Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier: buyifeSzsAFvZC96S4XOC5rS1O+moGhqIw/YGnGeUfQ=
Subject key identifier: 11:EB:4D:7E:48:BF:D1:BC:86:C7:4A:B3:61:13:90:39:41:05:3D:BE
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial: 01A004024B71D32DE73F683864711DAFE4B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number: 0527
Signing time: Sat 15 Aug 2026 06:00:54 +0000
Manifest this update: Sat 15 Aug 2026 06:00:54 +0000
Manifest next update: Sun 16 Aug 2026 06:00:54 +0000
Files and hashes: 1: A9rhd59_7voAjZbMragLA3ftrbw.roa (hash: jQKHOIkJndimLRm6Iut1TREkFlVZwkrcXKBUSUJBxdk=)
2: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: ZUyitJ2NVaUl1utL5sydUq2bc4YLRtPKkNjGo9cqEoU=)
3: ofJXmIsyK_jDudPiA8bDAQbKAlU.roa (hash: +olJpgKdSnPRSUcTlissuMFWoxiuQFVYufPs4uhUsXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:02:4b:71:d3:2d:e7:3f:68:38:64:71:1d:af:e4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Validity
Not Before: Aug 15 06:00:54 2026 GMT
Not After : Aug 16 06:00:54 2026 GMT
Subject: CN=11eb4d7e48bfd1bc86c74ab36113903941053dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4d:99:5c:42:7a:d0:b8:a1:dd:93:e0:9c:f1:
f7:8c:55:98:42:75:e2:78:d6:dc:2d:8b:89:72:4a:
3b:1e:b8:60:aa:a4:18:46:48:ee:9a:18:e5:53:a8:
74:6b:36:f1:e4:43:e6:6d:42:39:b9:b9:63:66:8f:
3b:bf:3a:f1:8a:84:f7:a6:d1:58:4e:42:c3:68:1e:
3d:a3:97:47:1c:79:16:67:23:59:61:d1:f6:d3:fc:
36:c3:55:4e:48:98:a4:64:ad:5d:92:38:d5:ac:c5:
53:90:3f:89:65:1e:04:d0:4e:64:b7:78:3a:f2:19:
ec:85:90:ff:da:94:d1:dc:9f:da:8e:2f:7f:3f:df:
c3:ba:91:56:3b:bc:af:32:dc:ad:c9:b7:8a:66:a9:
4e:f5:8a:0d:e4:a4:39:f9:20:88:50:d3:fc:81:49:
77:98:50:e1:f4:e4:be:1f:6c:37:7e:80:cf:37:e2:
28:58:2d:53:f2:6a:b2:ac:dd:61:86:be:b2:64:24:
2a:72:05:e0:04:13:57:d9:62:20:00:2a:ef:f7:83:
be:db:99:0c:99:c7:42:1f:56:1f:be:2f:59:8e:36:
7e:0e:f1:51:31:d7:e0:c2:34:47:25:9d:62:86:b6:
58:07:17:a6:22:36:e2:99:f7:e2:46:44:f1:5b:d7:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EB:4D:7E:48:BF:D1:BC:86:C7:4A:B3:61:13:90:39:41:05:3D:BE
X509v3 Authority Key Identifier:
keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e5:03:ba:3e:64:9f:1c:f9:61:6e:8d:ed:d3:13:2c:ff:d6:
80:75:d4:85:d7:1a:d7:46:80:ea:6f:eb:55:c5:d5:42:18:4e:
89:8f:52:d1:dd:63:f7:7b:83:7a:ea:f4:68:9f:6a:09:54:2a:
10:63:d1:df:5f:9a:b2:ac:4b:98:f3:e1:79:36:7d:0e:86:b9:
d8:c9:a3:ea:1c:ac:65:af:e0:28:e1:fb:93:bd:65:62:90:ba:
df:73:78:59:93:27:27:cb:f6:3a:cd:52:dd:af:14:6a:f6:9f:
50:48:77:35:b1:8a:8d:01:41:91:ea:49:77:b1:35:bd:16:f2:
28:4c:e4:2b:5d:1d:18:36:9c:24:ff:06:79:57:73:1c:03:bf:
f5:97:4b:0b:5d:05:0f:b9:fa:18:d5:5f:b1:1d:81:5c:3b:93:
79:f0:c5:a6:e1:b9:dd:da:85:60:04:74:ee:44:95:72:87:85:
85:1d:18:ec:ce:76:05:61:30:a2:e3:77:b1:88:b6:be:11:74:
b5:d3:2c:c5:cb:17:f8:47:e2:09:ad:6c:6f:ef:79:71:3c:bc:
f0:d1:86:27:bc:6c:8c:e0:d4:48:85:c9:9c:7b:31:bb:cd:41:
1b:ed:6b:6e:ce:0e:45:14:f6:1b:4f:80:56:af:83:00:61:e4:
24:9c:ce:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:43:42 2026 by rpki-client