Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier: t+G2n0CuLbKbWPR5TTyo9sKeXUw+vNJQeMVOuLh2irE=
Subject key identifier: 3E:38:9B:5C:37:E2:2D:0B:34:E2:C9:11:C6:F8:F2:57:94:BD:A6:AD
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 01A17D3C04B61072167EC8D74D54CE91B989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number: 15DA
Signing time: Tue 27 Oct 2026 12:00:47 +0000
Manifest this update: Tue 27 Oct 2026 12:00:47 +0000
Manifest next update: Wed 28 Oct 2026 12:00:47 +0000
Files and hashes: 1: PrGwU2TW-rYM4XlKNokSqvhickE.roa (hash: fwpVBF6tUhobxteId7IZ9kM2ae4pupPUogMY1BLAryM=)
2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: bupy4ajAnL9S6/+JJWRr/TRbhhPzG0cVELzOfDKU18Q=)
3: dbor2V1CZeSh-DsNvUTjnrohp5k.roa (hash: ThyL23NfAVtNK001dI1v2bX0HhRJe3heaSpGsGvlJC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:04:b6:10:72:16:7e:c8:d7:4d:54:ce:91:b9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Oct 27 12:00:47 2026 GMT
Not After : Oct 28 12:00:47 2026 GMT
Subject: CN=3e389b5c37e22d0b34e2c911c6f8f25794bda6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:55:39:de:eb:bb:86:95:9c:63:77:c2:64:
2b:64:85:18:92:f2:a3:05:95:0d:bd:73:62:1c:fc:
b9:1d:92:aa:5d:96:f8:8f:96:23:b4:6e:31:6a:bd:
94:ab:f7:db:1f:8b:7e:a5:7b:76:da:52:79:f6:0a:
82:e4:22:af:c5:2f:f6:b0:cd:74:e9:4c:ad:03:b9:
0f:51:36:ed:1c:bf:04:63:16:9e:1d:9d:c9:16:f0:
04:a3:cd:48:6d:38:eb:69:33:27:ed:5c:5e:c4:3b:
62:52:14:9d:19:74:af:a5:3f:2a:c7:57:61:6e:6b:
c6:08:b0:62:aa:ff:9d:4c:45:81:8c:9f:20:bd:34:
76:fe:7e:36:63:e3:c5:06:08:ea:4d:83:ba:40:b4:
4e:3b:ad:96:a0:91:71:3e:d7:20:3b:a3:78:ab:18:
2f:38:98:eb:30:66:0e:7a:95:be:23:45:e6:22:c6:
ad:e6:ae:63:71:e5:78:2f:37:1c:b9:4a:38:4e:cf:
1e:0d:fe:c6:15:23:99:24:fb:50:c0:fc:f1:97:74:
1c:e0:2e:5a:fc:c9:b6:bb:84:0b:2a:ed:d3:0a:cd:
f5:9e:59:5c:21:e0:7c:04:a8:b7:fc:58:76:c9:56:
20:c0:0f:ec:df:be:e3:9f:fd:e8:3c:13:25:43:c1:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:38:9B:5C:37:E2:2D:0B:34:E2:C9:11:C6:F8:F2:57:94:BD:A6:AD
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b1:a1:47:cf:13:53:88:c5:b9:7a:19:c9:7b:1a:da:99:4b:
96:33:e6:90:3a:6e:78:d1:41:9e:e9:29:af:89:2f:24:14:02:
7d:04:f7:bf:e7:af:01:67:5f:24:aa:29:97:8d:98:50:64:84:
34:89:f3:76:a8:20:34:87:2e:cc:5c:f7:fd:62:6e:7c:b1:7c:
cd:12:02:98:ca:7f:30:4c:19:db:55:ea:98:57:66:2b:4b:e5:
d7:15:6b:34:05:ac:74:40:ac:44:32:ab:fe:4b:0f:06:8f:0f:
35:f6:ec:38:bc:df:54:96:3b:21:13:c4:96:86:2b:2d:5d:e4:
a3:68:03:0d:21:16:21:f8:f8:39:95:63:32:82:44:ab:4e:2e:
76:aa:32:47:ac:c8:15:76:d2:e2:23:e1:dc:d9:74:6c:5c:42:
01:77:04:e7:09:55:5a:76:b4:fa:4c:fb:66:bf:e3:84:7d:75:
1a:e8:c2:a5:7a:a3:2b:a1:ce:ab:f3:53:db:9c:eb:dd:8e:f9:
ca:73:b8:a3:19:0a:bc:ad:79:e1:e7:20:17:c0:8a:75:d2:9f:
f8:b0:fb:74:da:88:4f:3b:8a:f5:37:2c:fc:56:3c:88:8c:dc:
ae:5c:af:e1:af:99:80:fa:74:da:01:1d:86:3d:75:37:0e:c8:
f2:a7:c5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:39:00 2026 by rpki-client