Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
File: avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft (raw, json)
Hash identifier: /ROo1hxITVwJbZfFnHmCnxpoB5KT1Pzd9Jb3nd/lBbU=
Subject key identifier: 8C:D9:16:78:AE:9F:04:B5:55:08:4F:0A:B5:E4:8F:CD:81:F6:8B:3A
Authority key identifier: 6A:F2:A6:6A:99:71:E4:77:EF:FD:5F:08:87:A2:9A:2F:9A:37:4F:E6
Certificate issuer: /CN=6af2a66a9971e477effd5f0887a29a2f9a374fe6
Certificate serial: 01A168A2822C7771D4F15DA51F92094B2E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
Manifest number: 0134
Signing time: Fri 23 Oct 2026 12:00:42 +0000
Manifest this update: Fri 23 Oct 2026 12:00:42 +0000
Manifest next update: Sat 24 Oct 2026 12:00:42 +0000
Files and hashes: 1: 1-J4vNKUg5kTPF6XesrAZ4VjDX98.roa (hash: phX6owyDB4twltvk1dyR8ljZf5zcVZSNNxPOme7Wmno=)
2: avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl (hash: nVhyrPulqQMkjPf3YKcDn4Gb8VlQ1TfZdT7PkB89Hp0=)
3: dGbP3G7L_AfcaaypWrUahXw6VQE.roa (hash: nX44iiUCb4BIYGZwGIjq1mG40V7UM3XbGwpmF2vnsQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:a2:82:2c:77:71:d4:f1:5d:a5:1f:92:09:4b:2e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2a66a9971e477effd5f0887a29a2f9a374fe6
Validity
Not Before: Oct 23 12:00:42 2026 GMT
Not After : Oct 24 12:00:42 2026 GMT
Subject: CN=8cd91678ae9f04b555084f0ab5e48fcd81f68b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:e7:e6:28:d3:04:56:80:04:27:94:2b:03:
33:a2:76:20:d4:1a:11:55:42:e8:aa:c6:7f:5e:90:
90:aa:29:f1:95:0e:d6:05:fe:13:72:18:e9:fd:fb:
f3:44:62:79:47:7d:1d:48:11:7b:a7:b2:13:3f:d8:
84:64:37:64:1b:e0:ea:b8:63:7b:91:15:70:51:64:
8c:a8:d8:fe:a9:91:af:d9:f7:8e:01:e5:65:d7:58:
db:b5:c4:f1:45:21:2b:13:8f:6a:4b:6f:74:5b:5e:
cf:ee:03:61:4d:00:fd:f6:8b:af:c4:28:ba:8c:31:
f4:ad:2e:b1:79:5d:4a:f8:4f:a5:88:c0:56:a6:0c:
6d:da:7b:73:f2:6b:37:1f:47:6f:47:35:83:24:1c:
f8:d2:09:02:d1:c5:8f:d0:17:7e:72:5b:44:48:33:
21:66:56:52:41:87:2b:92:ff:60:5d:46:89:f3:68:
04:57:8f:e8:ba:a6:23:72:a3:de:79:2e:7a:06:92:
8f:a9:57:31:85:98:65:ee:24:56:24:da:ee:c2:f0:
20:26:2f:87:6b:b0:c0:5b:25:91:93:a2:a3:36:52:
51:ce:2a:16:4d:8f:1c:80:10:e9:39:77:a4:28:bd:
bf:64:4a:9c:6a:ee:65:2c:27:ee:c5:5d:cc:b9:ae:
b0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D9:16:78:AE:9F:04:B5:55:08:4F:0A:B5:E4:8F:CD:81:F6:8B:3A
X509v3 Authority Key Identifier:
keyid:6A:F2:A6:6A:99:71:E4:77:EF:FD:5F:08:87:A2:9A:2F:9A:37:4F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f3:05:4f:a7:dc:0e:57:7f:8b:0e:01:f9:2a:ca:ce:76:0f:
10:99:5a:1d:36:57:bc:ba:3e:af:bb:c1:f7:c0:0a:22:2c:bf:
81:9d:15:ab:63:82:3a:4d:4c:e9:04:46:c2:bd:31:fa:91:16:
9e:37:8e:49:e6:9b:b8:c1:8a:be:0f:6f:86:54:ce:9c:23:be:
43:8b:48:81:b8:43:96:cc:d3:f0:ef:00:3c:16:f9:e2:bd:dc:
a8:09:12:79:bb:1f:28:3d:91:cb:9a:f6:68:93:e4:4d:2e:9a:
a0:64:2d:7e:9e:e3:4f:d3:50:c4:cc:c4:11:c7:70:c1:4f:06:
c2:7d:01:f7:e3:8b:32:67:f7:7d:25:e1:a6:1d:44:42:75:bb:
5c:21:8d:1b:59:e1:d1:87:aa:8e:1b:15:29:65:f9:fc:7d:9f:
e3:a4:c7:b0:d2:e2:cc:03:1b:e6:33:6d:ba:10:1c:d1:fe:0d:
79:a3:80:7e:54:33:19:2c:2d:88:f5:82:86:df:32:32:8b:5c:
7b:e2:92:db:6b:68:44:92:89:7f:63:c2:d5:d6:7e:5e:ef:92:
e0:c1:89:a2:9e:24:e1:d0:ce:68:0f:08:69:45:0d:67:43:b9:
84:23:2a:7e:52:77:6a:50:b5:e0:92:35:61:49:35:b9:ec:5c:
ab:c0:f9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:41:42 2026 by rpki-client