Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
File: avL7pFrWUxpj0XNQFPaZgH9H-9w.mft (raw, json)
Hash identifier: LPIrr+yCTWZcmDEAq2cC6T58/wKl2RqMf2mJAesjIak=
Subject key identifier: BB:59:D4:3B:5E:91:A2:76:FF:48:6A:14:EC:93:B7:1D:CF:A0:25:D0
Authority key identifier: 6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
Certificate issuer: /CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Certificate serial: 019D39417ECFBA9D012DABC29C22EBD76739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
Manifest number: 08B9
Signing time: Sun 29 Mar 2026 11:01:26 +0000
Manifest this update: Sun 29 Mar 2026 11:01:26 +0000
Manifest next update: Mon 30 Mar 2026 11:01:26 +0000
Files and hashes: 1: avL7pFrWUxpj0XNQFPaZgH9H-9w.crl (hash: WsvYn4qTDhvXgSombhvwB3IjU/xLhgptP3d0zudmDDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:7e:cf:ba:9d:01:2d:ab:c2:9c:22:eb:d7:67:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Validity
Not Before: Mar 29 11:01:26 2026 GMT
Not After : Mar 30 11:01:26 2026 GMT
Subject: CN=bb59d43b5e91a276ff486a14ec93b71dcfa025d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:e6:f2:07:35:24:59:f6:4e:99:86:c1:48:
9c:5d:bc:2e:39:49:6a:96:6b:2a:84:70:b1:ca:76:
b9:91:31:6b:f5:67:05:4e:09:15:6e:61:b6:e8:f3:
dd:0a:2b:6c:3b:f5:b5:28:89:1e:b0:55:8f:38:c5:
ab:23:a5:17:fe:7b:0d:c2:b2:96:77:dd:64:5f:65:
38:05:31:0b:e7:e9:d0:f0:45:00:1c:ec:20:11:63:
c6:6b:2d:9b:b5:58:50:5f:d0:ff:8d:5a:33:73:d5:
18:b3:17:92:a4:0f:b1:b6:60:6c:11:91:d3:84:88:
1c:76:3f:b4:dd:89:e8:8c:72:67:a9:97:47:ee:c7:
3c:50:a0:27:d8:5c:18:50:3f:23:d8:10:d9:02:2d:
93:f6:a3:4f:1d:ed:37:2d:47:64:3b:02:c3:d3:11:
56:fd:66:a1:37:45:ca:32:b9:0d:25:a2:7a:95:94:
ea:f4:fd:ad:64:19:35:e8:47:07:0c:f7:44:9b:5a:
1e:f0:6c:2a:1b:bd:18:8a:0f:db:05:32:8a:7a:60:
7e:a6:10:8f:3c:2d:68:3f:6e:55:a6:43:da:9f:44:
21:65:08:f3:cc:e7:7d:c9:4a:aa:3a:7b:3c:93:ba:
65:58:b7:2e:43:c2:bd:3f:2a:26:fc:e1:00:04:3f:
78:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:59:D4:3B:5E:91:A2:76:FF:48:6A:14:EC:93:B7:1D:CF:A0:25:D0
X509v3 Authority Key Identifier:
keyid:6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5e:83:80:1f:d6:f7:90:42:1e:21:ce:8c:70:44:ff:68:9b:
31:6e:bf:9f:b8:f4:7c:76:10:a9:5a:87:09:b2:99:2b:1e:46:
ae:94:c6:30:41:53:65:20:10:66:d8:b3:67:6b:8e:0a:e2:24:
76:6e:06:27:22:49:e6:e3:42:e5:30:9e:e3:80:a2:77:21:b3:
79:77:8b:38:75:bd:e8:da:ab:d6:dc:a6:b2:91:ed:b3:f6:4f:
3d:ba:b8:ea:bc:82:35:01:5b:a8:f1:60:33:0f:9a:aa:02:43:
b4:89:7a:41:b5:58:57:8f:d0:71:48:4e:15:46:26:e3:ff:cb:
2f:47:be:94:35:38:1e:5b:eb:6f:a9:da:bb:d3:a5:f9:95:2a:
3e:e9:c0:31:a8:36:f1:b8:e1:33:ed:1f:d8:d4:0d:87:59:80:
ad:5f:de:ec:79:ee:6c:8c:0e:43:ee:b0:25:a3:b0:c0:bf:ff:
bc:de:54:25:28:25:24:cc:32:dc:b6:24:e2:51:79:4e:64:6d:
53:18:72:e4:a0:6d:c2:43:b7:1c:5e:ad:3b:81:e9:2f:22:7b:
26:09:35:9a:d3:7b:e5:ec:3b:9c:9f:89:16:57:aa:ea:0f:d4:
4b:3c:c5:74:a6:50:1f:bb:1c:ca:6c:1e:ce:5f:cc:ec:b0:13:
8a:d0:fe:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:12 2026 by rpki-client