku6x/J
RqfO2wALMakrZxoYY8HAKHTiYZ9o88eUD7qNCQFpr5aaxUf/JKh74SbuzDCDcNfP
2Cgkx/BQt1q18tgh1Ed1CXEP7duzvsgxsoPYEPftDxcnwQtN7086gMzSEuYAfSTJ
zJRFjXncWSTJ9lJHDNAMxvayHgwQGtJruH7WlRJ77a1vr00iHc9FxP7mKqzHAepj
kN8P6N2pcZgWxjKmRSrv5NGd2QzF9lSChrXJsXj5u3S/XXZssXWZauQ6HYGsilxI
+zMfDJNUdvpkkw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:53:49 2026 by rpki-client