Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
File: AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft (raw, json)
Hash identifier: 08i59Ps4AGe89EJEJEwftQtxe5lBvr6v15m0Aa5ezTE=
Subject key identifier: E6:79:F5:24:1E:B8:D8:B5:0B:33:28:E6:EF:31:EB:B2:8A:C3:81:AB
Authority key identifier: 01:5D:E8:9C:2A:8C:2D:4D:E8:1A:43:67:5C:15:E5:43:EA:A1:70:E9
Certificate issuer: /CN=015de89c2a8c2d4de81a43675c15e543eaa170e9
Certificate serial: 01A0404E2D117FC212D5DDB778A1A53F13F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
Manifest number: 0260
Signing time: Wed 26 Aug 2026 23:01:00 +0000
Manifest this update: Wed 26 Aug 2026 23:01:00 +0000
Manifest next update: Thu 27 Aug 2026 23:01:00 +0000
Files and hashes: 1: AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl (hash: PzJiwuxgEBtyt/vLvWQ8M2UVid0ZV8XMGmwp+TWV524=)
2: mwJT56lh20lnnPNb2evS5T-qWow.roa (hash: JKi1qoZgs72wB/QUa1LelaEM2vIQZNp7ROnLWSEumqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:2d:11:7f:c2:12:d5:dd:b7:78:a1:a5:3f:13:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015de89c2a8c2d4de81a43675c15e543eaa170e9
Validity
Not Before: Aug 26 23:01:00 2026 GMT
Not After : Aug 27 23:01:00 2026 GMT
Subject: CN=e679f5241eb8d8b50b3328e6ef31ebb28ac381ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:a0:dd:f3:68:ce:b5:37:da:f8:39:c3:62:
84:ec:ea:a5:d1:e8:81:dc:f0:a3:36:35:ae:32:69:
ca:02:25:7a:d0:46:9c:6c:1c:42:24:98:4a:0d:af:
69:7d:51:e1:4a:41:89:6e:9b:dd:2a:e8:dd:72:c9:
b9:7f:80:e6:d8:2b:bd:00:ce:ab:09:07:d1:8b:ef:
5a:48:3f:f7:13:81:c6:0b:9d:42:94:de:39:1e:b2:
10:5b:98:97:4e:db:18:43:b2:7c:23:c6:7d:b2:8d:
0c:ff:7c:1d:5e:0f:03:d4:b1:ee:6f:92:4c:91:bb:
87:a0:62:94:e7:70:1b:77:4e:40:fa:97:90:bb:14:
da:a9:60:3a:2f:f3:66:9a:3a:c6:da:a0:4a:29:b9:
6a:77:16:73:1d:21:af:23:d2:3e:5f:85:38:54:10:
5a:fa:e2:6a:3a:a1:eb:a0:e2:7f:87:a4:f7:95:94:
1d:a6:7f:4b:e4:2e:3f:ee:ac:92:d4:0b:1d:df:f0:
db:9c:d5:43:91:c2:2e:0e:3a:7b:ab:84:a1:9e:bf:
05:3d:32:18:2a:89:2b:91:ca:fd:69:93:a8:de:2b:
9d:4d:79:b4:49:04:d7:24:63:d8:da:ee:ee:fa:87:
43:7d:ba:48:b3:18:e6:13:0e:0c:b6:30:fe:9f:db:
2b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:79:F5:24:1E:B8:D8:B5:0B:33:28:E6:EF:31:EB:B2:8A:C3:81:AB
X509v3 Authority Key Identifier:
keyid:01:5D:E8:9C:2A:8C:2D:4D:E8:1A:43:67:5C:15:E5:43:EA:A1:70:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:81:98:38:f9:9b:9b:1d:df:3a:5e:e9:24:8d:1f:9a:29:af:
a4:f8:74:57:2d:2d:aa:e0:73:9f:3a:69:c7:52:12:f0:0e:fe:
6d:75:0f:7b:bc:88:71:2f:e4:48:db:6f:ce:67:2f:61:db:c5:
e9:ae:08:0e:86:8d:d6:db:01:4b:49:df:8c:5b:30:50:b5:99:
73:23:88:41:c5:f2:6d:bf:05:fd:f8:ee:b8:3f:eb:4a:98:21:
8b:4f:94:7a:83:a2:24:a5:d2:55:97:03:0c:94:cd:75:af:7b:
6a:0b:99:91:f3:30:eb:ca:b7:97:e5:88:bc:6e:bb:6b:a4:4b:
88:96:d6:89:8a:bd:54:47:a9:5b:4a:27:a5:95:5b:37:f5:c9:
e9:8d:c9:25:4d:41:5b:9d:bf:8f:35:3a:45:b0:08:8a:dd:aa:
97:7b:70:e4:d8:42:ae:7d:58:eb:ec:dc:1d:c3:c9:90:4b:d6:
2c:cd:f4:54:66:a8:2a:d0:79:a3:1b:ad:24:4d:d0:78:52:df:
bf:bf:de:af:bf:a3:cd:ea:f7:da:e7:d1:f9:30:95:e5:bb:e3:
ca:4e:bb:89:10:32:4b:c4:c5:7e:a8:7e:6b:a9:9b:d3:4a:3b:
ac:89:f1:df:3f:db:a5:c2:18:9a:94:8b:6a:b6:75:51:67:3c:
77:21:e8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:35:07 2026 by rpki-client