Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
File: AvxcBk9RWcih-kBmyMuP9wFnHdI.mft (raw, json)
Hash identifier: pROQldw8INV4fqOz6J5rDnG8MRDA4NDD6gbGOccH/nU=
Subject key identifier: 6E:0B:B5:76:1D:F3:8F:88:69:CF:AE:F4:F9:FC:5E:99:B9:ED:D3:44
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Certificate issuer: /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial: 01A0F11EC2889FC55DB6EAFE0F68F1668A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
Manifest number: 0F9E
Signing time: Wed 30 Sep 2026 07:01:59 +0000
Manifest this update: Wed 30 Sep 2026 07:01:59 +0000
Manifest next update: Thu 01 Oct 2026 07:01:59 +0000
Files and hashes: 1: AvxcBk9RWcih-kBmyMuP9wFnHdI.crl (hash: LZor0u2KYeomJSYkS2v56K4mhJWoz/uhlo+BYrrpSqM=)
2: aieeYAXcHf6iZv5A5jAAy7zNKfU.roa (hash: +Mh/5aHvThjQydJerYwnqxyvk8cU5lJddJlC7wDae6g=)
3: pV8pE_cOHYJYSxBxGWWyjX19c8g.asa (hash: eS3GUrvb75q/7iupe8O+vpHF97RDhum8PqoVzv8QV5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:1e:c2:88:9f:c5:5d:b6:ea:fe:0f:68:f1:66:8a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Validity
Not Before: Sep 30 07:01:59 2026 GMT
Not After : Oct 1 07:01:59 2026 GMT
Subject: CN=6e0bb5761df38f8869cfaef4f9fc5e99b9edd344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:93:f6:cf:a2:7e:81:cb:14:0c:86:15:5e:
7b:d2:a4:f1:36:67:83:c7:7d:45:4b:1e:c2:cc:2a:
f0:a5:cf:4f:ca:97:1f:f5:f2:3d:9d:45:e3:41:12:
c2:6f:03:e0:97:94:57:32:7d:a0:37:1d:3c:5c:20:
f0:5e:cf:e9:86:36:55:c8:ee:42:0a:a8:8b:45:b9:
0d:42:bd:8c:c7:dd:b4:9f:5c:a2:72:cc:bc:d3:95:
36:32:94:79:de:3e:5d:fb:2c:0a:2a:59:cf:89:db:
0a:f5:d4:c9:d7:f8:f6:26:e4:29:6d:9f:5d:79:05:
6f:59:64:0d:4e:42:4e:cf:7c:61:b2:bc:42:13:c1:
e8:86:49:74:8c:98:88:57:d0:6c:78:a8:21:e9:d1:
88:55:6a:5f:4f:92:a5:92:d8:23:00:91:b0:bc:21:
3c:1d:86:58:21:de:42:a0:be:3f:ae:c3:e1:92:c5:
4b:20:6d:a9:77:28:15:7a:58:31:91:4e:ef:52:64:
c9:12:5c:93:89:0b:88:26:1a:78:9f:03:40:05:25:
63:64:eb:2c:38:bc:07:8b:16:cc:d5:41:a3:ab:1d:
b9:6e:ce:8b:14:84:e7:44:2f:fd:8c:b5:27:41:4b:
ec:54:92:3a:bf:a1:f4:b5:06:ca:53:1a:39:2d:cf:
b7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0B:B5:76:1D:F3:8F:88:69:CF:AE:F4:F9:FC:5E:99:B9:ED:D3:44
X509v3 Authority Key Identifier:
keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:03:37:09:d2:43:7c:fb:9a:fb:47:75:05:1a:4b:3f:bf:cb:
e3:d3:a8:d4:a2:f2:1a:cd:8e:b6:36:9a:cd:3d:a4:b7:57:b8:
2e:1f:d1:3b:1d:e7:16:e1:6c:d8:be:9f:ce:13:8c:c6:e2:e6:
c7:bc:a4:91:fe:ea:09:e6:cc:48:1a:2f:37:e7:b3:60:78:36:
5d:84:41:4f:7e:a8:b2:8a:66:f4:90:a9:9d:45:d6:cb:02:57:
ab:62:c9:ad:78:76:a0:6a:dc:3b:4c:6a:a8:2f:ec:30:71:5f:
c4:86:73:59:b9:45:d3:3b:ea:87:f0:58:de:bb:fe:00:4d:aa:
79:d9:db:c3:9e:b5:37:8c:ee:3b:8d:b6:14:0a:a1:02:09:11:
be:f7:9e:a8:2a:26:ed:d9:cc:87:dd:b9:31:2f:22:d5:41:c8:
3d:df:ef:5c:ac:77:22:62:63:92:4e:f6:20:8c:72:ab:fb:7f:
56:7c:16:f2:2b:06:9d:1b:3b:ef:62:d4:49:2b:18:25:6c:f6:
73:1f:d1:8e:31:e1:84:d7:e8:af:e3:97:16:97:e3:15:27:b0:
ab:ff:aa:70:21:e0:ce:9f:ea:33:96:a2:50:80:5c:ee:36:31:
b3:4d:8c:e0:7b:09:f6:5e:72:f5:3e:26:58:c4:9d:59:22:ba:
c7:d9:eb:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDxHsKIn8Vdtur+D2jxZoqGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZmM1YzA2NGY1MTU5YzhhMWZhNDA2NmM4Y2I4ZmY3MDE2
NzFkZDIwHhcNMjYwOTMwMDcwMTU5WhcNMjYxMDAxMDcwMTU5WjAzMTEwLwYDVQQD
Eyg2ZTBiYjU3NjFkZjM4Zjg4NjljZmFlZjRmOWZjNWU5OWI5ZWRkMzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNaT9s+ifoHLFAyGFV570qTxNmeD
x31FSx7CzCrwpc9Pypcf9fI9nUXjQRLCbwPgl5RXMn2gNx08XCDwXs/phjZVyO5C
CqiLRbkNQr2Mx920n1yicsy805U2MpR53j5d+ywKKlnPidsK9dTJ1/j2JuQpbZ9d
eQVvWWQNTkJOz3xhsrxCE8Hohkl0jJiIV9BseKgh6dGIVWpfT5KlktgjAJGwvCE8
HYZYId5CoL4/rsPhksVLIG2pdygVelgxkU7vUmTJElyTiQuIJhp4nwNABSVjZOss
OLwHixbM1UGjqx25bs6LFITnRC/9jLUnQUvsVJI6v6H0tQbKUxo5Lc+3pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4LtXYd84+Iac+u9Pn8Xpm57dNEMB8GA1UdIwQY
MBaAFAL8XAZPUVnIofpAZsjLj/cBZx3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iMTVhN2QtNWFlZS00ZDQwLWJlNWEt
NzkyYTkxYzVjYTJiLzEvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iMTVhN2QtNWFlZS00ZDQwLWJlNWEtNzkyYTkxYzVjYTJi
LzEvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgM3CdJD
fPua+0d1BRpLP7/L49Oo1KLyGs2OtjaazT2kt1e4Lh/ROx3nFuFs2L6fzhOMxuLm
x7ykkf7qCebMSBovN+ezYHg2XYRBT36osopm9JCpnUXWywJXq2LJrXh2oGrcO0xq
qC/sMHFfxIZzWblF0zvqh/BY3rv+AE2qednbw561N4zuO422FAqhAgkRvveeqCom
7dnMh925MS8i1UHIPd/vXKx3ImJjkk72IIxyq/t/VnwW8isGnRs772LUSSsYJWz2
cx/RjjHhhNfor+OXFpfjFSewq/+qcCHgzp/qM5aiUIBc7jYxs02M4HsJ9l5y9T4m
WMSdWSK6x9nrLw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 11:24:46 2026 by rpki-client