Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File: AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier: XgAUBo5oCf7bnUXkTlUiuv2bgXfD2q7eYAcrNb17gG8=
Subject key identifier: E3:4B:A2:F2:39:8F:F2:0E:CA:1F:2C:4F:92:69:C4:B4:2C:67:A6:67
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial: 019F9EBA471175860F771317E8C9DA0B3DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number: 19D2
Signing time: Sun 26 Jul 2026 14:00:35 +0000
Manifest this update: Sun 26 Jul 2026 14:00:35 +0000
Manifest next update: Mon 27 Jul 2026 14:00:35 +0000
Files and hashes: 1: 9M-CJkVBZVuqIwi3Sawh0isCz1k.roa (hash: aFU0pADsAbTvFke0dF4U47/0s76HwBtoQCpl6QnSuNI=)
2: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: UStcmz+MoZt1znxdPu197Am4QVXfrp5Il7YYflxHm9k=)
3: KbY29WtKZkz8Fbjj7QvLlg811Iw.roa (hash: vGh5FY7zuISKMd7QAir+eppKFgiFx2llO5uFQh7FV0A=)
4: Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa (hash: lpodXqk6t7MJFjfZg1Uow8LLK/4R3ylcdMkmlTgRneo=)
5: hkJYoKxZ5NaqYkSY0GG7dfC0J6M.roa (hash: M6l2Qx3MyNr2ADezdHbYqYOeyWWrHzzKzTBcWubDLyY=)
6: iN3PbeV3-UffGNWyXfh7JHJfK74.roa (hash: JtoeR6EU9pVtvyEClltI2vcG5Q/h7OJRN/rUzf7IfP8=)
7: qydppjeYfUzDVxdV73Ghn9vaAYk.roa (hash: F/o5ke8f18yC9oKEjHkU0hNCPxAS0/yMbN5QTK0st0g=)
8: sH1teYqG2FqEXd7RfMCaBcOnmaw.roa (hash: suxWcXpZV2IMJ73fGzjwM37LJ58quwhaki1YE7N0sRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:ba:47:11:75:86:0f:77:13:17:e8:c9:da:0b:3d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Validity
Not Before: Jul 26 14:00:35 2026 GMT
Not After : Jul 27 14:00:35 2026 GMT
Subject: CN=e34ba2f2398ff20eca1f2c4f9269c4b42c67a667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:ea:9d:08:1b:fe:56:0e:88:c6:03:8c:9a:
3e:e1:2b:c4:4f:e1:22:6e:36:37:dc:2e:cf:16:17:
4f:4a:18:d9:b6:e0:86:5c:96:3e:99:73:81:d9:00:
f8:0c:8e:ce:07:33:ca:73:f3:bc:0c:db:2d:93:81:
f3:46:3f:7d:9e:44:d5:34:5a:83:f2:ae:a4:90:f7:
67:ab:8d:9f:3b:90:95:54:85:1a:91:0b:e6:c0:87:
34:3f:af:ef:e9:a8:9a:46:54:2e:da:33:e8:ca:69:
f6:75:87:96:47:57:31:38:33:b5:3f:9e:88:be:dd:
59:81:2d:10:bd:0f:ad:36:9c:45:0f:dd:7f:d2:af:
be:73:02:f0:60:96:34:dd:3d:3c:e8:cc:a4:af:5f:
93:02:9a:60:4e:75:03:e3:cc:97:cb:bf:56:15:7f:
7b:ef:33:c8:20:c0:03:c4:18:52:95:14:f7:a9:01:
8e:00:39:18:5d:19:34:6e:de:d2:00:90:c4:dd:ad:
91:c4:f5:15:b9:59:ba:d4:ef:82:f3:12:62:c0:6d:
6f:64:0b:82:30:e1:31:24:8a:b8:a0:96:32:57:01:
ed:87:af:ea:06:b8:c7:fd:47:73:4e:da:38:4b:6d:
94:e1:69:ee:4d:b6:4d:62:b8:65:3d:c0:ff:fb:18:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4B:A2:F2:39:8F:F2:0E:CA:1F:2C:4F:92:69:C4:B4:2C:67:A6:67
X509v3 Authority Key Identifier:
keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:03:97:e7:be:e5:46:83:dd:bb:0a:b2:79:f4:97:56:50:6a:
18:27:37:8b:05:86:64:03:26:b1:36:cf:63:50:8e:49:79:42:
1c:61:be:e7:8d:e1:9c:7d:d0:04:d6:a3:43:cb:4c:48:99:a9:
6a:fc:ca:d3:3c:9a:c1:d6:9c:61:40:ca:eb:00:7c:f9:c9:0b:
8b:80:5a:3c:75:64:51:ff:21:3c:39:c5:e7:2f:27:f3:eb:da:
48:ba:1e:8f:e1:be:37:00:fe:70:4a:70:22:ef:80:23:58:e1:
2a:20:7a:d2:6f:f5:db:98:49:71:79:62:d7:95:19:59:d1:c9:
c9:86:7f:f4:f9:c6:25:18:6a:19:60:52:a1:fa:a3:15:98:66:
c8:4a:01:33:31:17:c0:a1:5b:e5:5c:b7:17:83:e2:7b:41:8b:
bd:d5:67:22:11:12:de:31:da:c0:32:fc:91:b8:91:d9:f2:26:
bf:8a:ac:86:4f:45:94:78:3e:e5:d4:bb:a7:56:11:ab:89:a7:
33:4f:3d:ea:fb:e5:d9:cd:2e:bd:4f:20:f3:81:39:b1:23:80:
5f:fe:90:b9:2a:d7:0f:45:94:1d:8d:33:e3:57:49:b0:87:aa:
a6:cc:92:cb:cb:57:ca:ba:c6:29:ae:e6:0a:49:e2:ec:4d:b7:
cc:e2:44:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:28:22 2026 by rpki-client