Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier: eKmdEtfkXn8py05YNzJ02eBbEO+k+A75lZVpRiowf8E=
Subject key identifier: E2:40:DD:B4:40:D4:4D:05:30:31:76:63:82:34:68:42:9A:6B:5C:F6
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 019EB87C55A9E33EAD65998AF1C4E413941E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number: 146B
Signing time: Thu 11 Jun 2026 21:00:16 +0000
Manifest this update: Thu 11 Jun 2026 21:00:16 +0000
Manifest next update: Fri 12 Jun 2026 21:00:16 +0000
Files and hashes: 1: PrGwU2TW-rYM4XlKNokSqvhickE.roa (hash: fwpVBF6tUhobxteId7IZ9kM2ae4pupPUogMY1BLAryM=)
2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: SGJq9Mf8M+B/9XU1cfZwNtVd7DA/B4FSWpkq3eO+M80=)
3: dbor2V1CZeSh-DsNvUTjnrohp5k.roa (hash: ThyL23NfAVtNK001dI1v2bX0HhRJe3heaSpGsGvlJC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:55:a9:e3:3e:ad:65:99:8a:f1:c4:e4:13:94:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Jun 11 21:00:16 2026 GMT
Not After : Jun 12 21:00:16 2026 GMT
Subject: CN=e240ddb440d44d0530317663823468429a6b5cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:0b:d0:7b:3c:be:da:cb:d5:a3:af:76:91:
14:11:ae:a5:b6:26:1e:57:3a:dd:c6:bd:28:fe:3b:
6e:10:cb:13:b8:e9:e9:40:01:4f:43:01:bb:44:aa:
4e:56:f3:d2:be:ae:73:ff:d2:77:cd:8b:1a:9c:ac:
27:7c:6b:bc:9a:a7:f1:1e:4c:df:ef:eb:ef:50:7e:
77:5c:4c:0b:67:61:02:61:d3:9c:db:90:59:43:a1:
c5:c5:c3:66:fb:e4:2e:a5:46:21:ad:a7:46:6a:ed:
fd:d9:0c:6d:bf:49:b8:bb:41:23:bc:0e:e4:b8:03:
0f:db:7f:e8:f5:8d:74:f6:19:b8:ee:d7:18:ed:d1:
2e:6d:11:69:05:cb:19:e1:0f:f1:c1:48:53:60:36:
00:03:b5:d4:33:63:76:04:0f:54:be:f4:23:f8:53:
2f:a9:86:cd:d5:2d:3c:87:b7:e9:73:b2:08:0a:02:
32:2c:83:86:a0:1e:6d:fe:1e:25:7d:45:c4:89:a0:
41:c3:a7:ec:8d:b2:1a:3d:71:40:0f:e3:61:4e:ed:
c0:37:d0:44:f3:0e:5a:00:0c:b8:d8:7f:69:bd:5b:
c6:36:65:17:6b:29:da:ff:93:35:12:38:85:f0:c8:
12:a4:c3:9c:ea:b9:7d:ce:12:da:f5:21:d7:c8:aa:
37:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:40:DD:B4:40:D4:4D:05:30:31:76:63:82:34:68:42:9A:6B:5C:F6
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:90:d2:3a:cf:88:5d:ba:bc:9c:bc:22:4e:de:71:4d:a3:3b:
cf:44:0f:be:9e:77:b9:47:02:81:9d:5d:a0:43:49:c3:49:3d:
f5:30:b7:b1:7b:93:5a:85:a3:24:77:a6:25:63:37:3b:29:f6:
a4:8c:de:7e:a7:20:d7:a8:32:b9:46:c0:a8:c3:a5:63:86:d1:
1d:d3:7d:66:f4:3e:b3:62:ab:58:d3:59:ca:59:db:78:ad:e9:
8a:4f:6c:f6:da:89:4a:4a:11:60:6d:30:fa:4c:e4:10:5f:8a:
e8:23:77:8a:e6:22:78:5e:4f:ca:b9:09:8f:f1:4f:55:c1:24:
99:cc:29:c6:71:44:8f:a3:ab:6f:05:9f:e1:32:51:2a:67:cf:
cf:67:6b:e3:25:db:e3:78:18:33:28:ee:36:12:56:43:dc:f5:
ba:75:ed:72:ff:87:90:29:53:d3:b8:1f:4d:16:50:ac:e5:b2:
28:bd:a2:71:46:2e:e5:7d:b0:28:2d:69:7b:23:5b:8d:6e:63:
0f:45:48:29:ee:96:27:bf:50:af:f6:bb:ae:21:48:fa:3b:95:
f4:5b:d9:88:80:77:d4:35:5d:62:3e:54:e1:3b:0a:1a:2c:50:
10:09:c5:c4:09:36:7f:7d:4e:dc:ac:9c:16:f4:37:51:c7:e7:
83:43:55:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fFWp4z6tZZmK8cTkE5QeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZjljNTQwYjE0NmJiNDRjODIxOWQwMTM3NWMxMDEyNDky
MGFlOWYwHhcNMjYwNjExMjEwMDE2WhcNMjYwNjEyMjEwMDE2WjAzMTEwLwYDVQQD
EyhlMjQwZGRiNDQwZDQ0ZDA1MzAzMTc2NjM4MjM0Njg0MjlhNmI1Y2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBYL0Hs8vtrL1aOvdpEUEa6ltiYe
Vzrdxr0o/jtuEMsTuOnpQAFPQwG7RKpOVvPSvq5z/9J3zYsanKwnfGu8mqfxHkzf
7+vvUH53XEwLZ2ECYdOc25BZQ6HFxcNm++QupUYhradGau392Qxtv0m4u0EjvA7k
uAMP23/o9Y109hm47tcY7dEubRFpBcsZ4Q/xwUhTYDYAA7XUM2N2BA9UvvQj+FMv
qYbN1S08h7fpc7IICgIyLIOGoB5t/h4lfUXEiaBBw6fsjbIaPXFAD+NhTu3AN9BE
8w5aAAy42H9pvVvGNmUXayna/5M1EjiF8MgSpMOc6rl9zhLa9SHXyKo3swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJA3bRA1E0FMDF2Y4I0aEKaa1z2MB8GA1UdIwQY
MBaAFGr5xUCxRrtEyCGdATdcEBJJIK6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zNzk1MjktZjQ2OS00MzYzLThiODct
NDIxYTk5YmRkNzhmLzEvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zNzk1MjktZjQ2OS00MzYzLThiODctNDIxYTk5YmRkNzhm
LzEvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5DSOs+I
Xbq8nLwiTt5xTaM7z0QPvp53uUcCgZ1doENJw0k99TC3sXuTWoWjJHemJWM3Oyn2
pIzefqcg16gyuUbAqMOlY4bRHdN9ZvQ+s2KrWNNZylnbeK3pik9s9tqJSkoRYG0w
+kzkEF+K6CN3iuYieF5PyrkJj/FPVcEkmcwpxnFEj6OrbwWf4TJRKmfPz2dr4yXb
43gYMyjuNhJWQ9z1unXtcv+HkClT07gfTRZQrOWyKL2icUYu5X2wKC1peyNbjW5j
D0VIKe6WJ79Qr/a7riFI+juV9FvZiIB31DVdYj5U4TsKGixQEAnFxAk2f31O3Kyc
FvQ3Ucfng0NV/w==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:58 2026 by rpki-client