Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft
File: AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft (raw, json)
Hash identifier: YTKSb0FlbJ9pohcPFdrCIpkyvMC5v2r0XcI5OErLq3M=
Subject key identifier: 2D:C1:4A:8B:AB:4B:63:C1:05:27:8C:6E:EF:84:9E:1B:77:63:97:F9
Authority key identifier: 02:F5:46:89:04:A8:AA:7D:DB:5D:42:9E:A0:5E:8D:31:87:36:44:19
Certificate issuer: /CN=02f5468904a8aa7ddb5d429ea05e8d3187364419
Certificate serial: 01A03FA9394F0A603CE2F28E37F3B9DBC206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvVGiQSoqn3bXUKeoF6NMYc2RBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft
Manifest number: 03BD
Signing time: Wed 26 Aug 2026 20:00:49 +0000
Manifest this update: Wed 26 Aug 2026 20:00:49 +0000
Manifest next update: Thu 27 Aug 2026 20:00:49 +0000
Files and hashes: 1: AvVGiQSoqn3bXUKeoF6NMYc2RBk.crl (hash: 44XKt18Lq+1dOnsSKA1YnKy8rkGs2r37G441tftRn/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvVGiQSoqn3bXUKeoF6NMYc2RBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:39:4f:0a:60:3c:e2:f2:8e:37:f3:b9:db:c2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f5468904a8aa7ddb5d429ea05e8d3187364419
Validity
Not Before: Aug 26 20:00:49 2026 GMT
Not After : Aug 27 20:00:49 2026 GMT
Subject: CN=2dc14a8bab4b63c105278c6eef849e1b776397f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:1f:dd:fe:59:ea:8a:98:c9:43:a4:83:06:
c5:6d:cf:50:b2:16:1b:1c:08:2e:50:e2:6e:c6:cd:
64:1a:74:15:1e:b8:a3:7b:9e:06:79:43:61:cc:7a:
74:dc:ba:12:f2:6d:d3:db:23:53:3c:94:30:24:78:
ec:fd:1f:66:87:65:3b:3e:4d:35:87:11:50:6e:eb:
c0:d5:c2:6a:d6:b8:00:16:71:79:cc:78:83:a3:03:
e1:ea:85:d1:95:61:24:7c:f4:73:22:e9:c0:96:88:
88:db:c4:62:72:d9:40:d0:b7:95:63:0e:8c:29:92:
00:ea:44:dc:08:20:8e:b8:4d:dc:6b:f8:1c:0a:fe:
ba:a1:2b:86:d9:33:b1:f0:c1:8d:d0:5c:a9:46:90:
0b:00:98:83:9b:df:f4:88:0d:2f:b5:80:96:7c:9c:
8d:59:95:d9:c6:78:a9:08:e7:9c:a7:ba:6a:3c:40:
d7:f3:48:d2:02:24:98:d8:98:84:98:94:07:8a:f8:
5f:e7:77:0c:60:4a:a1:81:27:3e:bc:c6:b4:2c:59:
92:bd:e8:57:27:f8:fa:91:b9:d3:5f:22:a0:4f:db:
cc:d4:0c:df:7a:a6:9c:f7:37:3d:bd:9a:f5:0d:fa:
42:11:5d:c7:7f:83:b8:ae:83:f4:91:74:8d:9a:20:
e9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C1:4A:8B:AB:4B:63:C1:05:27:8C:6E:EF:84:9E:1B:77:63:97:F9
X509v3 Authority Key Identifier:
keyid:02:F5:46:89:04:A8:AA:7D:DB:5D:42:9E:A0:5E:8D:31:87:36:44:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvVGiQSoqn3bXUKeoF6NMYc2RBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2b:d2:42:74:7b:ca:bd:56:a9:96:23:dd:7a:31:19:33:21:
a6:f6:93:25:5d:b1:40:ff:22:9b:54:f3:9b:3b:f6:11:90:d9:
88:53:2e:0e:be:bc:68:9c:d6:97:98:7e:0d:b0:2b:fc:95:b6:
bc:ed:a0:1f:81:09:4e:6b:e2:37:3e:93:6b:e6:4d:1b:36:65:
43:b5:71:09:e7:97:e0:a8:d7:bd:64:4a:64:59:8d:7b:91:ee:
5a:97:3b:15:7b:7a:35:34:a9:59:1e:89:43:c6:15:30:cd:7a:
9a:36:ac:9f:da:32:e3:3b:75:82:f9:04:0e:97:6d:e4:c8:b3:
4d:b8:53:67:97:95:8e:3c:98:50:5e:75:b6:cb:bf:f7:bd:23:
7c:e5:a3:1e:5a:d5:09:c2:37:7c:88:ea:01:90:68:f3:3a:48:
ff:c0:68:ab:eb:d4:e5:f6:c1:13:34:2e:cf:eb:91:23:4a:e0:
c1:68:98:28:86:4f:a3:14:ee:b0:04:d0:0f:d4:38:37:a7:0f:
67:99:f3:c1:7e:95:f8:ae:cf:4a:e0:53:4b:51:68:3d:74:64:
03:58:3e:7c:5a:9d:45:ba:89:a9:a2:07:65:3f:b0:c0:30:09:
92:f1:69:66:85:a4:e4:bd:53:b2:e7:8a:3c:72:37:13:73:64:
31:a3:38:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:25 2026 by rpki-client