Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
File: aVyQxtYzPUdic9L9bIg6oq2o0RU.mft (raw, json)
Hash identifier: de41IOo/cwW1CJi6So4d/raF2sxXY3S9AfhIgWMmo9Y=
Subject key identifier: B5:2D:6D:2B:7F:91:C1:B2:00:75:F8:4D:F9:E4:8E:EB:90:29:58:27
Authority key identifier: 69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
Certificate issuer: /CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Certificate serial: 01A17FCF923B0EF6250E23DDF0B152D5C271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
Manifest number: 02DF
Signing time: Wed 28 Oct 2026 00:01:12 +0000
Manifest this update: Wed 28 Oct 2026 00:01:12 +0000
Manifest next update: Thu 29 Oct 2026 00:01:12 +0000
Files and hashes: 1: 6BKU6BQ0rm_dpv7UW41lofeDVAk.roa (hash: JSPR6ApMOGB4YeRrASVSoxpHimkIGb0YoSuAw+KKkoI=)
2: aVyQxtYzPUdic9L9bIg6oq2o0RU.crl (hash: LarwdoaJePdUls8ugMljEM5Wx/pthTwYOw2KMhpOSy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:92:3b:0e:f6:25:0e:23:dd:f0:b1:52:d5:c2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Validity
Not Before: Oct 28 00:01:12 2026 GMT
Not After : Oct 29 00:01:12 2026 GMT
Subject: CN=b52d6d2b7f91c1b20075f84df9e48eeb90295827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:22:34:83:7d:00:3b:f6:b6:a2:54:0a:15:
42:ac:de:e4:6d:92:25:18:4f:af:14:8c:0b:e9:6e:
3e:99:1f:a2:96:46:60:89:12:2c:17:fc:1c:26:25:
a1:87:01:b3:ac:b6:ab:1c:91:5b:bf:d5:83:50:c1:
ad:34:ca:fd:16:02:63:d6:5e:6a:2a:11:31:e6:0e:
ca:03:d0:d8:14:8c:cc:f8:b3:1f:c8:f2:cf:fe:e1:
ba:0c:23:9f:14:ce:01:89:3f:c3:7a:46:d1:c7:87:
74:b9:7a:75:da:33:70:4f:e7:a0:47:34:e1:cd:82:
07:14:3d:9f:6e:22:ed:80:e0:ce:cb:27:60:b2:a1:
e6:76:36:8d:88:e6:09:7f:a8:7a:21:e0:14:34:f7:
3d:72:de:5a:27:4e:ba:2a:48:01:3c:20:85:c1:98:
27:af:8a:29:28:19:6d:7c:4a:ba:35:79:b4:8e:bc:
1a:e7:83:52:39:51:de:21:0e:23:61:c3:d0:4c:9b:
52:cd:f4:dc:d4:ae:b3:92:0b:16:7a:ef:d1:e3:76:
c9:c6:c8:e5:39:de:c3:d8:c9:b5:ce:cd:ff:f2:41:
1f:46:b3:a1:c8:fb:d3:1d:29:69:04:aa:24:84:68:
06:83:0a:cc:82:36:ad:74:be:9b:ce:fd:ca:af:c0:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2D:6D:2B:7F:91:C1:B2:00:75:F8:4D:F9:E4:8E:EB:90:29:58:27
X509v3 Authority Key Identifier:
keyid:69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:93:e3:a9:30:99:f7:3f:c8:fd:13:06:2b:f1:5c:91:d8:e1:
e0:c9:22:2d:ca:69:5c:3e:2c:37:bc:0a:c6:f2:c9:ff:11:5c:
ed:0e:2d:5f:fc:9f:60:57:b0:a4:36:b5:e4:9a:7c:e5:34:41:
dc:ae:dd:40:c3:0e:53:37:5f:21:36:aa:ab:bf:04:2c:79:47:
62:e5:26:69:90:de:ff:c7:91:0a:6a:a3:68:57:ac:2b:7c:5b:
ff:37:4f:19:04:e5:64:62:72:3e:5c:84:7b:ea:6e:3f:8f:52:
5f:a1:5c:34:c6:17:86:f3:4f:fa:ca:99:54:77:2a:71:76:eb:
3a:0c:54:eb:9c:a0:8f:c2:9a:84:08:67:ad:6a:a0:38:54:13:
e0:12:33:f7:02:70:e9:dc:52:f6:22:c6:90:04:13:69:08:0f:
4f:70:71:d3:1c:9c:24:07:07:49:57:e3:ce:ba:78:62:b8:88:
8b:f6:1c:0b:03:2b:14:9d:d1:db:5c:05:c5:74:0b:f6:b4:7e:
2c:38:7b:05:35:fc:d6:85:1b:91:9b:6d:22:73:9a:2a:6b:af:
de:64:28:92:f6:2e:10:61:77:b9:c9:2d:fb:aa:a5:45:e4:d4:
4a:81:86:b9:61:e1:ee:20:08:36:d7:5a:a3:b7:e8:21:85:aa:
ca:b2:9d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:24:50 2026 by rpki-client