Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier: +9ZGxAgpF4vhJxWyYsHGm+FWe5uXoKQjm0pFgsm+r8M=
Subject key identifier: 27:5F:D9:5A:D7:C9:5B:9A:80:02:06:53:05:CC:87:32:E7:13:5E:EA
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 019FA2291B8ED98E4A2E314DF7FB9D3E9ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number: 14E4
Signing time: Mon 27 Jul 2026 06:00:30 +0000
Manifest this update: Mon 27 Jul 2026 06:00:30 +0000
Manifest next update: Tue 28 Jul 2026 06:00:30 +0000
Files and hashes: 1: PrGwU2TW-rYM4XlKNokSqvhickE.roa (hash: fwpVBF6tUhobxteId7IZ9kM2ae4pupPUogMY1BLAryM=)
2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: B5hFZqefTG9DwrG6YUC8bGsm+940k2d7ximfnJQ8aO8=)
3: dbor2V1CZeSh-DsNvUTjnrohp5k.roa (hash: ThyL23NfAVtNK001dI1v2bX0HhRJe3heaSpGsGvlJC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:1b:8e:d9:8e:4a:2e:31:4d:f7:fb:9d:3e:9a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Jul 27 06:00:30 2026 GMT
Not After : Jul 28 06:00:30 2026 GMT
Subject: CN=275fd95ad7c95b9a8002065305cc8732e7135eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:eb:82:2e:82:d8:49:6a:6a:eb:4d:3b:18:
15:3f:15:a1:07:72:b3:cb:5b:d5:2a:75:a2:ec:57:
94:5c:ad:92:5f:f2:c7:0b:51:a1:e8:8a:c7:bc:93:
54:25:73:fc:3e:f0:3c:dc:94:b3:aa:aa:b3:78:03:
9b:0a:6b:4d:10:ee:05:61:c7:b5:b1:94:0e:2c:b0:
94:f9:51:3e:5e:5a:52:22:39:82:e5:7c:d5:1a:16:
80:32:4e:4c:c6:5e:f0:e5:79:c0:18:e0:ca:6c:5b:
70:50:6a:41:15:15:98:03:f7:4e:6b:98:79:ee:98:
48:4a:36:7e:30:26:12:09:72:b0:79:e9:6c:12:34:
d1:12:d1:74:9d:ad:00:19:24:e8:61:04:0e:88:80:
6c:67:01:ed:48:04:9d:dd:26:fe:33:2b:36:67:3e:
b5:6b:dd:d9:d1:10:6f:2d:43:79:c6:32:1e:89:ea:
dd:2f:51:63:c9:b4:10:d3:ed:2d:1f:2b:61:78:f0:
10:a2:ee:f4:3b:85:fa:63:7f:da:78:22:43:a7:55:
a7:18:1e:fc:89:20:1e:f3:c3:03:1e:c0:d3:df:73:
2b:36:df:f0:6f:d9:74:f6:78:16:34:02:8f:21:ce:
7c:2f:d2:a3:7d:48:ef:83:78:c4:61:d2:ea:ca:b8:
63:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5F:D9:5A:D7:C9:5B:9A:80:02:06:53:05:CC:87:32:E7:13:5E:EA
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:73:96:0b:db:d5:36:45:b4:42:7f:ab:c2:5d:20:c0:ea:69:
b0:17:4d:8c:ce:0f:df:09:2e:ef:0a:9a:ca:cf:58:72:b9:a1:
04:d0:0e:e8:8d:e0:2f:95:07:4a:1b:41:78:6d:03:8d:88:93:
8e:e9:6c:c1:14:1d:fa:98:66:cb:16:4f:54:b0:5b:31:53:20:
33:d7:d1:0b:43:31:25:cf:54:dc:41:be:a7:06:d8:35:a4:e7:
4f:6f:d3:b1:ac:a7:38:ba:62:00:ae:89:a4:a5:58:30:24:16:
f0:96:bd:a0:2a:da:d8:2a:28:55:42:2a:f9:10:0f:f4:f7:ab:
76:06:66:f6:dc:cc:0b:ec:c3:0c:2e:4d:83:49:6b:47:b9:3e:
00:b8:33:1d:72:f8:19:4c:3f:11:ed:19:2b:37:01:d8:be:1f:
7a:75:5a:be:fe:82:47:1c:81:65:ed:cc:8c:b3:d8:c2:48:39:
c2:f9:d5:95:2c:ea:bb:8e:75:da:a1:db:e3:16:d0:61:e3:75:
af:2e:d9:0e:32:df:26:33:4a:1e:d0:d1:81:9a:ec:86:54:38:
f5:59:1f:b3:19:89:69:fb:b2:bc:1b:3f:5b:cf:9e:a0:fc:26:
9b:ad:e9:e3:24:bc:c6:3b:60:e6:6c:ca:ff:65:d9:f6:77:1a:
d6:f7:49:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:20:14 2026 by rpki-client