Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
File: AVgEEYI7SHN2g27WavP4qrsgEZw.mft (raw, json)
Hash identifier: GEb9qVS8/od9xw3DFgrfXY9SUP0CIeRKcJw1X6rn7w0=
Subject key identifier: 1A:23:2A:BE:CB:28:71:62:68:15:A6:95:AE:E5:DF:7E:50:3B:C8:EB
Authority key identifier: 01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C
Certificate issuer: /CN=01580411823b487376836ed66af3f8aabb20119c
Certificate serial: 01A13DB7F112F628C8A33C4D53ED085B53BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 04:00:27 +0000
Manifest this update: Thu 15 Oct 2026 04:00:27 +0000
Manifest next update: Fri 16 Oct 2026 04:00:27 +0000
Files and hashes: 1: AVgEEYI7SHN2g27WavP4qrsgEZw.crl (hash: fijFKC2unRI+6VhF2oMBVW/e/BefBDli7RskdiQA0zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:f1:12:f6:28:c8:a3:3c:4d:53:ed:08:5b:53:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01580411823b487376836ed66af3f8aabb20119c
Validity
Not Before: Oct 15 04:00:27 2026 GMT
Not After : Oct 16 04:00:27 2026 GMT
Subject: CN=1a232abecb2871626815a695aee5df7e503bc8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:22:96:db:74:c7:92:01:76:7a:33:23:40:
65:0c:a0:d6:50:63:83:72:c7:a5:98:2a:48:22:da:
93:b8:09:d7:06:57:40:e3:ab:65:9e:a1:df:25:e0:
fd:bd:60:ae:38:e2:1b:d0:bc:c3:31:3f:69:80:95:
1c:06:2b:8c:b3:3f:8b:bf:38:d4:17:c4:70:aa:ed:
ed:0a:62:c4:6e:a2:88:88:28:fe:49:4f:e7:f3:fc:
01:1c:7b:64:7c:3b:f2:e2:1e:06:27:d0:5c:4a:4a:
ae:8d:d0:62:07:fb:34:e7:39:ff:a9:8b:c2:1f:1d:
0a:b8:57:82:a2:4f:2f:05:54:6c:aa:c6:13:ef:ca:
ad:06:b2:c4:c0:6a:78:da:4d:ee:30:b5:44:f6:c2:
1c:71:23:0c:99:71:f5:73:b1:58:f9:5e:fb:e9:5b:
5b:3c:4b:92:b5:53:1f:7d:e1:1e:76:8d:16:b8:4c:
44:91:05:a1:84:1b:6f:77:0f:74:a7:c6:05:dc:3c:
a1:7d:5f:3f:dd:fb:85:c8:43:18:35:d8:cb:5a:49:
a8:98:0f:b0:46:b6:b5:41:fa:c6:06:31:74:ab:f0:
e7:9f:8f:3f:4b:51:95:da:79:83:64:fc:34:4d:bd:
17:c9:33:8c:e6:89:11:af:c8:76:5b:2a:cb:ce:35:
b5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:23:2A:BE:CB:28:71:62:68:15:A6:95:AE:E5:DF:7E:50:3B:C8:EB
X509v3 Authority Key Identifier:
keyid:01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:40:67:80:c3:ec:48:bd:e6:49:e8:ab:3a:9d:7c:47:78:e3:
78:90:eb:84:85:a3:26:06:73:62:c1:d3:fa:37:67:1f:0f:36:
07:21:7a:42:59:f1:ea:2e:52:82:95:f6:3e:4d:3a:99:2a:1d:
44:31:b9:49:d8:40:28:10:de:f9:76:9f:3f:ad:75:93:eb:79:
b7:83:6f:86:c7:29:d9:82:33:12:15:db:00:77:46:4f:1f:a3:
cc:8f:0c:67:a4:65:19:f1:e6:ac:39:50:de:57:38:17:7b:91:
f6:78:1a:1f:6f:87:8e:91:26:4b:91:0d:7c:53:4a:fc:74:e4:
56:81:d7:2e:81:5a:ec:9d:3b:26:06:9d:04:b3:07:04:7f:df:
7b:4c:61:fb:30:3d:8e:a2:52:85:3d:4d:ca:42:e8:41:90:6f:
41:db:6a:47:2a:fa:b5:58:e2:0b:1a:e4:d2:a8:61:18:a2:b2:
6f:05:ca:5c:b1:af:ab:19:fe:2a:0c:bd:42:b7:46:5a:b8:b3:
f6:6e:57:34:4a:1c:e1:ab:69:83:90:4d:e2:63:96:c8:59:9d:
bc:18:d6:1b:84:18:71:41:3a:00:31:4c:6c:9c:c0:35:6e:fd:
32:60:20:24:76:3a:d2:3f:06:81:43:84:3f:47:2d:7d:db:8b:
de:cc:7f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:06 2026 by rpki-client