Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File: AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier: FNsd8jOFk+KsdauywU2wgZ+trSIIOelaEolfFdHBHQ4=
Subject key identifier: E1:23:48:E5:7A:B2:30:4F:3F:12:8C:C8:E8:1C:17:EC:44:4C:53:D4
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial: 01A08C439139E25800CE47B39A32A4EA6F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 17:00:33 +0000
Manifest this update: Thu 10 Sep 2026 17:00:33 +0000
Manifest next update: Fri 11 Sep 2026 17:00:33 +0000
Files and hashes: 1: 9M-CJkVBZVuqIwi3Sawh0isCz1k.roa (hash: aFU0pADsAbTvFke0dF4U47/0s76HwBtoQCpl6QnSuNI=)
2: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: jOHRcdgq5JAAltu/SMuBt5enyqtm6Gu5tGjtsvmSz6Q=)
3: KbY29WtKZkz8Fbjj7QvLlg811Iw.roa (hash: vGh5FY7zuISKMd7QAir+eppKFgiFx2llO5uFQh7FV0A=)
4: Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa (hash: lpodXqk6t7MJFjfZg1Uow8LLK/4R3ylcdMkmlTgRneo=)
5: hkJYoKxZ5NaqYkSY0GG7dfC0J6M.roa (hash: M6l2Qx3MyNr2ADezdHbYqYOeyWWrHzzKzTBcWubDLyY=)
6: iN3PbeV3-UffGNWyXfh7JHJfK74.roa (hash: JtoeR6EU9pVtvyEClltI2vcG5Q/h7OJRN/rUzf7IfP8=)
7: qydppjeYfUzDVxdV73Ghn9vaAYk.roa (hash: F/o5ke8f18yC9oKEjHkU0hNCPxAS0/yMbN5QTK0st0g=)
8: sH1teYqG2FqEXd7RfMCaBcOnmaw.roa (hash: suxWcXpZV2IMJ73fGzjwM37LJ58quwhaki1YE7N0sRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:91:39:e2:58:00:ce:47:b3:9a:32:a4:ea:6f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Validity
Not Before: Sep 10 17:00:33 2026 GMT
Not After : Sep 11 17:00:33 2026 GMT
Subject: CN=e12348e57ab2304f3f128cc8e81c17ec444c53d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:55:81:b4:e4:18:e1:78:3d:22:76:05:bc:
78:c6:75:38:bc:e7:33:75:4b:db:ff:c1:ee:76:58:
41:93:e3:eb:94:11:30:a3:c1:8e:99:87:c0:2d:80:
ec:44:67:a5:86:82:7d:78:54:30:67:08:be:64:ae:
8f:35:0c:6a:1a:f8:bc:54:7d:20:d6:57:2e:11:be:
0b:7a:6a:07:2e:f4:2d:66:1e:58:29:24:53:93:50:
f9:99:24:db:1c:79:78:9f:4e:08:b2:67:7e:f4:11:
63:40:ab:80:36:3e:94:f3:29:80:04:df:2f:e0:6b:
ee:05:8f:01:22:05:51:67:aa:61:21:8d:ed:91:98:
bc:8b:ac:03:a0:e9:1e:b5:17:72:a5:a6:38:59:4e:
50:17:38:57:95:f1:5d:74:23:40:c9:b6:95:75:e5:
7b:ab:68:3c:da:a6:c8:64:97:c6:1e:68:e5:c6:fa:
ee:bb:44:56:ce:eb:0b:23:50:3d:ec:f6:df:73:79:
ef:73:1c:03:32:92:a5:dd:09:90:25:16:e3:d3:0a:
6c:74:7d:65:74:90:45:94:b8:e2:26:d9:c9:2c:91:
1f:47:f1:c2:5b:1e:4f:13:f0:3b:cd:ec:fe:46:f0:
8c:cc:d9:d9:39:5b:d7:7f:db:ca:fd:c8:75:7f:f4:
21:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:23:48:E5:7A:B2:30:4F:3F:12:8C:C8:E8:1C:17:EC:44:4C:53:D4
X509v3 Authority Key Identifier:
keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3e:eb:aa:97:92:6c:24:49:e6:9e:fc:66:9e:b0:fe:b5:5c:
c4:02:1f:8c:fd:e3:bb:f7:40:5c:af:95:85:2f:1e:62:0f:1e:
7b:63:47:3f:9e:0d:85:8c:f1:f4:1e:7a:31:14:40:73:0d:74:
1e:5a:b2:84:93:00:2d:27:2d:b4:cb:69:87:dc:c7:46:a8:ee:
3c:81:c1:e4:72:44:fb:49:af:da:43:06:c4:0a:4e:7e:26:92:
37:50:64:24:b4:27:cf:72:c3:b9:4a:7e:85:2c:17:e6:54:bc:
2b:cb:a1:4d:89:21:4b:ba:47:80:2c:2b:a2:6e:9f:81:2a:66:
12:d7:57:bf:cf:4a:09:9d:13:d1:28:bf:7c:3d:fb:24:e6:27:
b6:a0:a8:7a:63:4a:f9:05:c1:a3:89:4f:35:f9:94:b1:d7:b1:
84:98:27:4e:2b:3f:24:cb:b5:7d:e3:b9:e6:2c:8b:34:16:ce:
e7:42:b9:6c:3d:63:90:50:cc:2a:7d:6f:1f:63:df:58:e2:27:
df:1e:fc:5c:e4:23:84:b1:9a:4b:35:3c:88:78:6d:63:b0:57:
b6:8f:c7:b1:a3:03:d6:5f:70:bb:dd:d4:3c:45:ec:de:01:06:
98:26:da:6c:fe:c4:6d:fa:c3:23:5b:99:fa:20:cb:85:4e:af:
62:61:09:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:06 2026 by rpki-client