Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
File: aVyQxtYzPUdic9L9bIg6oq2o0RU.mft (raw, json)
Hash identifier: mZPj+ySdc6LckQYuO/aagNicGmyfjfgfUfES7spC4fg=
Subject key identifier: F1:58:05:86:5B:0B:C7:2E:66:08:84:D6:87:26:3C:CD:08:27:BD:D1
Authority key identifier: 69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
Certificate issuer: /CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Certificate serial: 01A17BF309D739789418B9DF6072DFF93080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
Manifest number: 02DD
Signing time: Tue 27 Oct 2026 06:01:27 +0000
Manifest this update: Tue 27 Oct 2026 06:01:27 +0000
Manifest next update: Wed 28 Oct 2026 06:01:27 +0000
Files and hashes: 1: 6BKU6BQ0rm_dpv7UW41lofeDVAk.roa (hash: JSPR6ApMOGB4YeRrASVSoxpHimkIGb0YoSuAw+KKkoI=)
2: aVyQxtYzPUdic9L9bIg6oq2o0RU.crl (hash: ijkULWJabIxFn12DPIKegSxWJnElq0B5Xb8EH9HaGiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f3:09:d7:39:78:94:18:b9:df:60:72:df:f9:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Validity
Not Before: Oct 27 06:01:27 2026 GMT
Not After : Oct 28 06:01:27 2026 GMT
Subject: CN=f15805865b0bc72e660884d687263ccd0827bdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:6c:26:4c:68:b6:e7:57:97:ec:04:bc:ae:
b3:ae:42:aa:a5:b4:dc:f5:a1:53:e3:aa:b2:e0:8c:
c3:8d:ce:e7:9c:b0:82:af:a1:9e:c7:ec:14:5d:6b:
7d:65:95:ca:f9:1b:a9:07:f9:b1:a6:95:98:0d:3a:
23:28:b1:87:f0:02:fd:42:f4:97:b6:80:f2:ef:35:
87:27:e9:bd:47:1d:fe:21:80:ed:0e:af:a7:32:0d:
09:a2:9b:f9:13:4d:26:9a:96:d3:f9:cc:c6:93:92:
e5:17:7a:98:54:ce:e5:ce:42:5a:c9:ca:1b:6d:48:
3e:fd:73:2b:73:41:81:da:2d:f8:bf:48:8b:26:13:
cc:b5:b5:10:a5:8d:98:c2:97:69:dd:06:7b:97:74:
da:f4:b9:16:07:11:6a:19:37:77:40:ac:ba:39:cd:
de:d1:0b:d1:e3:8b:82:22:10:c6:65:e3:0b:2d:4e:
1e:8a:28:a8:ab:3d:e6:64:e6:ba:58:e2:51:7d:59:
85:07:6b:d2:69:67:1c:d5:1d:8d:8a:eb:0c:10:19:
d4:b2:5a:30:db:87:14:5d:6e:34:d2:1b:61:59:8c:
4e:33:01:f9:fa:c9:8f:31:df:41:c9:fb:2b:83:39:
f4:34:e6:22:4f:43:29:f5:f5:45:1b:c5:1f:f9:74:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:58:05:86:5B:0B:C7:2E:66:08:84:D6:87:26:3C:CD:08:27:BD:D1
X509v3 Authority Key Identifier:
keyid:69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d2:e4:ba:b9:4d:de:32:88:8f:35:57:3c:53:1c:19:9b:42:
d4:3c:63:a9:a7:34:2f:ae:5e:7a:c3:86:b8:57:57:71:96:2b:
4b:a4:e3:0d:57:01:d3:65:0e:d4:5a:81:b2:66:a1:a5:c1:c6:
81:1e:6b:6a:11:82:85:ff:1b:f2:ba:62:a6:6f:c8:ae:0e:2a:
06:76:9a:7b:52:70:0f:9c:77:d0:9a:7f:4d:c7:88:45:99:51:
fe:7b:17:1d:f5:6d:f4:a1:42:39:f9:fe:0c:90:cb:89:b0:45:
91:7b:fd:18:18:96:58:a3:da:e0:96:6e:d1:c3:9b:87:62:64:
d6:82:12:20:c9:73:fe:5b:67:16:d5:4b:d9:07:c3:04:d3:5f:
17:54:df:74:c2:68:dc:63:1c:91:80:87:48:fd:54:da:d5:22:
04:95:e3:a4:a1:9d:cc:90:0a:11:db:48:a4:0d:af:b0:be:f5:
1d:b7:db:9b:1e:a2:39:15:c8:a9:fd:98:1d:25:e5:85:69:af:
85:9c:be:81:a1:db:3c:55:04:6c:98:74:06:94:dd:a3:1a:be:
9b:9d:09:6b:4b:ac:15:f7:85:94:a4:c7:94:cf:67:e4:94:7d:
08:2a:47:1d:75:37:2b:82:18:7f:9c:be:17:cd:5f:3d:68:94:
32:75:ec:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:22:21 2026 by rpki-client