Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: uyldy7xgksU6T02VW7xY8by2LiRJXKX9XxNxfDcdaHo=
Subject key identifier: 33:3F:1C:A6:40:99:BB:D6:7C:E1:92:F5:39:53:84:9B:82:E7:27:94
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 019EDC1B8434A986F946E35EBAB1AA97EFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 088D
Signing time: Thu 18 Jun 2026 19:00:51 +0000
Manifest this update: Thu 18 Jun 2026 19:00:51 +0000
Manifest next update: Fri 19 Jun 2026 19:00:51 +0000
Files and hashes: 1: ao-j9y2eNyjzBF-56aZku4fCkqU.roa (hash: jH5V+oJ22nO5z/wTNW5PeTwWZKC2MlE64btkDmNQ5Vc=)
2: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: yosc2wr3/939BXVoxnPfyZ9aty45Oq0VbJQmAOMzksw=)
3: sXRIKDkocbyTzm_GTL7N5qzTlQA.roa (hash: Zqly+CyY2Doez5dPu8qN77QPc5JqqNkgXWgjtCg+Bfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:1b:84:34:a9:86:f9:46:e3:5e:ba:b1:aa:97:ef:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Jun 18 19:00:51 2026 GMT
Not After : Jun 19 19:00:51 2026 GMT
Subject: CN=333f1ca64099bbd67ce192f53953849b82e72794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:22:f3:42:a0:b0:33:13:2c:12:16:c9:ea:
da:e6:72:35:1b:ae:9b:43:38:45:e3:99:8c:01:64:
31:12:ba:b5:6b:1b:89:85:60:1a:1e:da:68:0e:3c:
8a:73:92:f1:2e:fe:56:f4:06:71:24:df:82:7b:8a:
2b:6b:e7:27:bf:aa:1d:f0:c2:23:bb:3f:15:ff:ea:
99:a1:72:ee:fb:38:86:cb:b5:71:b1:b9:df:7e:9d:
2a:75:5c:47:4f:53:e4:3e:88:db:32:cb:83:ee:54:
cc:c0:c8:67:83:ee:9d:db:ec:fd:82:6e:f6:81:0a:
2a:ce:a0:8a:5e:9e:e7:1a:cf:85:e6:d5:5e:5b:8a:
32:6a:eb:31:00:15:ee:9a:b3:fd:57:1c:4a:2a:0e:
77:e2:f5:51:ac:4d:89:7a:40:85:01:d5:d7:7a:4a:
0c:90:a2:cc:d7:0d:9c:c3:39:fb:1b:e1:19:66:47:
d9:1c:84:e7:57:1a:06:4d:20:4a:a9:9b:24:24:8e:
da:a6:6a:97:49:c8:2e:b0:b0:91:a0:6e:22:1c:eb:
98:eb:fc:7e:26:33:8d:2d:a8:50:f3:5e:0e:cc:de:
d0:ba:10:38:95:d2:69:c4:3e:b0:22:1b:f9:90:93:
c0:a5:b0:53:3b:41:06:d8:e5:33:02:af:0a:b1:fe:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3F:1C:A6:40:99:BB:D6:7C:E1:92:F5:39:53:84:9B:82:E7:27:94
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:47:71:48:5a:5c:57:f5:90:67:f9:22:45:71:c9:2e:41:4f:
64:dd:84:9e:db:34:ff:25:0f:2f:93:46:9f:24:cc:e1:e0:07:
f1:39:93:e0:3d:9b:39:dd:b4:18:92:62:f3:0b:f8:48:48:ee:
aa:7f:75:7e:1d:2a:e4:47:3e:79:81:82:c1:09:2f:96:06:c3:
ab:a9:f0:a0:b9:49:83:da:f4:7e:f1:9e:f3:ac:fb:12:65:6f:
f3:71:a9:7c:ba:23:40:9b:26:cb:58:b9:7c:7e:ee:ba:d3:fd:
f4:df:82:af:0d:03:68:36:94:2a:6c:e1:63:0f:0b:66:c7:32:
75:e5:3c:09:8b:48:8f:c3:9e:15:fb:f0:67:87:88:4f:fa:cd:
48:c7:c4:c4:62:34:fd:c9:42:37:21:4d:f5:9a:5b:b8:f4:5b:
4c:5f:d5:a1:10:fa:39:12:f9:a3:e6:1c:00:41:b0:4c:dd:1d:
0f:21:78:57:56:5d:fd:7d:1a:1b:f8:18:8f:36:87:36:64:04:
7d:f7:35:3b:d4:6f:f3:10:b8:2b:e3:58:ca:86:77:67:ad:ac:
4f:74:3d:5d:bd:4d:6b:10:85:0c:1e:58:b2:25:56:6a:52:d7:
78:4b:fe:1b:3a:4d:ed:f8:a7:fa:e7:00:da:6c:f7:af:9f:7b:
f3:92:52:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 03:39:55 2026 by rpki-client