Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
File: AVgEEYI7SHN2g27WavP4qrsgEZw.mft (raw, json)
Hash identifier: QhxFNhhvgAYneJ8TbneEK1C5bIbq5oXGNwKPrAj5vqE=
Subject key identifier: F0:FB:C3:00:A8:CB:43:43:4E:C2:B3:64:64:B6:13:6C:B0:52:70:E8
Authority key identifier: 01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C
Certificate issuer: /CN=01580411823b487376836ed66af3f8aabb20119c
Certificate serial: 01A001015870DFA2C8C4ADD5E8D60280E715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 16:01:00 +0000
Manifest this update: Fri 14 Aug 2026 16:01:00 +0000
Manifest next update: Sat 15 Aug 2026 16:01:00 +0000
Files and hashes: 1: AVgEEYI7SHN2g27WavP4qrsgEZw.crl (hash: 1Dq5nPC/snDcd5WV8Qx2avFATesDPXe2yvLIkqSrDC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:58:70:df:a2:c8:c4:ad:d5:e8:d6:02:80:e7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01580411823b487376836ed66af3f8aabb20119c
Validity
Not Before: Aug 14 16:01:00 2026 GMT
Not After : Aug 15 16:01:00 2026 GMT
Subject: CN=f0fbc300a8cb43434ec2b36464b6136cb05270e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:c7:a3:e1:91:77:4c:6e:05:86:1e:8f:62:
9b:e0:7f:d3:a5:20:ee:20:ae:47:69:ad:25:29:95:
23:fd:d5:1d:44:b7:47:60:e6:f2:0d:52:71:c8:02:
cc:ad:7f:6d:cd:34:a6:54:6e:d8:fe:b3:8a:36:b5:
9c:50:29:06:7c:42:ed:a2:8f:35:81:80:21:8c:9e:
cb:d4:a6:6b:dd:02:1a:60:f9:44:a2:c2:02:37:bc:
1d:ec:2e:c8:35:29:43:ab:2f:bf:f1:19:60:e2:ff:
c7:2a:6a:61:bc:42:18:ae:6f:07:8c:f7:6d:a5:90:
13:43:f1:1d:5b:de:ce:e6:9d:13:8c:66:17:17:31:
16:f0:0a:3b:ed:13:af:73:71:14:48:9c:bb:46:ce:
85:90:10:29:cb:1a:ae:33:e6:bb:c0:ea:c1:90:7b:
c8:39:4c:07:60:f7:39:e1:69:5e:a0:63:77:f5:6a:
45:da:ea:9b:fc:57:9d:53:84:41:9e:aa:f3:56:f5:
fc:4a:34:d6:ad:86:b0:aa:03:0a:bd:d2:e7:97:c7:
57:dc:5b:17:91:ee:cb:7d:fe:ec:2b:8b:b0:5f:da:
7f:13:d3:85:10:c0:6a:82:bd:77:87:eb:85:04:a1:
ee:51:ca:be:1c:dd:40:45:d6:60:b0:98:ec:25:a0:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FB:C3:00:A8:CB:43:43:4E:C2:B3:64:64:B6:13:6C:B0:52:70:E8
X509v3 Authority Key Identifier:
keyid:01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:93:5e:77:98:2b:65:33:36:25:ad:e2:bb:23:06:a7:96:c9:
b5:00:3f:48:a5:45:59:e8:29:e8:be:5a:94:c0:6f:b8:f8:37:
6c:ab:06:80:bd:63:4c:02:ba:49:5e:49:41:99:93:f0:a3:dc:
46:a8:28:e2:ba:56:38:aa:74:90:81:92:8e:59:57:1e:c8:65:
e6:ab:71:83:05:52:0d:b5:47:a8:a9:13:40:d8:05:c1:62:e4:
b7:7f:d7:82:e6:a6:d5:19:32:47:0a:7a:36:7e:cc:54:65:da:
be:b1:e7:a1:3f:a4:d7:e4:d0:81:45:a0:cf:97:d4:47:70:13:
e4:6d:29:09:2b:2c:05:31:93:9a:da:87:91:b2:e3:08:dc:5d:
fc:99:2a:60:73:28:22:cc:91:75:bc:67:18:aa:af:d1:5d:b5:
2f:33:64:30:8e:1a:61:40:95:b4:cf:74:ad:19:73:ff:e1:89:
f8:96:68:4d:01:68:2a:7b:50:4f:c1:7d:38:40:5f:59:26:c2:
2d:a3:7d:6a:54:4f:4e:02:48:c8:5c:43:1d:53:15:09:a7:c6:
c2:ad:7d:75:a3:ae:4a:75:85:f3:04:4b:57:87:a8:df:8e:45:
9e:07:0e:25:1e:cc:c4:46:bc:6c:7e:21:17:e8:e4:77:04:8e:
de:d2:94:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:27 2026 by rpki-client