Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: 9vzGcKScc+SpOESKoAIPJWkSHdTAYOeCMKgkXUs9Tv4=
Subject key identifier: AD:4C:D2:54:F6:67:8C:FE:D3:91:AE:FA:70:D5:8C:B1:A0:03:55:08
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 019D3909E811314CEBFC072F6201BF916307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 07B4
Signing time: Sun 29 Mar 2026 10:00:43 +0000
Manifest this update: Sun 29 Mar 2026 10:00:43 +0000
Manifest next update: Mon 30 Mar 2026 10:00:43 +0000
Files and hashes: 1: ao-j9y2eNyjzBF-56aZku4fCkqU.roa (hash: jH5V+oJ22nO5z/wTNW5PeTwWZKC2MlE64btkDmNQ5Vc=)
2: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: irca55VBTxonxH9t2Vdcz27s8c0rXvRIdG5sjmAPDPI=)
3: sXRIKDkocbyTzm_GTL7N5qzTlQA.roa (hash: Zqly+CyY2Doez5dPu8qN77QPc5JqqNkgXWgjtCg+Bfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e8:11:31:4c:eb:fc:07:2f:62:01:bf:91:63:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Mar 29 10:00:43 2026 GMT
Not After : Mar 30 10:00:43 2026 GMT
Subject: CN=ad4cd254f6678cfed391aefa70d58cb1a0035508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:5c:c8:60:e7:35:41:39:8e:aa:b7:c5:3f:
fc:b8:f5:49:d0:23:55:ff:e1:ce:99:a3:6e:be:53:
ec:9f:e4:c6:05:e2:f2:e2:a3:3f:0d:c0:bd:54:62:
c8:35:9d:01:6e:04:04:e4:c6:8d:8b:97:3b:5b:1b:
1c:f4:17:96:62:95:3c:bb:98:3f:ce:a4:fb:3b:49:
9d:02:2d:f5:17:cf:e8:c8:16:3d:7c:c6:d7:90:f6:
fe:f8:67:7e:12:07:11:97:a4:f3:7a:e7:d4:8b:15:
44:b8:61:95:28:bd:66:32:c2:ad:b6:38:3b:69:5b:
f4:90:5b:8f:64:27:96:4b:82:7b:76:77:ae:41:85:
7e:49:b2:a4:8e:e0:5d:17:0d:84:17:4c:a8:6f:49:
6c:b2:80:be:61:80:78:5f:24:98:cb:e1:18:db:12:
19:7e:42:51:01:94:4f:b6:ff:b1:5f:5e:c6:91:b9:
da:18:5f:8d:08:75:08:cf:77:bb:80:46:0b:0c:de:
7a:3b:11:36:6f:15:e0:f5:ae:02:dd:02:13:5d:00:
e2:24:d9:da:7d:19:ef:19:25:79:3f:a4:a3:64:0a:
38:3f:8a:c0:4e:66:63:8d:8e:44:4c:c5:d0:55:16:
ad:32:19:e4:5d:8c:30:c4:3e:8b:53:9b:6e:50:fc:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4C:D2:54:F6:67:8C:FE:D3:91:AE:FA:70:D5:8C:B1:A0:03:55:08
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:63:ad:f5:02:04:a5:d1:b0:8d:fc:18:1e:0e:53:ba:62:bc:
25:6d:8f:9b:ba:34:80:3f:37:a6:d3:ab:d6:11:ca:da:b4:8a:
03:ad:91:84:06:ec:d7:39:28:f7:1b:ee:7b:9c:08:e7:da:9f:
e8:24:b1:b4:47:c4:e9:2e:a9:f1:0e:d4:04:7b:fb:42:6c:38:
2e:78:66:6d:65:82:2b:2a:54:29:3e:d3:ca:ae:49:30:42:79:
e7:65:0f:67:88:ff:e7:a4:36:9e:9e:12:9b:ad:b7:85:88:c2:
65:8b:ee:b3:f9:d0:78:06:56:67:a5:e2:28:6b:1f:8e:15:c5:
df:7c:53:ad:07:ca:70:1d:79:e6:66:d4:d8:ad:8c:42:40:64:
0b:4c:c8:6f:57:3b:d4:a4:bd:99:dd:db:7c:f1:39:83:a9:04:
fe:0c:8f:0d:8b:20:86:2c:07:4d:87:8c:9a:3d:a3:0e:4b:76:
3d:92:3f:53:66:80:e7:a3:a8:45:26:fa:30:93:ec:bd:91:56:
7b:09:54:c3:57:c1:da:9e:0a:00:cc:6e:61:f0:39:46:ed:53:
46:f1:7d:42:ba:08:76:cc:f0:1e:37:c5:e0:8a:40:80:17:c8:
a2:41:30:0b:44:b3:44:4e:4a:a1:da:63:ee:3e:7e:af:d2:9f:
fd:7c:54:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:39 2026 by rpki-client