Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
File: AVz-48K26knSnhA-I6Uixi44UxE.mft (raw, json)
Hash identifier: 2SughTXkiA4bu1YQivKLd4eHP+xEA32vKhhOVtn9HDQ=
Subject key identifier: 00:F1:D7:71:45:F1:32:28:04:41:3C:E8:D9:F2:A2:B5:F6:F6:E4:3A
Authority key identifier: 01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
Certificate issuer: /CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Certificate serial: 019D382E6209C169479F5C0AB2F7980F914F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
Manifest number: 15A5
Signing time: Sun 29 Mar 2026 06:00:56 +0000
Manifest this update: Sun 29 Mar 2026 06:00:56 +0000
Manifest next update: Mon 30 Mar 2026 06:00:56 +0000
Files and hashes: 1: AVz-48K26knSnhA-I6Uixi44UxE.crl (hash: g9Y2C/Rj54zaGOpK8Li08db0uJISNgUrMR9XpOY9UWU=)
2: yiGu7GYVFl06PTOS15FwNMfxNOY.roa (hash: SBhefg3WhMmDzBzYzcHtIXjJbiTJDraUtRQdnjWSXSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:62:09:c1:69:47:9f:5c:0a:b2:f7:98:0f:91:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Validity
Not Before: Mar 29 06:00:56 2026 GMT
Not After : Mar 30 06:00:56 2026 GMT
Subject: CN=00f1d77145f1322804413ce8d9f2a2b5f6f6e43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:d9:48:12:86:f8:30:1c:8b:b2:37:04:7a:
ce:37:72:b0:9a:da:4f:0a:d5:c8:06:e3:3d:ba:5c:
e7:9b:18:d1:cb:f4:95:be:8b:c3:f3:36:90:40:ed:
a6:19:77:b2:99:0d:8c:32:9f:cd:2b:14:c6:83:87:
e5:b3:27:f2:88:6f:5b:91:41:db:eb:eb:0a:e8:55:
81:51:cd:aa:9f:12:37:df:73:71:df:b9:6c:23:06:
ae:f1:1f:cb:5d:45:77:bb:3f:10:2b:23:be:43:93:
ab:b2:de:d6:59:10:9e:90:3a:35:80:81:28:8c:a4:
6d:c4:17:f7:4f:9e:74:20:07:72:2e:93:80:6a:46:
86:c6:40:1f:9d:a3:66:e1:e3:89:7d:17:c0:0e:e9:
8c:c0:aa:df:45:d9:88:6b:0d:96:e8:38:59:be:e7:
88:63:c1:41:00:4d:d5:08:c1:62:71:3c:77:a0:d2:
b0:68:50:38:82:45:b9:dc:ca:f6:47:46:56:68:41:
df:22:cd:20:5a:59:ce:14:e2:58:fd:c9:06:53:4a:
2a:7f:a5:72:dd:9a:b6:a0:8d:d6:74:a1:7f:33:d5:
75:ce:d8:27:11:db:ef:64:65:57:1c:30:b4:f5:f7:
ba:4e:1d:32:00:58:89:ce:f1:45:07:b7:f8:78:80:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F1:D7:71:45:F1:32:28:04:41:3C:E8:D9:F2:A2:B5:F6:F6:E4:3A
X509v3 Authority Key Identifier:
keyid:01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b0:2c:50:9c:03:13:17:93:bd:83:08:8d:ee:80:d5:35:df:
d9:95:68:bd:a5:28:25:d8:a8:02:bc:58:e5:52:1d:93:f9:9a:
05:70:bc:07:e6:07:b4:c4:61:92:20:c9:04:76:76:35:5f:3f:
46:90:fa:43:18:fa:5a:88:7d:d8:c7:ea:53:ee:30:ce:28:69:
18:5a:e4:00:1e:c8:af:ad:49:c7:e1:2d:7a:e4:a8:df:9a:9f:
23:f9:31:fa:93:11:aa:06:45:a9:3e:24:2c:96:7b:70:df:a0:
37:e5:6f:13:af:2d:ae:44:bd:13:03:06:92:89:b9:cd:af:1e:
3a:d8:d2:e9:dd:fa:d6:db:cf:ce:50:f2:d8:11:20:79:1d:5d:
a7:9c:f5:e3:a2:f1:59:f9:56:a0:10:47:51:c7:5b:80:c6:82:
8c:91:72:97:13:8d:77:c1:17:a2:83:29:48:47:09:3c:6e:f7:
b8:b2:9c:6a:9f:b7:56:c2:95:08:a6:b7:f7:b2:85:51:66:aa:
ef:42:f0:7d:89:94:e1:96:57:09:07:6a:93:e1:e9:5a:37:bc:
77:15:e3:3f:4a:f5:e3:50:e1:dc:a3:59:a4:91:c9:2d:d5:52:
91:63:8d:82:90:7b:df:c2:32:b8:14:72:c5:4c:77:a8:4a:ac:
30:f2:00:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:36 2026 by rpki-client