Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
File: Afg1dg4UKs6kvwp_-K52do9dzcc.mft (raw, json)
Hash identifier: EGes1lhpHmd74KZRIypU/M6qQIFaa5EQ2mofdWkJz+Y=
Subject key identifier: C2:29:7F:AC:9E:A0:42:E3:49:D2:20:F5:D5:19:A7:C8:70:7E:82:61
Authority key identifier: 01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
Certificate issuer: /CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Certificate serial: 01A08A8C8552B6C9D4230E33BE7BC23E20EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:00 +0000
Manifest this update: Thu 10 Sep 2026 09:01:00 +0000
Manifest next update: Fri 11 Sep 2026 09:01:00 +0000
Files and hashes: 1: 4jcZt8wr_Es5obrL6nyZ-hZNiVo.roa (hash: IB+ugtp0I7aeSyY/gPMof8xJPcR03yNbnpz2Zj7EXMg=)
2: Afg1dg4UKs6kvwp_-K52do9dzcc.crl (hash: vIIVvEU5dIFWeVvrl6b9r+Rt5vCqb27cRJcf7DvIqTY=)
3: EKtIRD07koj3PioZOzCC9_Q7xak.roa (hash: lz0w7rq5fTE3a3NzEhEeOVrovs8rwD/BBZm7VfWq6Qw=)
4: ETVOeNdAXGMglMi9aSJ3RaDWQ6k.roa (hash: lZ1vDi/rrrr51AW0R6YsNcHKSikuFPwLBuW6UAowH/0=)
5: EnUvjP-IlK1TjhIK9PapivGlbHI.roa (hash: s3r3WCLrBtGWpOA+chKpU0iZQeLq5vYcO5cTKAGqiTI=)
6: LYcuob5nBFbh7n613P7zBmvuRi8.roa (hash: BlKetV9H5SDTjF2fquyGonvag/juU02Kfq5nG08wFNE=)
7: Z91QgU3zPEvidy5E07FD820SvCE.roa (hash: t1hJ2jxHCBaQ4V6GB9HTa2VYzxo2IJI3xiQVOmOCbuo=)
8: kkaN34dPFzsfPEI-fZd7KP-pfLU.roa (hash: AzWDWwHIXhb8lGQNOOstOsRvBfcDp2w4pMgxi168ueE=)
9: lQPkRwjAgL9s8Del_fG_YG6m55w.roa (hash: tt7eRX7rLhh4+WSgLjRaVmZ3euA+zhr35kKk4/BemZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:85:52:b6:c9:d4:23:0e:33:be:7b:c2:3e:20:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Validity
Not Before: Sep 10 09:01:00 2026 GMT
Not After : Sep 11 09:01:00 2026 GMT
Subject: CN=c2297fac9ea042e349d220f5d519a7c8707e8261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:27:d0:27:ce:79:ff:e5:ef:d9:96:6b:71:03:
9b:55:42:26:69:6b:bd:0b:84:e6:8b:88:96:63:59:
5a:0f:ac:50:95:e6:1a:0b:4b:ec:28:38:5a:99:9c:
77:f8:49:ca:e9:7c:9b:0a:16:02:4a:4d:d2:34:d5:
8b:28:0f:d2:de:fa:65:ed:47:94:95:0d:b2:d4:0b:
eb:34:02:c3:81:e3:ee:7f:c5:24:e6:ad:1c:e2:67:
87:c5:8b:be:6c:fb:b1:a8:b7:95:b5:66:51:37:44:
2c:6c:a5:1d:cb:54:8e:98:70:84:35:db:8d:91:fc:
52:2e:d2:b1:6a:91:b4:57:87:50:c0:5d:f8:fd:64:
0f:13:30:b1:86:32:2d:25:d9:ae:09:08:ad:86:a8:
1b:4d:56:35:f3:1f:1c:30:6e:5b:ce:33:c5:b9:96:
c1:d4:45:b9:cf:4b:8c:1b:96:ee:39:81:0e:87:ff:
8c:34:56:87:89:71:93:13:3d:40:52:8a:ed:0e:f5:
4f:4d:34:f3:90:47:f4:33:32:74:dc:84:1a:be:fd:
b2:fa:a4:21:13:1f:26:d4:5c:a7:92:9c:40:07:0d:
ff:22:7e:e6:2b:23:2a:5f:e5:83:24:11:c8:a9:d4:
bc:12:8e:f1:bc:7c:17:41:63:eb:6e:4b:3b:ff:2e:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:29:7F:AC:9E:A0:42:E3:49:D2:20:F5:D5:19:A7:C8:70:7E:82:61
X509v3 Authority Key Identifier:
keyid:01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9a:2c:29:89:04:4b:b0:d7:8d:9e:98:69:f8:7a:99:9d:a5:
47:b7:15:35:8b:38:66:45:d2:23:0b:be:6a:0a:8e:b2:5c:0d:
4e:36:96:56:cb:ed:a1:15:02:50:36:90:d3:02:7c:a2:d0:c3:
1f:d0:43:b7:ac:65:f6:5c:ae:2b:61:2e:b6:39:94:45:24:ca:
38:2f:a2:88:02:75:28:e0:ec:af:21:ac:04:59:f6:ac:9a:1c:
40:64:b8:cd:f1:22:6c:cc:fc:c5:e4:cd:eb:aa:1b:38:10:89:
99:27:f9:7f:24:1b:40:94:2b:9e:0c:dc:30:1b:7a:84:43:08:
97:02:66:93:98:fb:6c:f2:ca:e6:82:cf:79:51:37:cc:1c:3b:
8c:a6:41:6d:cb:c1:ad:d3:a4:18:d6:90:a9:bb:74:aa:6a:c9:
ea:69:c2:02:c1:e6:46:9e:3a:cd:3a:08:62:0e:8f:06:c3:84:
db:91:3d:18:8a:6f:01:ef:8b:78:a3:f7:47:c2:7a:a8:b8:1f:
ce:a4:fd:57:ad:a3:b8:48:90:48:9e:29:03:33:c2:5c:db:89:
e4:90:35:84:03:1c:ff:11:c0:40:32:f1:df:8c:c8:19:41:80:
51:bd:fc:1f:8e:75:73:2c:fa:9b:83:a9:22:3e:71:70:1e:5c:
a7:cd:cb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:11:27 2026 by rpki-client