Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File: AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier: poLFSTbWP7i2kImIKgO2ugX7zYzmJBFGx2y8wSYaywI=
Subject key identifier: 7E:6E:65:41:A4:FD:59:F5:58:2A:02:B5:52:0B:3C:19:31:15:88:56
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial: 01A179CCC909CBFF09B716CE32A2D7FC0D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number: 1AC8
Signing time: Mon 26 Oct 2026 20:00:26 +0000
Manifest this update: Mon 26 Oct 2026 20:00:26 +0000
Manifest next update: Tue 27 Oct 2026 20:00:26 +0000
Files and hashes: 1: 9M-CJkVBZVuqIwi3Sawh0isCz1k.roa (hash: aFU0pADsAbTvFke0dF4U47/0s76HwBtoQCpl6QnSuNI=)
2: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: gCq7cIekelfcXMZWKIUd7cga5e+VneUJNuMp5X6AaGk=)
3: KbY29WtKZkz8Fbjj7QvLlg811Iw.roa (hash: vGh5FY7zuISKMd7QAir+eppKFgiFx2llO5uFQh7FV0A=)
4: Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa (hash: lpodXqk6t7MJFjfZg1Uow8LLK/4R3ylcdMkmlTgRneo=)
5: hkJYoKxZ5NaqYkSY0GG7dfC0J6M.roa (hash: M6l2Qx3MyNr2ADezdHbYqYOeyWWrHzzKzTBcWubDLyY=)
6: iN3PbeV3-UffGNWyXfh7JHJfK74.roa (hash: JtoeR6EU9pVtvyEClltI2vcG5Q/h7OJRN/rUzf7IfP8=)
7: qydppjeYfUzDVxdV73Ghn9vaAYk.roa (hash: F/o5ke8f18yC9oKEjHkU0hNCPxAS0/yMbN5QTK0st0g=)
8: sH1teYqG2FqEXd7RfMCaBcOnmaw.roa (hash: suxWcXpZV2IMJ73fGzjwM37LJ58quwhaki1YE7N0sRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cc:c9:09:cb:ff:09:b7:16:ce:32:a2:d7:fc:0d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Validity
Not Before: Oct 26 20:00:26 2026 GMT
Not After : Oct 27 20:00:26 2026 GMT
Subject: CN=7e6e6541a4fd59f5582a02b5520b3c1931158856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:43:82:92:7a:8e:b7:71:bd:57:8e:ac:e4:
7b:f3:bd:6b:f3:ba:b5:ca:58:d8:c8:81:ef:33:53:
a1:07:05:cc:f6:8f:e7:eb:9f:cf:bd:9c:82:8c:92:
0c:68:95:c2:4a:a2:98:25:a7:98:e5:b4:61:67:5a:
63:93:b7:7c:30:86:25:52:16:73:19:f1:db:07:f7:
cd:db:d2:f4:c5:d4:60:5b:66:26:d4:77:19:80:50:
9c:86:ff:78:78:f0:f0:be:16:fb:94:88:4a:4e:09:
14:67:e8:d9:b1:b2:e3:50:af:1a:01:d1:3e:22:27:
59:de:97:bd:cd:2f:d0:e8:61:dc:48:70:b9:02:7c:
5d:ce:4f:11:dd:bd:95:0c:63:38:3f:f8:54:86:ea:
c4:61:be:53:56:b3:7f:0c:f8:96:ea:5d:01:5d:72:
1b:0c:58:35:46:0f:01:4a:c0:e3:99:54:52:4b:fa:
cd:d4:ce:13:5f:f0:22:a7:d0:ba:e2:66:b0:bd:04:
7a:67:9d:f3:e4:c2:58:5f:67:2e:25:5e:d7:48:16:
c5:7e:50:71:19:c5:10:c3:cb:38:af:f4:94:9a:19:
19:45:af:84:5c:20:5b:bf:50:6e:f2:6c:65:3e:83:
53:97:9b:c9:1c:eb:94:17:70:08:8c:48:4e:a2:b6:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6E:65:41:A4:FD:59:F5:58:2A:02:B5:52:0B:3C:19:31:15:88:56
X509v3 Authority Key Identifier:
keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:bd:09:e4:1b:66:9c:80:97:99:99:41:35:7f:41:9d:1f:4e:
1c:88:7b:9e:47:b2:3e:69:b7:cc:81:1e:12:d6:0b:39:ef:88:
54:c9:e6:94:86:af:dc:a0:25:96:c0:8d:da:c8:9a:e9:57:d7:
cc:c0:84:21:86:b9:d0:c7:d0:8f:af:7f:69:c9:e9:e2:27:89:
2f:81:3d:21:9c:71:7f:09:f1:37:22:55:f2:95:8f:71:0b:15:
a4:87:9a:13:ac:62:37:50:a9:47:7c:d0:57:25:e3:9a:52:04:
d6:e3:f6:58:3e:01:4d:64:e8:4f:75:49:61:ef:cb:08:e9:fe:
01:0b:98:7f:bd:6f:26:6e:57:ec:f9:64:a1:3a:38:48:ac:a4:
ab:f3:16:e7:23:e9:f2:2f:3b:86:c1:d4:20:7d:33:24:df:f6:
6c:c3:12:0f:d1:41:7e:eb:d0:a5:13:4a:56:e1:38:93:7f:a8:
e3:1d:7c:05:9f:30:4a:90:a3:0d:41:d1:f3:07:dd:52:b8:89:
1f:21:1b:d8:f1:c4:c5:35:85:13:af:78:64:bd:85:ae:76:55:
f2:fe:03:82:66:ee:4a:39:ee:e4:04:11:db:8c:88:62:35:47:
c6:f4:8e:8a:4b:90:9b:74:a7:b0:62:3c:1f:64:09:c3:b2:fa:
15:d1:e7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:13:28 2026 by rpki-client