Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier: iIWxvDaPJW8oF7MMIOUCcB3VAL2eqanxU6VKvuL9vBk=
Subject key identifier: BE:BB:9D:17:D6:30:5B:F9:E6:48:54:D1:DB:F7:04:C5:56:7B:23:DC
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial: 019D3977E62FDFA838A43BBD7A07C9CCB448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number: 03B4
Signing time: Sun 29 Mar 2026 12:00:52 +0000
Manifest this update: Sun 29 Mar 2026 12:00:52 +0000
Manifest next update: Mon 30 Mar 2026 12:00:52 +0000
Files and hashes: 1: A9rhd59_7voAjZbMragLA3ftrbw.roa (hash: jQKHOIkJndimLRm6Iut1TREkFlVZwkrcXKBUSUJBxdk=)
2: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: OzPWBlvn0v/jDR/0x07kgFG2rddFHS04+QcsOF+4dbw=)
3: d9Ge2npzpsYZ4-H4VMZTmU7XIWw.roa (hash: gyeML4vxjWokwcPNE5B6qDQbqzNUghx/e5PMeQjFWBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:e6:2f:df:a8:38:a4:3b:bd:7a:07:c9:cc:b4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Validity
Not Before: Mar 29 12:00:52 2026 GMT
Not After : Mar 30 12:00:52 2026 GMT
Subject: CN=bebb9d17d6305bf9e64854d1dbf704c5567b23dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:91:20:86:53:8a:03:26:91:aa:93:8b:6a:
dd:75:74:35:8d:ed:b7:f6:6a:e4:ed:d2:cd:27:f9:
90:4d:0b:01:ab:1e:7a:79:39:ae:3e:9c:17:37:cd:
2a:ac:68:cd:0b:7d:84:76:a7:4b:95:2f:e4:35:fc:
99:9e:40:0d:94:32:6e:48:a3:f5:27:44:ff:0e:68:
23:41:f7:90:d5:a2:29:fe:8b:12:05:20:b7:fa:bb:
a9:57:45:cc:62:f4:68:48:07:2f:5d:41:0f:c3:82:
2d:3a:07:dc:92:68:44:c9:7f:c3:d8:e8:73:91:f2:
c5:9a:17:36:7a:6d:f3:bb:89:f3:b6:31:3a:ec:fd:
39:b5:7c:c1:23:23:9d:4d:62:c6:e5:70:2e:74:3e:
08:36:8c:45:02:ad:01:98:e7:e6:ff:ed:90:42:3d:
13:5b:f5:ce:7f:52:94:17:59:3c:90:fb:fb:5b:7d:
45:4e:14:53:50:1c:7e:d0:df:c3:73:6c:da:40:d2:
0c:b7:5a:7c:a9:42:a6:09:e7:c9:e0:e3:72:39:ef:
1d:57:0e:85:89:60:a1:09:7f:62:85:73:db:50:fd:
d4:aa:67:f5:c3:d3:ff:3d:7f:69:2d:e0:5a:8e:c7:
fe:0f:8b:b2:5c:f2:00:dd:66:5a:5f:e9:1f:af:0f:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BB:9D:17:D6:30:5B:F9:E6:48:54:D1:DB:F7:04:C5:56:7B:23:DC
X509v3 Authority Key Identifier:
keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:49:fb:6c:fa:c7:f4:8b:3e:a1:e9:7d:a1:80:dd:98:e2:43:
91:72:0e:3c:ad:71:94:82:90:1e:3b:04:b3:5a:d8:04:37:29:
95:ee:eb:4c:82:60:79:4b:89:cb:a5:ac:3d:1c:89:df:63:9a:
7e:c3:dd:33:3b:51:02:c3:08:d9:37:42:5d:f8:ce:78:39:db:
3f:33:63:14:87:3d:d5:72:09:7a:5b:eb:33:22:01:5f:fe:74:
61:f1:32:73:ad:47:76:b9:82:9b:89:db:e7:53:77:88:5d:67:
f2:01:d7:24:2a:f3:b7:0b:2b:49:ee:61:06:76:f4:b3:bb:94:
d3:37:e8:48:0b:e7:f3:ad:84:f5:f0:d3:43:6f:9d:ec:84:a2:
be:1d:35:5f:a2:1b:4a:77:50:2c:22:3c:41:3b:c0:53:ce:4f:
2a:52:76:b5:e9:fa:cb:cb:a3:49:d6:65:ad:7d:b5:39:56:dd:
40:8a:4a:4f:b8:3e:cf:85:72:15:0c:91:e9:45:f3:f0:3e:7d:
93:87:ed:e2:4d:e0:31:54:60:13:96:65:62:ca:fc:94:05:b1:
f2:93:cc:94:7a:6f:89:55:f7:13:b4:75:57:a7:64:56:34:15:
95:2a:66:87:e6:ea:54:d0:bb:32:88:29:1a:ff:3d:e5:de:22:
8d:8a:1c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:51 2026 by rpki-client