Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
File: AvxcBk9RWcih-kBmyMuP9wFnHdI.mft (raw, json)
Hash identifier: 3yvsPLQft2HeTJiI9NsDkD9gKbZy3883Z9KXUNjNcjk=
Subject key identifier: 6F:82:A5:0A:17:D7:BE:52:BA:59:07:D3:32:BE:42:40:A9:6F:4A:94
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Certificate issuer: /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial: 01A001A62A0AEC21E252612EC06988291664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
Manifest number: 0F22
Signing time: Fri 14 Aug 2026 19:01:01 +0000
Manifest this update: Fri 14 Aug 2026 19:01:01 +0000
Manifest next update: Sat 15 Aug 2026 19:01:01 +0000
Files and hashes: 1: AvxcBk9RWcih-kBmyMuP9wFnHdI.crl (hash: XfRcRR83pdVXd7FmuA5bRoGSs6zTC7JZ6XYumHRbvBQ=)
2: aieeYAXcHf6iZv5A5jAAy7zNKfU.roa (hash: +Mh/5aHvThjQydJerYwnqxyvk8cU5lJddJlC7wDae6g=)
3: pV8pE_cOHYJYSxBxGWWyjX19c8g.asa (hash: eS3GUrvb75q/7iupe8O+vpHF97RDhum8PqoVzv8QV5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:2a:0a:ec:21:e2:52:61:2e:c0:69:88:29:16:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Validity
Not Before: Aug 14 19:01:01 2026 GMT
Not After : Aug 15 19:01:01 2026 GMT
Subject: CN=6f82a50a17d7be52ba5907d332be4240a96f4a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b8:2a:83:99:86:e7:67:56:c8:0b:2e:95:56:
3d:48:b4:1c:57:97:e2:cb:d6:09:12:7b:cb:b3:80:
1a:b7:bb:fe:df:c7:31:2d:27:60:49:b4:0c:52:70:
b1:5d:10:0c:67:64:c1:51:f2:7f:b7:4e:81:3d:cb:
a7:50:e7:60:82:f5:6d:f6:42:65:68:83:22:bf:14:
6c:1b:be:a0:95:c9:75:d2:ac:d7:e1:17:d4:ab:cc:
2e:49:d8:a7:cc:c4:9a:1f:3e:f2:13:6c:63:e1:2f:
31:84:46:e1:05:6e:c2:66:36:96:51:2e:c8:5a:10:
df:6e:fd:30:e6:ef:86:37:70:97:d0:8a:16:d7:a9:
fd:af:2c:b6:ce:8c:66:67:2c:7f:f3:f2:c4:9e:4f:
d5:41:a7:03:9b:93:4f:5a:61:c5:32:46:4a:cb:80:
e1:d5:37:b4:4b:7c:36:2e:59:be:dd:77:b3:cc:2e:
06:0f:b0:cf:6d:85:a2:d0:a9:1c:a4:12:1f:5b:bd:
ba:55:be:2c:93:f0:ca:de:67:2c:0b:32:ca:9e:b7:
6d:a4:78:1c:a6:21:53:d7:66:c2:d0:c5:61:a0:76:
84:3a:4b:03:c8:38:e4:f6:31:16:95:15:7a:02:ac:
73:0c:30:79:c5:30:4e:c9:c1:20:30:80:e5:f6:b7:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:82:A5:0A:17:D7:BE:52:BA:59:07:D3:32:BE:42:40:A9:6F:4A:94
X509v3 Authority Key Identifier:
keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:dc:fb:b6:0c:c2:01:e1:cf:62:e6:39:44:7a:26:34:5b:16:
02:c6:0a:d0:29:01:3d:61:f3:75:fc:ce:08:f2:f4:da:aa:ff:
52:e3:08:33:78:47:9c:ed:c8:9f:77:bb:43:91:f0:b3:6e:39:
e5:ef:8a:1c:35:2f:1c:95:df:14:fd:ba:4f:a5:cd:ec:5b:c9:
85:3f:25:af:72:06:c8:41:51:b9:ef:b7:15:d1:fa:97:c9:87:
4c:27:99:8c:cd:43:51:fd:20:77:31:8e:2e:58:41:c4:fc:a4:
e0:60:e2:90:82:a4:94:1a:f7:0b:bd:7b:21:1a:ac:02:f5:8e:
9c:42:a6:b8:ae:b5:91:68:58:46:4a:20:26:bf:84:1c:ef:50:
9e:f5:75:3d:a9:f9:a8:87:51:89:a0:fb:14:24:40:db:b4:6b:
f4:89:b9:e6:0b:2a:d3:3d:c5:15:7b:8a:00:81:61:7d:e6:f7:
7b:43:0c:58:31:5e:e7:ba:18:3f:88:1f:9d:89:ef:d5:fa:48:
15:d1:96:51:87:af:c3:39:e4:9e:fc:d5:71:d1:86:14:b3:2f:
d9:7c:cb:bc:3d:b8:22:33:86:5b:c5:40:45:42:5f:a6:60:b5:
79:20:c1:15:55:46:61:67:bc:35:3e:81:da:ef:85:4a:53:34:
2f:68:81:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:01 2026 by rpki-client