Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json)
Hash identifier: 5/U3PN8XxgojaRo6LrjdXdakHllG4xd2xvOXxYl5c5Y=
Subject key identifier: 3B:52:BF:3B:C3:C6:9B:21:44:66:F3:95:7C:63:4B:D8:F2:BF:DE:B5
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial: 01A187BFE43451D5CB86F09A26DAB5D46811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
Manifest number: 1ACC
Signing time: Thu 29 Oct 2026 13:01:02 +0000
Manifest this update: Thu 29 Oct 2026 13:01:02 +0000
Manifest next update: Fri 30 Oct 2026 13:01:02 +0000
Files and hashes: 1: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: oBFW1FVwVGBJJHGYm+tSu5xcHszyBg78IzfjaduCFos=)
2: hBPMfJjzisDLgAAy42OAPWTEtn4.roa (hash: 7+lbylCTdmTyru0tkrcTEDn3h1rEwAZ3WSEJuuLSstI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:bf:e4:34:51:d5:cb:86:f0:9a:26:da:b5:d4:68:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Validity
Not Before: Oct 29 13:01:02 2026 GMT
Not After : Oct 30 13:01:02 2026 GMT
Subject: CN=3b52bf3bc3c69b214466f3957c634bd8f2bfdeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1f:f2:1c:c3:53:5e:69:56:4b:4b:9f:3b:39:
a7:f8:41:24:c3:26:c3:32:03:05:ac:0d:33:83:4c:
d8:cc:9e:ce:03:c2:9f:07:3d:54:1e:ad:82:9a:17:
c6:c2:b2:b2:e0:2c:95:9d:fc:3c:49:04:eb:d1:ea:
7a:56:ac:c3:a7:c2:6e:50:bf:32:70:1c:7b:cd:c6:
e5:ec:f5:29:3c:41:7e:09:88:ee:b6:8a:75:65:9d:
d2:98:cb:40:8e:e3:d7:38:6e:eb:8a:e1:4a:9d:d5:
09:08:3e:2d:44:8c:e4:df:81:01:27:fa:59:da:20:
e4:fe:37:31:9a:27:21:01:1b:d9:df:42:36:60:07:
26:86:49:ee:28:fe:a9:7d:35:c5:dd:a9:91:5e:95:
3a:c9:7a:b8:e4:84:64:c7:e0:2d:f2:9d:bf:e2:85:
d6:29:7d:3a:c1:c5:f6:79:63:ef:a7:91:4e:87:f7:
93:01:41:84:c9:5b:c0:92:7c:63:7f:f7:ef:c1:6c:
07:58:ac:ac:ab:8c:da:e6:30:47:42:87:b2:ce:51:
cd:7a:1b:7c:29:e6:56:79:5d:17:d1:de:5f:8b:3d:
5d:ab:80:b7:2f:b6:a5:e0:8b:91:90:24:e5:0a:87:
13:39:a6:a9:1b:78:ed:f5:df:38:00:29:04:8e:54:
a1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:52:BF:3B:C3:C6:9B:21:44:66:F3:95:7C:63:4B:D8:F2:BF:DE:B5
X509v3 Authority Key Identifier:
keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a3:29:6b:51:d2:16:40:eb:f5:92:de:7e:08:fd:6c:75:61:
75:5d:26:1e:1e:26:6c:1a:83:d8:4b:20:96:a6:95:77:5d:5f:
c5:a5:a0:bc:10:c8:7d:7b:bc:34:99:ec:c5:62:cc:5b:3d:8e:
27:8b:77:2a:79:aa:09:43:a0:58:9e:ee:36:09:a7:4f:14:a4:
5b:99:80:cc:4a:bf:39:a1:8f:f7:59:ae:15:c7:a0:b7:fd:3e:
84:13:1b:f8:ca:fc:9a:84:d2:f2:2d:c7:62:de:36:43:4b:54:
5c:03:ac:f1:3a:2f:f1:db:53:cc:a9:8b:e0:bb:67:df:59:46:
b6:0f:50:3e:2c:29:77:92:f5:b6:45:f9:9a:46:29:71:bb:17:
5f:b4:c1:1e:db:49:9a:77:91:20:a4:e3:f5:57:51:f5:b9:ac:
78:a2:c9:3a:0b:56:00:17:d8:08:33:6b:f8:98:71:51:98:a5:
99:da:7a:a8:9c:a8:55:02:20:47:c4:7a:56:9d:7c:24:b8:07:
10:ad:63:7b:66:b5:a8:99:78:bd:38:5c:32:f4:b4:d1:fd:a2:
67:8c:1f:33:54:e6:70:e9:f3:c3:0b:d8:4f:14:23:17:89:f0:
69:a1:46:e7:34:3b:28:7c:9d:4f:18:72:a2:d0:36:dd:c2:bf:
25:6a:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:57:25 2026 by rpki-client