Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/5d88b8-a7d2-4574-9db0-703fe54c0b35/1/AvN2EVMOqqlZbmjEZ7JTmSpM58M.mft
File: AvN2EVMOqqlZbmjEZ7JTmSpM58M.mft (raw, json)
Hash identifier: LSR4BDFQyZth8Gn0V+TkQlEQ0r52eFjIwL8gUHq0UWI=
Subject key identifier: 10:DB:F0:E2:EE:78:7E:01:28:48:6C:8E:DE:5F:D3:49:B1:AE:61:08
Authority key identifier: 02:F3:76:11:53:0E:AA:A9:59:6E:68:C4:67:B2:53:99:2A:4C:E7:C3
Certificate issuer: /CN=02f37611530eaaa9596e68c467b253992a4ce7c3
Certificate serial: 01A175151F5467F888E7F5A1090A133A1FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvN2EVMOqqlZbmjEZ7JTmSpM58M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/5d88b8-a7d2-4574-9db0-703fe54c0b35/1/AvN2EVMOqqlZbmjEZ7JTmSpM58M.mft
Manifest number: 30
Signing time: Sun 25 Oct 2026 22:01:20 +0000
Manifest this update: Sun 25 Oct 2026 22:01:20 +0000
Manifest next update: Mon 26 Oct 2026 22:01:20 +0000
Files and hashes: 1: AvN2EVMOqqlZbmjEZ7JTmSpM58M.crl (hash: Mw/yf/00HvgYNuZXuEcJ1jlbc1Ks0DVWIrx1eomUon8=)
2: JTOnlQRCrvTlkZ6vLnYF9lTRiKU.roa (hash: MwvmqSJJSWw0PBGTzywlFK2cPLnsMw/OAeiAKakQBt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/5d88b8-a7d2-4574-9db0-703fe54c0b35/1/AvN2EVMOqqlZbmjEZ7JTmSpM58M.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/5d88b8-a7d2-4574-9db0-703fe54c0b35/1/AvN2EVMOqqlZbmjEZ7JTmSpM58M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvN2EVMOqqlZbmjEZ7JTmSpM58M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:15:1f:54:67:f8:88:e7:f5:a1:09:0a:13:3a:1f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f37611530eaaa9596e68c467b253992a4ce7c3
Validity
Not Before: Oct 25 22:01:20 2026 GMT
Not After : Oct 26 22:01:20 2026 GMT
Subject: CN=10dbf0e2ee787e0128486c8ede5fd349b1ae6108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:0e:b1:7f:44:e9:e9:a9:2a:22:0a:3c:7e:
ca:84:a6:ad:99:e5:2f:7d:b9:20:6b:cf:54:8a:f8:
da:f7:b0:17:30:17:47:44:5c:a1:88:f4:eb:95:1a:
8e:cc:17:3c:23:bc:fc:99:c8:a4:9f:d1:50:13:d9:
cd:c1:8d:22:24:bd:c5:70:c7:8e:7a:e8:c2:81:0c:
0a:f7:3f:66:a9:9c:a9:ce:ac:d7:5f:57:09:2e:f5:
59:4c:2e:d5:55:1d:66:0c:88:92:0c:ba:3b:76:cb:
2b:01:5b:a9:cc:ad:dc:e1:06:bb:d6:87:fd:d9:83:
12:09:23:32:37:d6:2b:56:cc:de:de:af:b1:ac:de:
7d:85:9e:31:82:cb:52:c4:64:4e:75:12:64:a2:9c:
c5:68:22:72:5b:46:af:e8:4e:5a:4d:7e:67:cc:e1:
1d:b5:80:46:76:ef:34:de:cc:85:54:28:9d:4a:de:
27:58:48:9e:31:15:05:64:69:23:33:bc:bc:92:6e:
23:b2:ca:f7:fd:d2:68:c7:53:23:cb:2c:d6:c7:cd:
08:6e:ef:9c:2b:dd:b0:b2:af:e5:9a:12:06:b5:57:
aa:ab:0e:da:2d:af:64:49:49:bd:fe:ba:8c:7f:4e:
64:62:f2:a1:bd:e0:f6:b3:0e:f2:df:39:5c:02:bf:
44:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DB:F0:E2:EE:78:7E:01:28:48:6C:8E:DE:5F:D3:49:B1:AE:61:08
X509v3 Authority Key Identifier:
keyid:02:F3:76:11:53:0E:AA:A9:59:6E:68:C4:67:B2:53:99:2A:4C:E7:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvN2EVMOqqlZbmjEZ7JTmSpM58M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5d88b8-a7d2-4574-9db0-703fe54c0b35/1/AvN2EVMOqqlZbmjEZ7JTmSpM58M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5d88b8-a7d2-4574-9db0-703fe54c0b35/1/AvN2EVMOqqlZbmjEZ7JTmSpM58M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0f:aa:db:43:a2:cf:91:71:e2:1d:4b:35:23:e1:ca:8f:c2:
6e:8c:e4:00:4f:01:33:81:86:0d:c7:1e:59:7e:ab:75:ea:67:
5b:fd:c6:e1:0d:fb:ef:71:9e:30:ff:94:9b:76:7a:25:7f:b5:
7e:a6:14:48:f3:05:b8:e1:a3:3e:07:56:33:5f:27:5d:58:47:
1f:18:dd:fa:3d:21:f3:9c:31:80:8f:37:db:94:70:52:d0:b8:
4a:37:6e:78:3d:57:06:0f:49:22:b0:0d:78:b1:30:b2:17:40:
fc:e6:e1:3f:d9:9e:af:6f:5e:81:34:dc:ee:81:c3:2d:08:eb:
7f:bd:16:ab:13:fb:34:71:b3:29:8f:31:a5:fb:26:17:46:67:
76:7a:44:97:4b:06:d7:bb:be:31:73:15:eb:ce:97:5b:fa:d2:
d4:af:bc:0b:7f:20:f2:71:16:db:d4:ba:19:ab:3b:47:8c:7a:
a9:2d:d1:f6:7c:9f:14:b5:60:8b:b8:1e:ef:b6:de:2f:49:65:
27:20:b5:09:a2:85:8c:ed:f9:a8:0d:02:f7:33:db:5c:8b:de:
c6:72:42:b6:8f:a4:de:07:46:8b:62:fe:e2:60:d5:04:83:57:
f2:df:97:9d:a2:42:07:dd:9e:bc:2e:7a:06:04:08:f8:85:1b:
38:a3:34:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:16 2026 by rpki-client