Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier: vpNBJ5pV+5hKDknzuD4mYjeOAX6Z0rdh0VNmWYhEef0=
Subject key identifier: F1:2A:66:88:B5:D4:A9:C9:8D:C7:AE:2E:E6:03:4C:FD:12:D8:BB:BA
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 019DD0BE57D72AE02D3ABB221FF4B9D6F20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number: 13F3
Signing time: Mon 27 Apr 2026 21:00:28 +0000
Manifest this update: Mon 27 Apr 2026 21:00:28 +0000
Manifest next update: Tue 28 Apr 2026 21:00:28 +0000
Files and hashes: 1: PrGwU2TW-rYM4XlKNokSqvhickE.roa (hash: fwpVBF6tUhobxteId7IZ9kM2ae4pupPUogMY1BLAryM=)
2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: Wjy84c5Rtq1ngMWiFxFJURZejb5TL8zNey2tI5i+Sog=)
3: dbor2V1CZeSh-DsNvUTjnrohp5k.roa (hash: ThyL23NfAVtNK001dI1v2bX0HhRJe3heaSpGsGvlJC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:be:57:d7:2a:e0:2d:3a:bb:22:1f:f4:b9:d6:f2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Apr 27 21:00:28 2026 GMT
Not After : Apr 28 21:00:28 2026 GMT
Subject: CN=f12a6688b5d4a9c98dc7ae2ee6034cfd12d8bbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:0b:1c:1c:e8:fa:8b:f3:73:ee:ad:c0:45:
09:a6:f8:3f:77:11:33:85:dc:90:e8:41:f1:86:63:
40:5d:e7:72:da:79:06:6b:84:e5:5a:10:2d:ec:1f:
65:2e:43:57:fa:2a:a9:1a:6f:aa:f9:07:59:ac:2d:
ba:ee:3f:af:45:8b:47:87:0e:b1:32:5d:70:a8:8b:
be:9d:d0:4c:62:34:0b:59:a5:4c:92:6b:f1:2c:6c:
32:0f:7e:b9:d1:9d:1b:1b:38:c4:a6:bf:98:5d:64:
89:b5:95:a2:75:02:14:60:e6:a1:b1:b9:2e:c0:57:
43:35:4a:4b:78:41:86:ff:a4:d1:fa:38:11:b6:72:
c0:de:f6:fd:0c:6f:d2:77:66:08:c9:29:6d:3e:91:
22:65:bf:b6:82:c2:94:2a:4c:4b:fd:04:57:a4:4e:
b4:65:d7:c7:5e:cf:69:73:9e:ba:9c:6c:ee:75:a7:
e7:7c:b2:55:27:bf:6b:5f:09:90:e5:ea:a7:62:9a:
c6:f8:2d:67:dc:9c:31:40:65:1c:51:4d:9b:ca:97:
91:76:83:7d:d8:b4:a6:b5:fd:5d:20:0c:3a:cd:eb:
1e:a3:bf:c5:11:5d:8b:71:48:cb:a9:bf:19:3f:2c:
2b:a6:99:f5:4a:11:6e:44:8a:97:0c:04:12:65:02:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2A:66:88:B5:D4:A9:C9:8D:C7:AE:2E:E6:03:4C:FD:12:D8:BB:BA
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5f:1b:b2:d2:e8:54:01:ff:08:9f:ab:ad:ae:bf:74:cb:93:
e1:fe:3e:26:f8:a7:53:03:97:79:37:33:65:06:b0:b9:32:49:
10:2a:62:9f:c8:fe:b5:09:6b:09:b7:c0:7b:67:72:20:91:33:
3c:1b:53:77:b3:3d:d5:79:15:44:6a:1a:40:6c:76:d4:3b:2c:
b7:36:aa:98:10:e4:48:a9:5b:68:e0:d6:8c:06:3f:72:fa:06:
92:43:11:9b:2a:66:e9:31:90:65:20:86:37:5a:40:ae:66:58:
6e:be:ca:09:09:2e:16:ca:ab:9e:80:50:e8:a2:47:cc:4c:a9:
d6:69:8a:9f:82:f0:ad:6d:73:1f:2e:ab:c8:ea:81:9d:70:4b:
1a:a3:5f:06:24:fe:31:ee:18:8e:35:2c:cc:af:47:90:86:b8:
23:22:c7:12:e1:4b:02:55:fb:64:92:a3:3f:92:1c:52:7c:51:
39:31:e2:47:c8:35:01:3a:a1:d2:35:9b:37:27:f1:5a:7c:7f:
8d:0d:a7:be:9c:26:e1:52:2d:7b:8c:76:8c:1c:03:ce:61:39:
1d:3f:80:da:14:ed:2c:d9:8a:6a:45:cd:e3:85:22:c9:eb:5f:
f1:cb:b2:24:dc:5f:1f:31:65:48:4c:ec:03:87:70:a8:30:92:
90:9e:7f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:39 2026 by rpki-client