Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
File: Afg1dg4UKs6kvwp_-K52do9dzcc.mft (raw, json)
Hash identifier: soYGyhipaTrKAB3Dh1+FU32VHFs5ZMRZ8C9EyZMnZds=
Subject key identifier: 7C:3A:7D:03:38:FC:AE:B8:8F:03:AD:DA:C1:A7:AE:59:F5:BD:64:72
Authority key identifier: 01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
Certificate issuer: /CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Certificate serial: 019FA0E0F2D591150C470E885CE3A59C609A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:02:04 +0000
Manifest this update: Mon 27 Jul 2026 00:02:04 +0000
Manifest next update: Tue 28 Jul 2026 00:02:04 +0000
Files and hashes: 1: 4jcZt8wr_Es5obrL6nyZ-hZNiVo.roa (hash: IB+ugtp0I7aeSyY/gPMof8xJPcR03yNbnpz2Zj7EXMg=)
2: Afg1dg4UKs6kvwp_-K52do9dzcc.crl (hash: nAD32peR7R3xofvncSMFtwYDbrRHze1e8HeHdR+Dsj8=)
3: EKtIRD07koj3PioZOzCC9_Q7xak.roa (hash: lz0w7rq5fTE3a3NzEhEeOVrovs8rwD/BBZm7VfWq6Qw=)
4: ETVOeNdAXGMglMi9aSJ3RaDWQ6k.roa (hash: lZ1vDi/rrrr51AW0R6YsNcHKSikuFPwLBuW6UAowH/0=)
5: EnUvjP-IlK1TjhIK9PapivGlbHI.roa (hash: s3r3WCLrBtGWpOA+chKpU0iZQeLq5vYcO5cTKAGqiTI=)
6: LYcuob5nBFbh7n613P7zBmvuRi8.roa (hash: BlKetV9H5SDTjF2fquyGonvag/juU02Kfq5nG08wFNE=)
7: Z91QgU3zPEvidy5E07FD820SvCE.roa (hash: t1hJ2jxHCBaQ4V6GB9HTa2VYzxo2IJI3xiQVOmOCbuo=)
8: kkaN34dPFzsfPEI-fZd7KP-pfLU.roa (hash: AzWDWwHIXhb8lGQNOOstOsRvBfcDp2w4pMgxi168ueE=)
9: lQPkRwjAgL9s8Del_fG_YG6m55w.roa (hash: tt7eRX7rLhh4+WSgLjRaVmZ3euA+zhr35kKk4/BemZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:f2:d5:91:15:0c:47:0e:88:5c:e3:a5:9c:60:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Validity
Not Before: Jul 27 00:02:04 2026 GMT
Not After : Jul 28 00:02:04 2026 GMT
Subject: CN=7c3a7d0338fcaeb88f03addac1a7ae59f5bd6472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:9c:cf:8d:c9:7b:2f:67:bd:f5:ad:0e:de:
a4:44:79:a2:2a:91:c6:c1:63:a7:7b:07:7c:ad:43:
1e:2c:b4:92:a4:6f:86:11:7e:18:c1:b6:a9:bc:e0:
54:fe:7d:b8:2a:cb:06:79:58:09:2c:77:3d:9b:a2:
ba:3a:61:95:2b:a2:67:8f:1f:d7:22:d5:ec:04:c0:
5e:41:2e:d2:09:6d:f4:56:b0:22:45:ff:ed:b3:6e:
05:e0:3f:7e:22:70:6b:9b:93:d2:2f:7c:4a:1b:19:
4e:0b:39:00:b2:20:1d:8a:04:97:ed:ab:90:37:6d:
37:e5:47:82:d4:12:98:cf:3e:45:43:95:fa:51:a4:
4e:6a:5a:66:77:b3:6c:77:b7:c0:05:58:bf:3a:90:
cd:f4:5d:84:08:f9:9f:cb:8f:86:a0:f2:52:71:01:
90:b5:2c:cb:ec:ab:b0:da:b9:34:a7:de:14:28:db:
54:79:74:c4:78:e6:ef:17:9b:9b:63:e7:d7:e4:5b:
0d:cf:c5:c9:02:75:60:ed:07:1f:00:72:ae:1c:ad:
99:31:6f:18:a3:88:e8:c0:17:af:2e:74:95:60:d8:
3f:40:b1:ea:4e:90:94:90:2d:41:0b:7b:90:aa:d9:
a9:6e:83:6b:94:87:85:98:37:40:07:5e:6f:b1:b6:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3A:7D:03:38:FC:AE:B8:8F:03:AD:DA:C1:A7:AE:59:F5:BD:64:72
X509v3 Authority Key Identifier:
keyid:01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:71:69:b8:73:04:18:5d:0d:a0:1e:fa:47:b9:e2:b4:16:4e:
8d:4e:54:c0:47:fa:3a:4d:f8:7e:b8:73:49:1f:aa:5a:f0:9a:
4d:d7:9b:41:53:af:ca:f8:97:40:15:f5:30:e6:27:62:e0:6e:
1f:15:f1:42:00:8d:a1:dc:a7:15:ba:27:c5:65:1e:59:e0:33:
1d:65:64:c2:ea:d7:21:65:ce:93:6c:af:33:e7:1b:e0:c4:0c:
57:cc:89:14:49:fc:7d:85:42:e3:73:b0:4b:d2:2f:8f:17:6c:
f1:15:04:88:a8:b1:b0:bc:44:e1:ef:04:5f:7b:40:cc:8b:96:
ea:28:e3:39:16:ec:fb:8a:fe:e1:d5:91:00:66:8c:24:fc:d6:
70:69:8f:e8:67:ce:65:64:6a:83:8d:4a:a2:01:fb:eb:ba:44:
7c:b6:50:ff:77:6b:ef:78:c4:cf:ac:81:cf:69:2c:be:1e:f7:
a3:da:7d:d8:5a:38:96:bf:ef:ef:3e:70:3f:17:dc:eb:16:85:
23:64:14:69:f6:65:01:bf:fe:f9:41:4e:53:e4:c8:7c:49:80:
5a:fa:5f:8a:52:d7:ba:98:0a:87:23:cd:60:e2:3b:b7:38:4f:
15:db:88:7a:c3:7f:77:b9:cf:f1:68:d2:e3:6c:09:9f:14:18:
72:25:f9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:06:22 2026 by rpki-client