Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
File: AV8u9ttQKZTXsMjknNSnd725NXI.mft (raw, json)
Hash identifier: xcANkj4DjrnP/cCghS0j5wA6dGudzycfwA9ztIToxUM=
Subject key identifier: 3F:D4:C1:4D:A0:94:AE:3F:EF:FA:7E:C0:61:FC:25:74:A6:1D:BE:2C
Authority key identifier: 01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
Certificate issuer: /CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Certificate serial: 019D38D2D6078C7CA5205379E232A97D0861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
Manifest number: 155D
Signing time: Sun 29 Mar 2026 09:00:34 +0000
Manifest this update: Sun 29 Mar 2026 09:00:34 +0000
Manifest next update: Mon 30 Mar 2026 09:00:34 +0000
Files and hashes: 1: AV8u9ttQKZTXsMjknNSnd725NXI.crl (hash: FrkzDQwYtDcr7bsNhN0VlUFDwYvUD9n23Z5sPyYRvxk=)
2: zO6UKEO2UsX-uJJtYaV0kqdh2lk.roa (hash: BNJ+i4qsWrDUg9fXwYJtm2jlZYe3Zjo1dqX8YeGBA8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d6:07:8c:7c:a5:20:53:79:e2:32:a9:7d:08:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Validity
Not Before: Mar 29 09:00:34 2026 GMT
Not After : Mar 30 09:00:34 2026 GMT
Subject: CN=3fd4c14da094ae3feffa7ec061fc2574a61dbe2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:0d:a9:a5:cd:08:bc:c2:5a:43:4c:eb:1d:
1c:e8:9f:50:36:2e:b8:45:04:29:86:61:a5:d1:f5:
c3:82:ed:29:13:60:09:e5:3f:74:64:68:b5:14:2f:
02:6a:20:16:77:8c:82:88:f7:b9:ed:2f:cd:69:09:
35:b2:7d:3e:1e:e4:b3:8a:fc:d0:09:a1:a0:fd:2a:
a4:d3:83:cd:04:e5:90:2c:b3:25:bd:35:bd:c5:23:
fd:ad:dc:a7:c7:12:4a:b1:c4:6e:de:d3:b4:a8:66:
26:c4:95:23:5a:e5:90:ee:44:f9:6c:f6:a8:1c:ea:
dc:0d:3c:6b:a2:e4:8e:4c:45:c9:88:dc:21:c3:52:
b8:7f:10:82:7a:d4:03:17:ff:2a:57:a6:3e:98:5f:
f2:24:f7:95:34:f7:4f:8b:ee:01:c0:5b:a8:63:ed:
be:90:4f:53:92:34:d1:d7:ad:18:36:d5:12:d4:7d:
b3:86:70:8f:8a:3f:3c:63:a9:b5:b0:5c:ae:62:35:
1f:47:20:13:84:11:90:0a:35:c6:fe:21:ca:70:4d:
13:ef:8a:50:22:2f:6f:3d:1e:d3:48:1c:14:03:d2:
09:6d:57:07:7a:cf:e1:f3:0a:d7:b6:9d:bd:ea:c7:
6d:a1:fc:87:a0:47:37:20:e7:32:56:a1:8c:37:af:
a8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D4:C1:4D:A0:94:AE:3F:EF:FA:7E:C0:61:FC:25:74:A6:1D:BE:2C
X509v3 Authority Key Identifier:
keyid:01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4b:24:5a:48:09:00:e9:b7:ce:c6:19:b5:39:f5:6a:3f:0c:
56:3f:58:24:ce:c4:82:1a:b0:ea:66:0b:9f:ca:fd:10:2b:28:
5a:44:21:4b:49:7d:0b:b8:2a:6a:3d:38:f4:ea:d2:2a:3f:09:
62:a1:61:2d:ae:00:e2:4f:a1:6f:94:7d:b4:b7:38:3b:e1:3c:
d6:92:df:d5:3a:98:9f:99:80:a6:5a:7a:22:fb:3e:ca:e6:86:
bb:e9:76:1e:c5:54:ec:2a:60:d0:88:52:eb:0d:87:e7:52:d9:
64:70:03:74:af:b4:ec:d8:d6:f5:94:4b:5b:de:aa:69:5f:3b:
26:e4:bd:8d:ff:d8:7c:c3:56:ea:cf:3a:98:e7:67:ef:88:d2:
dc:33:c7:e7:a2:a0:bf:7c:30:13:b9:9c:97:89:50:1f:ff:8a:
8d:af:9f:53:41:6a:8a:bf:38:d5:d0:fe:f4:1e:0a:64:1f:f0:
fd:51:7b:88:82:50:42:eb:86:9a:bf:97:64:f5:f9:17:d9:1c:
e7:9a:59:de:c7:b8:32:cb:31:39:6c:0d:b3:7b:e5:2b:05:2f:
78:bd:2c:0d:b4:a8:e0:21:b4:af:43:d9:95:14:3e:99:ac:8d:
a4:2b:0f:6a:7d:bd:81:16:fc:19:a3:5b:58:39:39:6a:bb:d8:
cc:87:08:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:50 2026 by rpki-client