Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
File: aVyQxtYzPUdic9L9bIg6oq2o0RU.mft (raw, json)
Hash identifier: EVckr/LODU09QrXy8rYl7zjSGCX8r00FB/dBYF3ZWWU=
Subject key identifier: A6:6B:C3:CD:0E:5D:F6:D2:5B:8F:E1:D0:AE:72:AB:E5:1B:EF:B2:BA
Authority key identifier: 69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
Certificate issuer: /CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Certificate serial: 019DCD876E4AC7978BF752C2CDE78362B722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
Manifest number: F5
Signing time: Mon 27 Apr 2026 06:01:38 +0000
Manifest this update: Mon 27 Apr 2026 06:01:38 +0000
Manifest next update: Tue 28 Apr 2026 06:01:38 +0000
Files and hashes: 1: 6BKU6BQ0rm_dpv7UW41lofeDVAk.roa (hash: JSPR6ApMOGB4YeRrASVSoxpHimkIGb0YoSuAw+KKkoI=)
2: aVyQxtYzPUdic9L9bIg6oq2o0RU.crl (hash: Z0IMO0zPFF/n8jXzhjifnsW2ULtODjBVMZpqcYz3Ud8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:6e:4a:c7:97:8b:f7:52:c2:cd:e7:83:62:b7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Validity
Not Before: Apr 27 06:01:38 2026 GMT
Not After : Apr 28 06:01:38 2026 GMT
Subject: CN=a66bc3cd0e5df6d25b8fe1d0ae72abe51befb2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:08:4a:d5:5d:55:bc:1e:98:67:0e:2a:16:
c0:51:78:9d:f3:96:58:88:ef:10:08:c4:02:76:85:
db:1b:fa:65:cf:c1:48:32:5d:99:49:8e:e2:b2:a2:
61:35:61:dd:59:12:ce:57:3a:d9:75:3f:23:68:17:
13:b8:82:0b:11:ab:4a:56:83:a5:77:31:c5:e8:da:
8a:8c:a5:91:fe:b2:a1:5f:6b:97:17:f0:a3:81:23:
fc:b2:ca:d7:d0:f9:1e:5d:7a:89:93:eb:a6:4b:d7:
b5:9f:ef:f1:33:9f:63:d1:cf:9d:48:1e:24:c1:4b:
a4:3d:0c:f3:54:e5:e0:03:43:b1:90:da:10:dd:65:
fa:12:8d:76:1f:7d:3b:6e:7b:d1:9c:48:e8:d2:13:
33:4f:62:25:3a:6d:64:53:d3:ca:6f:f9:d7:ec:24:
5d:12:27:df:34:dd:1c:92:46:e8:9a:89:da:58:75:
c2:4b:ed:25:c5:c7:11:59:26:b4:53:fb:c7:1b:be:
74:6b:ae:d4:5a:47:92:dd:89:78:b0:06:74:6b:7f:
00:b2:41:fe:e6:b2:72:61:20:06:80:43:3c:99:da:
10:06:12:1d:15:d4:62:33:69:5b:06:69:69:92:49:
1d:7a:48:6a:4d:65:60:1a:68:48:14:a4:2d:f6:29:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6B:C3:CD:0E:5D:F6:D2:5B:8F:E1:D0:AE:72:AB:E5:1B:EF:B2:BA
X509v3 Authority Key Identifier:
keyid:69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ff:55:16:1b:9d:f1:cc:b6:c1:44:5c:5b:de:2d:1d:d4:28:
15:a1:d4:c0:ab:0e:04:88:68:bc:d3:3b:f4:f3:63:a6:0f:a6:
ee:88:31:b1:30:cc:d3:35:3d:07:82:d6:c3:25:34:e0:0b:b8:
22:28:be:6c:e5:3b:f7:c7:d5:f9:85:ef:14:8e:0d:dd:4c:64:
a0:db:7a:b0:aa:c6:d4:54:ef:d9:d3:61:a6:27:0f:0e:ae:e5:
dd:6f:2e:cb:77:b0:4c:5a:a4:14:7b:4a:a4:1b:5d:f1:70:42:
1c:94:6a:69:aa:8b:27:a0:64:7a:18:a3:eb:1d:4b:65:eb:6e:
12:3a:d2:f7:82:2e:bc:e3:b5:26:7e:43:1d:2d:cd:a6:5f:34:
5a:50:3e:42:f1:92:5f:7f:31:50:e4:e0:2b:a3:ab:45:07:09:
ca:84:21:2c:3b:35:9e:6c:e9:65:c8:6d:e4:b3:e5:8b:d6:38:
80:fc:43:f3:ce:12:0d:ce:a3:9c:22:a9:40:79:97:48:79:14:
e5:bd:f3:31:c1:28:16:9f:d9:3e:d8:84:a2:8a:96:68:5d:f0:
83:49:8e:eb:3c:96:8c:89:72:bf:a5:c8:18:aa:9a:76:e4:88:
fd:79:1e:de:d5:0e:97:1f:f2:08:00:93:68:5b:72:0f:26:21:
f9:3c:ab:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:20:12 2026 by rpki-client