Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
File: AvxcBk9RWcih-kBmyMuP9wFnHdI.mft (raw, json)
Hash identifier: Qwj/bAEBku3Z+OTQ4kDwMUjYso6QbQBI56RinzCmCw4=
Subject key identifier: C8:80:0F:55:78:84:87:39:92:75:6B:49:35:27:4E:13:B6:C7:AE:7B
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Certificate issuer: /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial: 019F122E9BF3CA655E4240332FCDF783EE83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
Manifest number: 0EA6
Signing time: Mon 29 Jun 2026 07:01:12 +0000
Manifest this update: Mon 29 Jun 2026 07:01:12 +0000
Manifest next update: Tue 30 Jun 2026 07:01:12 +0000
Files and hashes: 1: AvxcBk9RWcih-kBmyMuP9wFnHdI.crl (hash: Z6uw5WzkZcpBrSKQRkpW3fPN2yiBOhd/4uMNqTAZc5c=)
2: aieeYAXcHf6iZv5A5jAAy7zNKfU.roa (hash: +Mh/5aHvThjQydJerYwnqxyvk8cU5lJddJlC7wDae6g=)
3: pV8pE_cOHYJYSxBxGWWyjX19c8g.asa (hash: eS3GUrvb75q/7iupe8O+vpHF97RDhum8PqoVzv8QV5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:9b:f3:ca:65:5e:42:40:33:2f:cd:f7:83:ee:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Validity
Not Before: Jun 29 07:01:12 2026 GMT
Not After : Jun 30 07:01:12 2026 GMT
Subject: CN=c8800f557884873992756b4935274e13b6c7ae7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:37:27:fc:8f:eb:02:4a:d9:05:6e:2f:cf:
8b:84:64:2b:60:b0:3d:e7:d5:f3:bb:2d:f6:15:c7:
2d:20:ad:a9:b0:8f:16:da:6d:9c:ae:9a:f2:3c:fe:
9c:4d:2d:5c:25:56:be:e2:2a:08:1c:ea:29:2e:f1:
6d:a2:92:64:e4:d4:7f:cf:24:a8:f3:35:96:26:40:
1f:fd:da:02:7b:48:f9:ca:df:06:62:e6:00:7a:36:
e6:71:f2:58:e3:27:be:a5:37:fc:f2:2c:3b:03:68:
67:ab:46:95:fb:f7:06:70:51:f4:31:67:3b:0e:12:
d5:1e:ea:42:7e:9e:75:d7:74:34:7f:f1:98:27:bd:
84:75:29:5f:56:35:e6:dc:c1:1d:15:cb:9d:b3:79:
77:19:11:d0:7c:16:51:91:6b:41:cf:43:8d:57:5f:
83:7c:1b:c6:e6:df:ad:f8:82:ee:e9:7f:94:7a:f2:
69:09:11:35:83:7e:d7:2d:be:58:77:20:37:d6:5a:
71:7e:7a:d0:19:20:4d:5e:49:88:62:a2:65:c9:e8:
92:63:1a:2d:b7:a8:b6:37:c8:b9:d1:53:68:8f:37:
9b:c5:9f:3a:27:22:a7:42:1d:f3:a8:e5:99:dc:23:
7a:dc:96:f8:64:7b:c4:9a:c6:df:d6:60:61:f9:01:
7a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:80:0F:55:78:84:87:39:92:75:6B:49:35:27:4E:13:B6:C7:AE:7B
X509v3 Authority Key Identifier:
keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b3:68:34:7f:49:f4:a1:e5:b7:46:98:2e:98:2b:52:7a:68:
75:8e:78:4a:65:30:9b:e1:57:61:e7:9a:42:8f:7f:48:a1:67:
d1:a3:30:d9:97:53:10:80:bc:f9:c5:dc:db:2e:c2:a2:a9:fe:
e9:04:50:09:cd:e4:3f:21:6c:9e:73:30:26:21:57:d2:77:06:
55:9c:0e:96:d8:54:12:d2:c7:0a:d0:b2:1e:a9:23:cd:63:f2:
cd:af:71:b9:af:41:a4:f3:6e:ea:43:fe:d5:e8:f7:4b:3e:39:
62:9d:ba:84:49:69:8e:06:7c:ec:fb:c9:5f:a5:6d:45:4c:58:
e8:4a:e2:b8:cd:ea:c7:4c:53:d0:21:f7:3a:26:d7:40:ad:1e:
db:a5:85:61:60:d4:74:84:ce:d5:4c:38:76:09:da:95:2e:3b:
c0:df:5b:f4:45:65:94:dd:d5:7a:b5:76:62:e3:c1:d1:cc:93:
52:0f:88:ca:a6:a6:79:ec:72:99:2f:b5:5d:b8:22:f9:7b:f1:
fd:dd:9d:17:9a:b1:85:91:84:a3:ae:35:87:c6:07:1b:b0:58:
37:9a:94:05:68:12:cd:38:bf:eb:dc:5d:49:9c:3e:c6:87:a9:
c1:54:2a:c9:bb:2c:87:e7:16:09:81:34:83:3c:67:04:fd:21:
7b:34:93:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:34:30 2026 by rpki-client