Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json)
Hash identifier: FdkNGWl/QHZGCvTqJpFFJuJWm7Wk7160ZMZnCCaKmik=
Subject key identifier: F0:3B:DC:8D:47:A7:E0:11:FF:90:39:12:DF:99:12:E8:70:44:58:08
Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Certificate serial: 019D38663DC0E459C4E3F667A3E1391955D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: EiB5Ayj3RUbet0q4G0B3gx/veMoNz6bfDWUX6ZqgDbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3d:c0:e4:59:c4:e3:f6:67:a3:e1:39:19:55:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=f03bdc8d47a7e011ff903912df9912e870445808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4d:b1:05:72:97:41:1f:85:b8:5c:44:3b:3d:
e5:10:4c:fe:53:cf:57:d5:2b:2e:c9:f1:da:96:51:
d7:f3:2e:4a:f6:b7:6c:bd:6a:1a:e2:26:4a:8e:ac:
a1:dd:09:3b:2a:5f:dc:8f:be:d6:5d:c3:c1:b7:77:
d2:ea:93:5d:c4:70:d7:5e:8a:50:e6:24:e2:70:f1:
c4:c0:48:d6:bf:e3:a4:bd:de:c6:aa:1a:af:96:e1:
c2:f4:45:61:59:03:81:55:9d:76:86:ea:22:fb:7d:
0d:15:ae:d4:0c:dd:ce:5e:94:3e:bf:61:69:00:eb:
10:d9:a0:78:ce:df:02:0b:78:99:18:3b:fb:18:7a:
c9:39:83:9a:0a:d3:de:bf:d0:1e:85:e6:6c:44:0d:
4d:7a:a4:94:c4:ca:96:bb:1c:3f:3a:d8:11:a8:d9:
b7:68:d3:66:44:b1:60:be:8e:79:12:91:e9:c4:86:
af:e7:e4:ab:79:fa:97:c3:23:fa:08:e8:d2:d9:b7:
8b:bf:de:49:74:97:2f:de:66:ff:69:17:82:42:03:
a4:9e:bb:ff:33:d4:b6:86:a7:f2:e7:9d:77:5b:4b:
56:27:19:a5:e4:a6:bd:8c:5e:6b:df:e2:a6:0f:b1:
31:92:c0:6a:aa:bf:b0:c2:dc:02:41:0f:b0:d3:21:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3B:DC:8D:47:A7:E0:11:FF:90:39:12:DF:99:12:E8:70:44:58:08
X509v3 Authority Key Identifier:
keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:12:9d:c4:3f:ab:35:25:99:47:e5:99:22:a5:b1:a6:41:e9:
ca:87:5f:5d:76:1b:b1:cc:6b:6c:94:c3:3c:a5:84:86:ed:93:
47:52:53:57:ea:e3:c9:fc:52:15:47:57:f2:09:d1:b8:20:9c:
04:8e:77:96:a1:3b:2d:6a:ea:44:c9:e5:ce:41:17:de:e2:40:
e2:19:42:98:ea:e7:ed:c0:44:ab:df:84:e4:30:c8:43:65:53:
99:4e:26:01:0a:84:2f:c7:d1:c5:d9:cb:45:07:70:a6:ac:5c:
73:15:c7:73:52:c6:98:77:b2:04:ef:26:d3:1a:1f:69:64:f9:
8d:4a:a2:90:02:4c:aa:4d:d8:a9:67:d1:6c:f2:b1:64:86:34:
47:56:6a:6e:a0:fc:b6:08:ad:5b:11:e2:41:92:d1:7b:a6:97:
4c:5f:8a:b6:0e:c8:c0:1a:61:9a:d2:d0:8a:b9:2f:03:0d:18:
ea:53:c7:52:1b:a3:9d:fd:e4:7f:cf:3b:68:11:54:0e:49:69:
79:93:c1:20:8a:7a:e0:c5:aa:e1:99:6e:02:c4:bc:be:af:f7:
54:fa:7e:ed:df:9c:5e:a2:37:c3:d8:61:ab:19:3d:ed:cd:9d:
71:ee:d5:ca:df:38:cf:d5:39:3d:5c:40:d2:42:26:0a:00:1e:
0c:8d:37:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:50 2026 by rpki-client