Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json)
Hash identifier: jatp3tH2Gl7WkhiMyrXOaWcsAamBJhzVKk2W39EGEJU=
Subject key identifier: 30:65:E9:97:BD:F1:54:3A:DB:2D:B2:49:EF:6E:62:9A:8E:D7:0B:19
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial: 01A0908EFF6385D06B29E6D019CA5865A1FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
Manifest number: 1A4C
Signing time: Fri 11 Sep 2026 13:01:25 +0000
Manifest this update: Fri 11 Sep 2026 13:01:25 +0000
Manifest next update: Sat 12 Sep 2026 13:01:25 +0000
Files and hashes: 1: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: /GA0hRem4DhhLY0/qtVNTQb26UDqBcmJAjnNfx7sews=)
2: hBPMfJjzisDLgAAy42OAPWTEtn4.roa (hash: 7+lbylCTdmTyru0tkrcTEDn3h1rEwAZ3WSEJuuLSstI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:8e:ff:63:85:d0:6b:29:e6:d0:19:ca:58:65:a1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Validity
Not Before: Sep 11 13:01:25 2026 GMT
Not After : Sep 12 13:01:25 2026 GMT
Subject: CN=3065e997bdf1543adb2db249ef6e629a8ed70b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:b5:1e:4a:ab:3c:29:ec:18:0f:2c:df:09:
66:0e:b4:49:e8:26:60:87:bb:93:60:e0:43:78:54:
78:34:8c:e4:6e:e3:50:d1:f1:13:45:37:2e:ca:f7:
04:4f:be:b5:10:d4:78:53:cf:b5:13:32:2b:bb:4a:
08:6f:b4:f8:af:68:6a:dc:36:49:78:8a:1a:69:af:
6f:c0:bb:98:b0:1f:dd:c2:73:48:e5:3e:f2:3b:98:
8b:47:b3:c8:30:1d:ed:69:4d:0f:b7:09:89:92:fd:
2b:0b:6a:08:d0:4c:21:ff:1a:8a:2e:a8:54:f1:f9:
da:c0:4a:b5:10:7c:d9:af:f5:01:9a:d0:0b:0c:2d:
87:85:66:f6:88:46:f7:58:b6:25:d6:9f:27:95:c7:
7a:e5:65:78:01:af:f8:67:d9:28:6d:84:10:36:9e:
c2:7e:2d:6f:61:91:d6:6a:e7:88:2e:a2:a0:4d:ac:
45:04:cb:5a:e7:1b:b2:90:1c:8d:38:a8:f9:41:01:
87:26:50:1b:c3:9a:ab:8e:7f:85:8c:da:5c:7c:b1:
51:e6:59:a9:7b:44:fb:cc:53:81:44:50:21:f5:70:
61:b9:8f:4e:f6:ec:e7:67:87:5b:9d:5d:f2:99:70:
a2:a0:3a:10:14:7b:f9:3c:28:85:63:99:31:93:46:
57:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:65:E9:97:BD:F1:54:3A:DB:2D:B2:49:EF:6E:62:9A:8E:D7:0B:19
X509v3 Authority Key Identifier:
keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:1d:a9:33:1f:c5:11:21:f6:e6:ea:18:92:3e:fd:ea:9e:c6:
a2:58:98:33:f9:3c:d7:78:e2:c8:91:fa:f0:33:de:5c:97:6c:
46:aa:6e:23:94:8f:98:67:ca:4b:db:29:c9:59:65:9c:d2:62:
89:1d:ec:f6:cc:8c:b1:ad:c1:92:bb:a0:81:ba:b3:1a:45:b7:
4b:16:44:1f:4a:62:6a:42:92:8f:03:38:39:08:f9:04:a4:c5:
71:50:ca:40:c3:4d:c9:87:63:d8:21:62:e3:54:73:62:4d:c7:
51:e8:19:38:1f:b1:6b:ef:b8:3b:8c:a7:3a:45:6d:aa:8a:61:
67:cb:3c:37:d2:dd:1a:8b:c2:86:02:f7:51:f3:63:1f:b1:94:
73:93:0d:1c:9e:e9:30:2b:0a:8c:d5:36:23:5c:7f:1f:de:06:
47:d3:33:32:6d:6b:83:1c:45:0e:97:e2:fb:e2:94:eb:87:a3:
71:03:ba:fa:18:5b:57:4b:91:80:1e:ce:61:70:26:c9:5e:65:
4f:64:2b:53:b2:f1:83:eb:6f:00:27:66:16:33:f6:cc:24:99:
c3:51:5e:72:3e:66:61:ed:53:5f:78:59:c7:a8:ce:d7:41:52:
e2:87:05:83:ab:83:88:5e:23:c2:09:0f:da:5d:a2:b1:10:75:
6a:4a:ff:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:15:17 2026 by rpki-client