Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
File: AvViYsnox9E0TfKw-MJdoTq9YiI.mft (raw, json)
Hash identifier: y0WkYaZeXd3EgFbwDspzwdgHIDxP7raD5yJuKLzXoSE=
Subject key identifier: 93:E4:32:E1:AC:9C:79:DC:07:EA:3A:5F:72:DB:9E:38:0D:3E:31:42
Authority key identifier: 02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
Certificate issuer: /CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Certificate serial: 019D27E05694526FE6F663BFF2C11602BA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
Manifest number: 0AD6
Signing time: Thu 26 Mar 2026 02:01:46 +0000
Manifest this update: Thu 26 Mar 2026 02:01:46 +0000
Manifest next update: Fri 27 Mar 2026 02:01:46 +0000
Files and hashes: 1: AvViYsnox9E0TfKw-MJdoTq9YiI.crl (hash: nyKQNTSAJ2Tp00zxG0W/rF9BUxe8Z/WV/1/DZ/w331g=)
2: wyy3rlzUUMeQq8PIhXfkhcAt_40.roa (hash: gHG1HjkTZWK4eYCE7NI/fkalfX+p2e1lN/BRfBXmaKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:56:94:52:6f:e6:f6:63:bf:f2:c1:16:02:ba:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Validity
Not Before: Mar 26 02:01:46 2026 GMT
Not After : Mar 27 02:01:46 2026 GMT
Subject: CN=93e432e1ac9c79dc07ea3a5f72db9e380d3e3142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:d1:35:80:46:f3:ee:0f:d8:8a:66:4d:26:
8b:94:15:8b:ca:04:e7:8d:af:83:98:68:96:5a:c4:
b9:61:99:d3:c9:83:7c:cd:da:e1:0a:4e:5e:d3:74:
57:ce:98:0b:8f:8a:2d:a7:de:f1:e3:c7:5a:5a:6a:
18:28:ee:c6:f6:39:51:c0:40:67:81:26:45:f1:6c:
4b:6b:ac:46:ca:4d:42:8a:8c:aa:30:2f:21:f4:e1:
7c:59:af:26:80:24:99:96:19:b7:20:f5:d2:60:2e:
e8:f5:91:bf:cd:9c:cf:30:f5:31:1b:1e:d6:b4:a1:
bd:b7:8d:b7:30:c4:35:51:7d:18:3f:9d:88:f4:d4:
26:89:39:0c:3e:9b:23:4a:52:01:83:bb:15:e3:38:
6d:d1:00:d5:c0:2c:cf:fc:e4:bb:1b:20:8d:71:5d:
a7:1c:96:db:5c:04:57:29:35:73:8a:bc:b3:7b:d6:
a7:32:c5:dd:4e:70:97:31:3c:3a:b7:98:0c:39:f0:
75:83:fd:13:7f:54:6b:6e:bc:fb:e2:36:44:be:91:
11:35:3a:18:d2:c8:9b:ee:07:10:ec:84:43:38:34:
7f:e9:3c:2b:0a:93:31:81:6c:81:5a:63:ed:e7:46:
b8:88:11:95:51:22:e8:70:34:6e:46:fc:70:bd:79:
2a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E4:32:E1:AC:9C:79:DC:07:EA:3A:5F:72:DB:9E:38:0D:3E:31:42
X509v3 Authority Key Identifier:
keyid:02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:72:ee:67:08:9e:56:39:fb:fa:c3:bc:93:0d:a4:d0:e8:dd:
69:b8:bf:18:4c:1a:d1:7e:b8:1e:41:05:1e:58:ce:91:80:86:
f0:96:55:d3:84:be:9d:65:b7:01:17:5c:49:ba:5d:ab:6a:dd:
40:a6:1b:ea:c9:73:07:e8:04:0b:ae:2d:4a:7c:73:f4:4f:37:
7d:1c:8e:07:10:86:7b:84:16:b4:ca:36:67:9a:8e:03:6c:73:
55:1d:e8:a6:ae:03:e0:61:47:7b:2f:7f:9f:dd:6c:53:27:77:
41:a5:0e:96:a1:2a:e4:ea:e5:d3:d7:3e:41:be:f7:4f:d6:b5:
01:64:aa:37:7e:81:6f:83:7e:26:38:ef:a8:bc:eb:90:02:50:
3f:62:68:03:23:26:0d:e9:a7:4a:39:1e:00:3e:33:1d:55:2d:
40:c3:f3:49:34:5c:44:d1:0e:4c:95:d3:b7:79:b0:ad:88:f4:
fb:67:ea:52:c8:6c:9b:59:38:ec:29:49:b9:2a:d0:12:05:15:
ad:a8:c2:0c:d0:18:ad:0b:93:70:74:3d:e3:f1:15:c5:d8:8f:
3f:54:57:62:ba:74:9c:44:07:2b:50:56:61:1e:f4:18:e6:ca:
15:05:4c:ea:09:f0:d7:86:05:77:49:8d:31:27:a3:fb:b7:72:
b1:5d:5a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:35 2026 by rpki-client