Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier: 9aZFhv9afrrFjsf26fBdPxk0cJSjfI4yFiLHCB78B6c=
Subject key identifier: 3C:79:D6:02:CB:58:28:C5:39:AD:49:0B:A8:6A:2B:E3:A8:D1:6E:52
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 019CE711EE537A43E59B728B289B0DC8762D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number: 137A
Signing time: Fri 13 Mar 2026 12:00:37 +0000
Manifest this update: Fri 13 Mar 2026 12:00:37 +0000
Manifest next update: Sat 14 Mar 2026 12:00:37 +0000
Files and hashes: 1: PrGwU2TW-rYM4XlKNokSqvhickE.roa (hash: fwpVBF6tUhobxteId7IZ9kM2ae4pupPUogMY1BLAryM=)
2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: MaUkR1ExZQflsL7bR2TmqqKtcgJcxYjOnEorE5M8hbk=)
3: dbor2V1CZeSh-DsNvUTjnrohp5k.roa (hash: ThyL23NfAVtNK001dI1v2bX0HhRJe3heaSpGsGvlJC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:11:ee:53:7a:43:e5:9b:72:8b:28:9b:0d:c8:76:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Mar 13 12:00:37 2026 GMT
Not After : Mar 14 12:00:37 2026 GMT
Subject: CN=3c79d602cb5828c539ad490ba86a2be3a8d16e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:29:64:e3:d1:3c:0b:2a:0b:8f:3c:4d:d9:f0:
e2:ec:29:94:66:f2:44:80:f9:7c:f2:cc:32:36:98:
19:4a:51:3b:7f:53:6e:94:b3:79:87:48:91:a9:39:
94:66:73:9b:d0:84:3b:ff:fd:2b:76:2f:15:6f:d7:
b3:2a:8a:a5:55:c1:ca:6d:ce:5a:1c:21:0c:b7:bb:
2c:fe:a2:c0:a7:96:f5:75:a9:58:1b:43:e3:ef:bd:
53:5c:0d:aa:18:b4:14:55:99:48:b5:ea:ab:60:08:
d1:26:b4:b2:5a:68:cc:33:09:51:7c:4b:27:46:aa:
01:8b:55:32:d4:56:17:39:0f:d5:2d:ff:21:41:b1:
44:21:c6:79:7e:44:4c:1e:f6:f8:40:da:7f:95:f7:
07:11:a9:63:56:2b:5c:96:34:6d:e0:1b:ca:2a:5c:
93:c5:ad:f3:de:b8:c8:09:3e:b8:45:4e:05:10:22:
94:18:59:79:0a:4d:7c:21:5c:1d:34:65:80:dc:fc:
23:b8:8b:a3:bb:55:22:4b:95:e3:10:6a:6d:e2:6c:
93:fe:3a:5a:15:cd:86:9e:11:a2:3d:84:7f:d0:96:
d3:0a:7a:91:4a:65:a1:4e:f1:35:2a:48:e6:f8:4f:
7d:e0:07:5f:90:54:b8:52:c8:c2:83:24:76:c0:27:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:79:D6:02:CB:58:28:C5:39:AD:49:0B:A8:6A:2B:E3:A8:D1:6E:52
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ec:f2:34:c3:5b:eb:4f:30:02:90:2a:e1:1b:84:93:d8:fd:
83:7f:eb:cf:cb:f0:36:c3:5f:53:98:f4:64:06:88:cd:19:b6:
39:73:3c:e3:a6:1e:3b:a9:6f:3b:14:9b:e1:5d:c1:96:81:23:
6b:11:c7:6e:e2:6f:f8:f2:b0:b4:e6:07:16:5d:7a:71:df:08:
22:97:8b:74:7e:fe:65:2e:15:d1:2b:08:3a:94:7a:bf:80:06:
c3:ad:26:e7:22:39:45:73:1d:15:b2:26:a9:df:7c:ed:4a:56:
f9:ae:17:01:bd:a4:c5:92:92:cc:13:19:95:35:de:5e:72:89:
ce:20:42:4c:9c:1d:73:8f:3a:4d:c0:b0:b6:27:00:51:47:af:
95:90:2e:ce:08:2f:8b:53:38:eb:ac:5e:f8:05:87:d0:76:2a:
8d:02:ee:f9:16:a2:5a:30:0b:cb:d8:56:92:4c:c6:ad:19:19:
46:6a:34:39:20:14:00:f7:00:ad:af:3e:ba:04:7e:7d:cc:ca:
90:a7:82:5d:95:a7:05:b7:e7:16:01:89:4c:a6:b2:fc:63:59:
b4:da:a4:48:c5:87:62:43:d8:89:a5:bc:02:96:ae:ff:20:e3:
c1:77:44:1a:c3:4c:7f:4e:ae:5a:76:8d:71:34:65:ee:e0:e0:
c6:8e:33:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:24:53 2026 by rpki-client