Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
File: AV8u9ttQKZTXsMjknNSnd725NXI.mft (raw, json)
Hash identifier: 8VOUe3nnJXAFbNKxkNJ99Fw+wZyUltL5duYn1ZQXPeI=
Subject key identifier: 5E:59:D1:6B:55:76:D5:88:77:2F:67:E6:FC:4C:A5:41:66:15:A7:E2
Authority key identifier: 01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
Certificate issuer: /CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Certificate serial: 019F17C31F4C65B1B1C165A81E24C72C85C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
Manifest number: 1655
Signing time: Tue 30 Jun 2026 09:01:31 +0000
Manifest this update: Tue 30 Jun 2026 09:01:31 +0000
Manifest next update: Wed 01 Jul 2026 09:01:31 +0000
Files and hashes: 1: AV8u9ttQKZTXsMjknNSnd725NXI.crl (hash: JVrOrj/zDqAiFb7m4r1Ky0t+FjE1LX5syI45oYRa9yI=)
2: zO6UKEO2UsX-uJJtYaV0kqdh2lk.roa (hash: BNJ+i4qsWrDUg9fXwYJtm2jlZYe3Zjo1dqX8YeGBA8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:1f:4c:65:b1:b1:c1:65:a8:1e:24:c7:2c:85:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Validity
Not Before: Jun 30 09:01:31 2026 GMT
Not After : Jul 1 09:01:31 2026 GMT
Subject: CN=5e59d16b5576d588772f67e6fc4ca5416615a7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:67:48:fc:6a:5a:6b:20:43:4f:2b:1d:de:
45:e3:b2:90:44:9e:fb:53:fd:49:ec:c9:52:ae:67:
9a:39:bc:2e:02:94:a1:6a:9b:4e:27:2b:21:2c:6b:
63:73:e3:36:8d:26:a0:94:1a:e6:4b:e7:ac:e8:16:
89:7b:50:41:d8:57:86:ee:84:49:c9:c0:a8:1b:9c:
07:6e:fc:3d:fc:90:f4:2d:b0:e8:c9:01:14:92:a6:
94:34:1a:3c:ea:de:29:99:30:5b:ab:f3:03:24:c9:
81:48:b8:ca:7f:93:48:11:07:59:fb:01:41:44:e9:
b8:96:24:50:9d:a4:ee:19:b1:31:f0:c3:56:cd:47:
35:fe:de:01:49:45:30:3a:cf:6a:1b:ed:3b:61:a9:
70:46:40:97:b2:d3:af:13:05:1f:41:fb:4e:1c:01:
b1:71:bf:2c:3d:8b:f7:10:6b:bc:aa:10:97:2b:52:
a5:f3:3e:01:e6:d9:ab:d8:1b:cb:dc:ed:b4:06:2b:
5e:bf:82:a0:6d:2d:5e:4c:b2:5a:33:0d:74:9a:28:
f5:91:3c:ed:a8:66:78:46:98:ac:61:63:17:40:90:
0f:34:22:ec:c4:bc:fc:60:f1:47:09:64:4a:5d:c9:
98:21:48:9b:94:bf:c4:41:74:96:d0:3a:9a:3a:57:
29:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:59:D1:6B:55:76:D5:88:77:2F:67:E6:FC:4C:A5:41:66:15:A7:E2
X509v3 Authority Key Identifier:
keyid:01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:98:14:87:a2:f5:7f:38:19:68:05:3d:a0:20:68:1d:59:1e:
d4:86:a5:a3:2d:ed:77:c0:92:c2:a5:4f:9f:93:dd:9a:bd:33:
29:d2:38:68:3a:62:e6:7c:7a:03:1d:94:9c:81:1f:b9:58:b5:
2c:77:1f:a2:e1:e7:27:17:be:25:ae:11:da:76:af:dd:62:4b:
5e:11:6f:2d:61:74:b1:0d:7f:65:c8:40:fe:ac:6c:c7:4c:94:
c5:37:b1:c3:13:68:c5:65:d0:31:18:d2:48:29:c1:01:35:b1:
fb:2c:17:67:34:01:c8:e4:f5:12:89:9c:c3:3c:76:5e:d2:9e:
a2:3a:96:8d:2f:db:8d:ea:11:f5:92:0a:65:ce:50:f5:6f:a0:
5c:9a:cf:2a:52:15:10:02:74:9d:11:c2:0e:4c:5c:8c:42:93:
0e:c2:a0:17:10:3a:24:dc:22:c6:f3:3a:41:7c:06:19:21:1f:
ba:cc:00:5d:12:2d:87:4c:f8:fb:6e:0e:74:b1:99:3b:78:bf:
eb:ed:76:4b:55:8d:2e:82:49:6b:f1:c4:e6:dc:be:f9:94:da:
fa:1d:2b:5b:dd:ea:e4:eb:bd:81:7c:17:5c:29:59:b7:9a:86:
0e:b0:a9:d7:48:e5:e5:4c:48:5c:0b:f7:7c:aa:89:1b:0e:45:
0e:8d:f9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:06 2026 by rpki-client