Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
File: AVz-48K26knSnhA-I6Uixi44UxE.mft (raw, json)
Hash identifier: ommi+tF9lkQhs1/LBSCrdTIuhh7rjC3ilgHdAFYBumY=
Subject key identifier: 7B:94:49:BA:BE:1F:82:26:9D:F5:43:77:A1:07:BB:5C:99:E4:F5:51
Authority key identifier: 01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
Certificate issuer: /CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Certificate serial: 01A000C9FC31C252CC16D1F4F63739C53B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
Manifest number: 1716
Signing time: Fri 14 Aug 2026 15:00:32 +0000
Manifest this update: Fri 14 Aug 2026 15:00:32 +0000
Manifest next update: Sat 15 Aug 2026 15:00:32 +0000
Files and hashes: 1: AVz-48K26knSnhA-I6Uixi44UxE.crl (hash: d1lbN/22v2S24gAeFBFFCce+kINrkq7/xbagkpk7flI=)
2: yiGu7GYVFl06PTOS15FwNMfxNOY.roa (hash: SBhefg3WhMmDzBzYzcHtIXjJbiTJDraUtRQdnjWSXSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:c9:fc:31:c2:52:cc:16:d1:f4:f6:37:39:c5:3b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Validity
Not Before: Aug 14 15:00:32 2026 GMT
Not After : Aug 15 15:00:32 2026 GMT
Subject: CN=7b9449babe1f82269df54377a107bb5c99e4f551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:a3:3e:f1:6d:b0:61:6f:72:3a:b5:c6:12:
fd:9c:a1:44:68:43:26:11:1e:e6:54:24:ba:73:50:
01:21:c8:4d:f7:f4:43:ad:e2:70:55:3a:19:27:b9:
d8:f8:8d:a5:8a:11:23:91:9e:85:9e:56:23:a0:d7:
3c:29:fd:60:e6:d1:73:45:f5:6c:83:23:e5:e4:21:
d5:0d:34:98:de:65:fd:cd:0a:5f:2b:f8:4e:02:75:
db:fb:f6:0f:9a:92:a0:8a:a7:da:db:94:ee:a2:d9:
6e:24:dc:1d:fd:10:be:17:77:78:f4:6d:c5:f4:46:
5a:0f:cb:06:c0:1e:b4:58:f7:a3:da:1e:4d:e9:20:
e4:f5:78:22:f2:a3:a7:ef:54:ed:9a:f9:cb:19:64:
d4:c7:28:e6:9b:a2:4d:d7:ab:26:c8:28:95:75:47:
c2:ea:54:93:ca:39:b6:86:52:fa:c6:c9:b8:97:22:
a0:7b:6e:6b:5c:b6:7c:84:15:c1:04:0b:a4:0e:1c:
6d:f0:7a:6c:a8:b9:7e:1a:90:d9:af:b4:b2:bc:87:
da:9a:68:89:4d:35:f9:e7:c4:4e:84:8f:78:69:d8:
21:42:f8:3e:26:d4:73:3c:5f:db:98:25:14:d8:93:
f6:7b:ac:3c:27:25:39:42:a6:97:66:41:7d:ed:d2:
c0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:94:49:BA:BE:1F:82:26:9D:F5:43:77:A1:07:BB:5C:99:E4:F5:51
X509v3 Authority Key Identifier:
keyid:01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a8:6f:92:88:65:3b:d6:f2:2d:1e:39:06:5a:7f:09:60:a6:
6a:b8:44:ed:0d:44:b9:2d:9d:90:dc:e5:15:aa:e2:0c:4f:48:
37:9e:83:a3:22:4e:56:39:40:be:de:5c:7a:57:8b:86:8e:be:
f6:74:07:89:14:df:09:f2:3e:aa:59:c4:4b:d8:ad:9e:e2:57:
b5:c0:77:69:00:81:5e:cc:e2:04:72:b3:b9:c8:42:d3:4a:76:
8a:c0:08:e3:42:48:78:dd:65:91:10:b1:12:c1:07:fe:b2:c2:
c6:a1:d4:ce:2b:b0:19:b9:9a:31:3d:3c:b6:c2:14:ea:9b:5d:
d2:e6:d4:6d:ba:88:bb:42:fc:f3:23:0a:c6:30:8c:8e:dc:da:
ee:92:bb:71:7b:42:2f:7f:f0:1a:7a:fe:c6:48:23:31:fc:12:
48:75:9a:bd:16:cc:9b:b5:bd:47:ad:0d:bd:b8:25:32:94:b9:
15:2b:28:04:94:79:e8:da:5b:5b:69:ee:8f:5d:0d:96:1c:ee:
f1:34:3b:21:46:5f:46:9f:96:b7:e9:78:50:0e:d7:b8:9c:c0:
80:8e:35:ce:20:65:14:87:fa:76:fd:e2:b7:7d:40:dd:f5:8e:
64:f5:37:40:30:7c:27:11:70:87:78:0c:3c:27:81:53:2d:a4:
1c:60:91:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:55 2026 by rpki-client