Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
File: avL7pFrWUxpj0XNQFPaZgH9H-9w.mft (raw, json)
Hash identifier: 0DYKWl527yoqSuNiACMkUNpKWJeSxQwyk16WqS4iXHg=
Subject key identifier: A9:1F:08:22:1A:A8:E8:15:00:60:C1:73:FE:9F:D4:44:2B:FC:9D:AB
Authority key identifier: 6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
Certificate issuer: /CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Certificate serial: 019F126537EF766F600BA4DCDB2DF028101C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
Manifest number: 09AF
Signing time: Mon 29 Jun 2026 08:00:51 +0000
Manifest this update: Mon 29 Jun 2026 08:00:51 +0000
Manifest next update: Tue 30 Jun 2026 08:00:51 +0000
Files and hashes: 1: 1LA-pOZoA1tm-AvQur9VCLqaFes.asa (hash: mtqiDgdC7wzQ/w6E+BKecLxFnmJqkZRjGx3+QKxgnv4=)
2: avL7pFrWUxpj0XNQFPaZgH9H-9w.crl (hash: xUJwia3B2FvNDSPjt+2Q1p6NnBLAKckJ/HgTutKc1no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:37:ef:76:6f:60:0b:a4:dc:db:2d:f0:28:10:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Validity
Not Before: Jun 29 08:00:51 2026 GMT
Not After : Jun 30 08:00:51 2026 GMT
Subject: CN=a91f08221aa8e8150060c173fe9fd4442bfc9dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:a1:6b:8d:92:18:1a:56:8b:35:e7:5a:24:
ef:6a:83:59:96:8b:b5:2e:52:0c:cb:d2:8a:a5:1b:
76:4b:1f:b1:ec:22:b4:9d:93:1e:85:d3:33:22:4a:
be:e1:ee:0c:b5:67:fd:f1:b2:be:fc:52:04:67:9f:
6d:02:43:94:be:5c:cf:ec:32:b6:bc:56:b3:77:52:
ae:a4:d3:bc:ad:87:4c:87:16:2c:7e:99:f1:61:f7:
84:d7:c2:3f:a2:15:26:da:30:1a:0e:f9:1b:eb:c4:
51:df:56:92:2b:cd:e3:2f:bd:eb:e0:22:6b:24:1d:
14:8c:73:88:b2:d7:83:33:95:11:26:60:b1:c5:cb:
de:f2:25:63:49:91:23:5e:48:73:dd:ab:21:52:c5:
65:74:e6:e3:21:68:b5:ef:31:2c:51:6a:0a:6a:16:
a0:b4:0a:bc:fd:db:76:03:0b:fc:0a:f5:04:42:f7:
b0:e6:7e:56:43:99:5d:f8:28:53:a7:1b:a7:4a:74:
dd:d0:a6:1a:39:5d:84:4f:e2:bb:94:b4:13:cb:71:
b4:b2:4a:76:e0:00:fe:aa:d6:c7:c7:4e:1a:a0:2d:
da:92:a6:f5:8f:d8:0a:92:d3:eb:40:7b:ee:14:b5:
2b:de:47:ed:11:a2:92:00:6f:9c:7b:b6:69:eb:3c:
cd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1F:08:22:1A:A8:E8:15:00:60:C1:73:FE:9F:D4:44:2B:FC:9D:AB
X509v3 Authority Key Identifier:
keyid:6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:46:89:93:76:fa:58:16:ea:66:9e:34:13:3d:db:b0:2c:0d:
2e:b0:21:da:7b:9a:af:68:67:ee:65:9b:7c:26:87:c3:fc:69:
0e:1f:0c:d1:9d:aa:86:e4:65:00:cd:c0:ba:59:bc:35:08:67:
07:e4:e4:43:7b:d8:e1:34:48:e2:bd:bb:43:a0:e8:cb:f7:63:
40:4a:94:bd:b7:05:17:67:47:91:95:ec:04:7c:f5:f5:b1:52:
fb:a4:78:e9:9c:b3:43:c3:9b:44:ef:67:ad:cc:2d:91:f6:73:
1e:ae:74:48:76:48:c1:6a:4f:1d:e4:99:de:ca:fc:b6:47:e8:
e7:05:26:a3:72:3e:55:5e:b9:bb:a6:85:aa:d1:f1:2e:a3:88:
69:36:41:a8:3e:9d:0f:54:3c:46:d0:5a:96:21:c3:95:fe:f4:
75:c6:ca:53:e5:08:af:88:51:b4:74:96:4a:a0:39:80:44:f4:
fe:84:0f:4b:b3:43:1d:8c:77:9e:79:59:94:3a:03:d9:13:01:
03:ac:e2:bf:16:25:7e:4d:19:dc:45:a9:21:6c:96:d0:3f:4a:
f7:0a:cb:5e:94:76:02:80:bf:a1:38:9b:0e:bb:a0:60:ed:a8:
b6:23:c9:ed:38:cd:4f:cb:81:f0:08:44:59:54:6a:04:22:a3:
fc:13:5e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:34:39 2026 by rpki-client