Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
File: AVkheESIrdmgVmH_EXh-x1TmBeU.mft (raw, json)
Hash identifier: Vz/kMJIdh1pd0xIgJFF/Wlk5dYu6EkLv2qO3hWgPwjA=
Subject key identifier: 32:C2:6D:48:52:D3:E2:3C:81:33:73:1B:97:07:E4:EB:EF:1A:51:40
Authority key identifier: 01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
Certificate issuer: /CN=015921784488add9a05661ff11787ec754e605e5
Certificate serial: 01A13DB7D29A097F8B6A2B8E87C127296F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 04:00:19 +0000
Manifest this update: Thu 15 Oct 2026 04:00:19 +0000
Manifest next update: Fri 16 Oct 2026 04:00:19 +0000
Files and hashes: 1: AVkheESIrdmgVmH_EXh-x1TmBeU.crl (hash: yHA30kAaXkEOQpx0fqTB5zOPACqXX/DT8hGmxHOoBO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:d2:9a:09:7f:8b:6a:2b:8e:87:c1:27:29:6f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015921784488add9a05661ff11787ec754e605e5
Validity
Not Before: Oct 15 04:00:19 2026 GMT
Not After : Oct 16 04:00:19 2026 GMT
Subject: CN=32c26d4852d3e23c8133731b9707e4ebef1a5140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b2:bb:53:27:e7:0b:35:64:d6:bf:0c:9c:c7:
6b:29:3c:6c:ab:6b:17:2a:d7:2e:f3:27:5d:a2:f0:
51:83:fb:05:37:75:37:43:f1:0f:cf:e1:06:d8:83:
91:18:c0:07:5a:03:82:8e:94:1f:b5:16:6b:ef:45:
22:bc:9a:f8:80:b3:67:3d:ed:21:b4:c3:a1:2a:99:
34:a1:e1:ef:2e:e6:7e:38:7b:d3:ce:63:fb:85:26:
0b:65:f8:f8:12:7d:c6:df:72:c4:1b:0e:84:d5:6f:
82:1c:3b:ac:56:a8:54:f0:ec:59:4b:cd:8a:21:35:
d0:6b:59:b9:a4:cb:05:70:d1:1a:2b:75:5f:d2:e1:
3f:63:11:e0:cb:25:f3:62:55:27:ee:5d:4e:9d:c1:
3f:ac:be:8d:20:38:3c:1b:0b:31:6f:61:39:eb:46:
9c:9d:5b:eb:30:06:ae:ed:bf:88:d8:8b:22:4f:71:
3c:e8:8d:49:88:39:39:c6:24:08:c9:90:43:f1:6c:
4d:2e:e8:5b:98:70:4e:fb:7b:23:98:49:16:68:85:
de:f1:70:92:ea:b5:fe:d2:17:25:f9:9f:e0:df:58:
5e:05:68:bb:f2:59:e4:e4:da:73:7d:cb:17:95:e1:
7a:d5:25:13:49:3a:bb:cb:a4:d3:2e:a0:ef:3e:73:
c6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C2:6D:48:52:D3:E2:3C:81:33:73:1B:97:07:E4:EB:EF:1A:51:40
X509v3 Authority Key Identifier:
keyid:01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cd:cf:09:b3:4c:fa:04:9f:50:81:63:69:70:74:d4:90:18:
d5:16:bf:f4:ee:48:50:5d:79:c1:d4:35:c7:24:41:20:c9:11:
da:1c:bc:58:4d:e4:11:08:5f:71:63:c0:4a:10:dc:f5:46:12:
6f:03:a5:1e:18:c8:64:86:fd:70:ef:11:7c:3e:f0:02:ce:34:
0c:f6:2e:4b:50:20:4f:d1:01:e9:20:df:1a:07:76:04:fd:a9:
c1:21:c9:5b:20:c3:6c:72:db:7f:f4:6f:72:f9:e8:2c:77:57:
15:0b:77:07:71:bc:11:4f:6b:bb:a7:7c:32:06:ec:ff:9d:8f:
e7:c1:f0:08:74:c2:9d:8e:79:ec:b9:df:5e:b0:2e:9c:a5:29:
52:32:73:a4:9e:1a:2b:a9:a1:aa:43:9d:c6:27:3c:8e:fd:51:
bb:99:33:d9:5c:90:e3:53:8a:a5:8a:ee:c2:45:ce:7f:26:b0:
aa:24:98:cb:9c:ce:88:c9:65:bc:ee:76:73:7b:14:90:67:0a:
5d:f7:b4:e9:95:10:f9:b3:e0:39:d3:e3:40:ca:5a:d5:48:07:
6a:37:8b:4f:4f:a6:9b:e8:8f:ad:b3:32:2d:0c:50:76:74:f6:
a7:c5:e4:0f:e6:9e:db:b0:22:4a:fc:19:e7:11:ca:7b:a2:fe:
ad:7f:67:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:12:57 2026 by rpki-client