Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
File: AvxcBk9RWcih-kBmyMuP9wFnHdI.mft (raw, json)
Hash identifier: X6NRFapzlidL5urDkvxEx9RKWVe15JVyyXACgYRwb+A=
Subject key identifier: 8C:F8:AE:16:62:E3:D6:66:30:03:D3:E3:65:CA:7B:E4:C8:E9:75:29
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Certificate issuer: /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial: 019D3909FE81B279414CDDC8EFE1E809F7B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
Manifest number: 0DB1
Signing time: Sun 29 Mar 2026 10:00:49 +0000
Manifest this update: Sun 29 Mar 2026 10:00:49 +0000
Manifest next update: Mon 30 Mar 2026 10:00:49 +0000
Files and hashes: 1: AvxcBk9RWcih-kBmyMuP9wFnHdI.crl (hash: /OWwzUNg675oYqGQZyIupvqtGnqlc/mbGxXh3INzXRg=)
2: aieeYAXcHf6iZv5A5jAAy7zNKfU.roa (hash: +Mh/5aHvThjQydJerYwnqxyvk8cU5lJddJlC7wDae6g=)
3: pV8pE_cOHYJYSxBxGWWyjX19c8g.asa (hash: eS3GUrvb75q/7iupe8O+vpHF97RDhum8PqoVzv8QV5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:fe:81:b2:79:41:4c:dd:c8:ef:e1:e8:09:f7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Validity
Not Before: Mar 29 10:00:49 2026 GMT
Not After : Mar 30 10:00:49 2026 GMT
Subject: CN=8cf8ae1662e3d6663003d3e365ca7be4c8e97529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:cf:44:38:35:86:0f:2e:6b:54:d9:17:a8:
fb:4d:44:67:37:bc:21:91:57:5d:20:11:44:99:74:
cb:c3:da:86:81:31:e6:42:f3:84:11:be:62:82:95:
29:e0:29:3b:27:4f:da:59:a6:16:69:f8:ff:82:d6:
31:13:23:53:42:88:21:b2:39:72:35:1a:f8:93:3e:
c6:64:7e:51:cf:37:2e:92:99:c0:14:f2:8f:db:f3:
2d:43:f4:3f:68:2a:95:11:4f:ea:0a:06:d1:0e:14:
44:48:05:e9:a8:00:46:bc:b5:4d:0e:e0:fa:af:e5:
14:34:cc:7d:ee:f8:ff:2e:6e:47:95:97:b0:f1:7b:
40:13:5e:5c:61:22:80:2c:42:20:c6:db:ad:ec:af:
33:86:ab:7e:4e:75:df:a3:27:ee:84:8e:2f:43:ec:
5e:63:69:6a:3a:f9:e3:10:7d:50:45:96:c8:ee:24:
6f:b8:f5:6b:16:51:5b:55:a9:5c:32:a6:c7:d4:d3:
ab:3b:77:da:e0:f5:a7:db:e9:8a:8a:a3:d2:b9:e9:
27:ea:a4:59:5a:7d:8a:1f:b4:74:78:56:39:f6:fd:
07:f5:48:17:99:27:ba:63:40:a8:cb:b0:37:20:91:
e5:99:0b:16:9a:4d:eb:d1:e9:7c:90:8c:eb:96:ce:
bd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F8:AE:16:62:E3:D6:66:30:03:D3:E3:65:CA:7B:E4:C8:E9:75:29
X509v3 Authority Key Identifier:
keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7e:be:1c:04:8c:db:32:a9:82:8d:1e:71:f3:8f:94:e9:44:
c1:dd:30:7c:82:fd:20:a5:cb:e0:be:96:8f:35:eb:ae:a9:e9:
9c:1b:02:4e:94:87:a3:e6:81:e7:6f:1b:bd:a3:e1:a8:d5:30:
8b:2a:4d:22:79:e6:30:a4:2b:7b:d3:f7:f5:a9:64:ba:aa:59:
4f:eb:01:2c:8a:27:6f:98:44:e4:f4:0b:72:17:47:80:cf:4d:
98:67:2a:71:29:d5:b0:c7:6f:71:69:58:8e:6a:e6:ae:35:d9:
95:a5:da:77:b2:0c:c2:4a:34:72:47:94:59:ce:8d:b3:e3:e3:
38:03:44:2b:33:d9:ca:a1:ed:6b:e6:a1:12:28:46:47:45:f7:
0a:4d:28:38:28:16:30:b5:87:07:20:96:d8:7c:5a:db:88:48:
4c:7d:57:bb:d8:6f:59:fe:a8:a8:8b:53:3e:6c:e5:2a:0d:73:
d3:53:91:0c:38:b2:1c:33:fd:cc:7e:e9:ce:96:40:5a:f9:a7:
dc:ed:ee:76:24:80:38:c1:0d:96:f7:68:fe:2b:e7:e1:5c:61:
f5:bb:9c:5f:94:90:13:21:a3:33:52:d6:79:98:2c:a6:72:3d:
bd:3e:61:17:c8:6d:b1:65:21:56:e8:22:c0:48:60:14:e3:50:
ee:9b:b3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:07 2026 by rpki-client