Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
File: Afg1dg4UKs6kvwp_-K52do9dzcc.mft (raw, json)
Hash identifier: jCws0EwkCZaGGvk1w8gSwL6xyVGrjidBw60UKh9cCRo=
Subject key identifier: BD:B7:21:22:61:33:3B:66:20:1A:2C:98:6F:C5:2F:0C:11:52:A7:C9
Authority key identifier: 01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
Certificate issuer: /CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Certificate serial: 01A18976BD6B604C288722D8A2F3F7117C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
Manifest number: 0145
Signing time: Thu 29 Oct 2026 21:00:22 +0000
Manifest this update: Thu 29 Oct 2026 21:00:22 +0000
Manifest next update: Fri 30 Oct 2026 21:00:22 +0000
Files and hashes: 1: 4jcZt8wr_Es5obrL6nyZ-hZNiVo.roa (hash: IB+ugtp0I7aeSyY/gPMof8xJPcR03yNbnpz2Zj7EXMg=)
2: Afg1dg4UKs6kvwp_-K52do9dzcc.crl (hash: ucieDIBqp4fMb18mrLg/OMZ8i95bilnelFAKHvqZ1aQ=)
3: EKtIRD07koj3PioZOzCC9_Q7xak.roa (hash: lz0w7rq5fTE3a3NzEhEeOVrovs8rwD/BBZm7VfWq6Qw=)
4: ETVOeNdAXGMglMi9aSJ3RaDWQ6k.roa (hash: lZ1vDi/rrrr51AW0R6YsNcHKSikuFPwLBuW6UAowH/0=)
5: EnUvjP-IlK1TjhIK9PapivGlbHI.roa (hash: s3r3WCLrBtGWpOA+chKpU0iZQeLq5vYcO5cTKAGqiTI=)
6: LYcuob5nBFbh7n613P7zBmvuRi8.roa (hash: BlKetV9H5SDTjF2fquyGonvag/juU02Kfq5nG08wFNE=)
7: Z91QgU3zPEvidy5E07FD820SvCE.roa (hash: t1hJ2jxHCBaQ4V6GB9HTa2VYzxo2IJI3xiQVOmOCbuo=)
8: kkaN34dPFzsfPEI-fZd7KP-pfLU.roa (hash: AzWDWwHIXhb8lGQNOOstOsRvBfcDp2w4pMgxi168ueE=)
9: lQPkRwjAgL9s8Del_fG_YG6m55w.roa (hash: tt7eRX7rLhh4+WSgLjRaVmZ3euA+zhr35kKk4/BemZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:76:bd:6b:60:4c:28:87:22:d8:a2:f3:f7:11:7c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Validity
Not Before: Oct 29 21:00:22 2026 GMT
Not After : Oct 30 21:00:22 2026 GMT
Subject: CN=bdb7212261333b66201a2c986fc52f0c1152a7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:e7:f0:70:6d:8f:fa:c1:1a:8f:8f:77:c4:
16:d6:92:f7:4c:6b:e7:98:5a:35:ee:3e:40:d1:c2:
09:37:4c:75:da:f7:ab:b1:a5:84:67:32:e6:92:a1:
ef:79:35:2d:2f:d1:2f:76:5f:b7:8e:ca:71:23:a8:
8a:16:19:31:62:28:a1:f2:a7:32:95:ac:4f:d0:f5:
65:99:ed:59:0e:8b:28:5c:a2:b6:18:2e:f8:f0:43:
86:67:f4:b4:28:7d:7f:2d:6e:de:1c:43:74:28:77:
e0:df:4d:da:e2:0c:3d:e3:21:ac:94:ed:e0:de:95:
a7:78:9f:a3:a6:33:45:1a:e3:bb:31:1a:fd:c8:4e:
a6:a5:f9:45:c1:8d:9a:bb:4d:18:e0:df:eb:5c:79:
b5:60:87:07:be:1d:ce:21:50:08:f3:6b:5b:fc:43:
95:2b:11:60:35:bf:1a:d5:fa:2d:72:2e:e1:0b:e0:
6c:36:a9:04:5a:33:2e:27:57:86:fc:50:9c:9c:01:
ac:51:92:45:b2:8f:52:d7:1f:1f:53:e5:3a:44:29:
39:b2:b6:00:e3:5c:67:94:4c:ab:cb:21:bf:74:c5:
c8:36:41:cf:cc:01:6b:58:bc:99:d8:4c:03:b6:ef:
8d:d8:9e:3b:f2:0e:c6:ca:8e:42:86:4e:77:3d:e5:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B7:21:22:61:33:3B:66:20:1A:2C:98:6F:C5:2F:0C:11:52:A7:C9
X509v3 Authority Key Identifier:
keyid:01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:40:d5:84:d0:38:0c:cd:0d:fb:58:43:55:b2:41:b1:73:38:
69:9b:93:b0:c6:39:b4:ee:08:fe:e4:2d:07:ae:3c:71:4c:09:
e4:1b:63:fa:d7:e0:1d:00:48:7b:a2:2a:f6:9c:e4:97:aa:c7:
89:ca:96:1b:c7:37:a5:72:7e:47:f0:07:5d:20:a9:ab:64:20:
bd:3a:e7:b7:5d:38:b4:2a:b1:53:b8:82:d5:c7:75:c8:d2:32:
41:3a:de:66:39:40:9f:2f:47:13:39:e2:15:92:2b:cf:ef:f9:
6d:b5:63:bd:9c:9e:62:95:57:bc:3e:b6:88:01:67:cb:36:bf:
fd:36:57:3e:44:2c:06:e6:14:d7:46:72:d9:6e:f6:5c:5a:b3:
d0:1d:22:e0:61:aa:0f:a9:34:11:63:76:9a:c4:50:38:3b:35:
a8:00:03:e4:ab:b6:ee:1e:4d:fb:4b:4a:cd:67:89:cd:a6:78:
63:3b:f1:eb:dc:5a:62:ea:bf:ce:c5:3a:03:c1:ee:50:d0:59:
40:03:b2:da:8b:a2:8f:9b:9e:98:ac:34:f6:ec:9b:9e:c1:44:
95:71:f6:d6:19:fd:c9:76:0e:75:91:06:8c:d4:87:79:e5:fe:
12:9d:c2:aa:99:8d:ad:c6:15:17:88:72:c9:f0:77:ae:2f:17:
d0:23:23:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:11:11 2026 by rpki-client