Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json)
Hash identifier: vFkReEKFFWv72F83sOROh4BrsEAu61BFOoIAzDCLWGY=
Subject key identifier: EB:A9:7B:CA:B7:F8:AE:09:28:D1:5B:2D:91:4E:DC:A7:55:56:77:D0
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial: 019F841ED883073E3F43337E90977E0D55D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
Manifest number: 19C1
Signing time: Tue 21 Jul 2026 10:00:41 +0000
Manifest this update: Tue 21 Jul 2026 10:00:41 +0000
Manifest next update: Wed 22 Jul 2026 10:00:41 +0000
Files and hashes: 1: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: lL30Duv4atzDnyqYZmG1mK6Wpcdl+DyDPm2qBq456cE=)
2: hBPMfJjzisDLgAAy42OAPWTEtn4.roa (hash: 7+lbylCTdmTyru0tkrcTEDn3h1rEwAZ3WSEJuuLSstI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:1e:d8:83:07:3e:3f:43:33:7e:90:97:7e:0d:55:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Validity
Not Before: Jul 21 10:00:41 2026 GMT
Not After : Jul 22 10:00:41 2026 GMT
Subject: CN=eba97bcab7f8ae0928d15b2d914edca7555677d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e7:e6:d1:b3:b2:35:e0:4c:87:cb:f1:27:8a:
d9:0e:d5:e7:02:b2:3a:4a:d6:f7:6f:52:b6:27:b5:
ff:d0:52:6a:17:b7:c2:8f:73:84:c8:a9:f9:42:6b:
e4:08:c7:94:35:26:0e:dd:3e:1e:60:c7:fe:f1:39:
95:54:be:b1:f0:c4:86:0f:1f:03:e0:dd:68:a3:f6:
af:38:d2:76:4c:9f:b0:05:61:6b:fc:6a:8e:e2:7d:
e3:c7:0b:18:64:b2:2b:97:0a:22:a5:0a:2d:63:e3:
af:c7:22:3e:16:4e:ba:53:8c:57:b6:16:c6:97:78:
94:68:f4:20:fa:c9:af:61:c7:15:52:d8:17:77:bc:
a4:85:bc:99:93:fa:9f:17:51:da:05:1d:6c:11:c5:
54:b5:f5:b8:8b:12:2c:a9:8f:a5:32:b5:1b:c8:d2:
42:93:4f:54:dd:0c:e4:cd:a6:a7:6d:1d:5b:24:6a:
76:d7:33:70:cb:18:d4:7e:46:75:23:c7:4b:b3:e6:
f9:8f:0e:e1:3a:d5:f5:ed:76:33:8b:a9:80:d6:e8:
d1:09:26:80:9d:21:0a:1f:73:6f:81:60:85:2c:4e:
cc:a3:91:04:9c:d1:51:0e:43:4c:94:56:13:59:bf:
09:34:b2:81:74:6a:b6:6c:e1:e4:ed:91:8c:8a:09:
e2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A9:7B:CA:B7:F8:AE:09:28:D1:5B:2D:91:4E:DC:A7:55:56:77:D0
X509v3 Authority Key Identifier:
keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:82:b2:17:a6:dc:f3:4f:95:5b:07:a2:e5:9a:1f:86:a5:eb:
e7:1d:98:71:7e:c8:11:3b:7a:62:6b:2c:70:98:1d:fc:20:98:
83:8b:9c:af:dc:55:56:3b:28:4b:92:92:7f:17:c9:9e:0e:b9:
ae:57:79:3d:81:b3:a1:53:11:de:28:3a:ba:a7:e4:98:82:30:
1b:e3:83:87:d1:cd:0b:9a:1d:fb:7d:80:2c:70:c2:79:f0:21:
14:99:2a:d3:a3:70:ec:30:91:dd:1d:15:c5:70:e9:3b:e5:58:
b1:da:dd:47:35:ab:1c:f2:b5:b1:34:56:ed:3c:df:e2:33:36:
05:cc:88:8d:7c:d2:89:ce:04:86:b4:7e:ad:22:89:aa:69:87:
48:a6:17:34:11:c3:83:dd:ae:85:c2:90:39:60:a7:ef:04:a5:
8f:b9:9a:dc:e2:05:82:4f:4e:70:71:ba:95:0e:57:5c:fd:82:
04:7b:12:9d:0a:75:d3:0d:d5:75:80:d1:7e:7a:e9:f4:a0:e7:
44:35:46:d4:c5:2a:d7:99:45:57:2c:a6:d0:0b:c1:fb:18:d8:
3b:04:5e:5b:ee:ac:49:a8:be:77:43:43:73:12:ee:04:78:2b:
a2:30:34:20:35:96:40:3b:40:e7:10:0d:17:32:97:6e:6e:a5:
a7:29:f2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:06:25 2026 by rpki-client