Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
File: AV8u9ttQKZTXsMjknNSnd725NXI.mft (raw, json)
Hash identifier: kM+gbigBzxYesx+fHM+s3tzDE5PM1BFcFmTGBNY2YLE=
Subject key identifier: 20:F7:EE:E3:CD:81:F7:3A:A2:13:72:52:CD:83:D7:00:EE:45:9E:A1
Authority key identifier: 01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
Certificate issuer: /CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Certificate serial: 019E1EA32CF43CB55AD495930205A8FFC1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
Manifest number: 15D4
Signing time: Wed 13 May 2026 00:01:10 +0000
Manifest this update: Wed 13 May 2026 00:01:10 +0000
Manifest next update: Thu 14 May 2026 00:01:10 +0000
Files and hashes: 1: AV8u9ttQKZTXsMjknNSnd725NXI.crl (hash: qcZDFB/QEXs3El9UH1IIZHGWv6/7SknA3TTvYb/0bpM=)
2: zO6UKEO2UsX-uJJtYaV0kqdh2lk.roa (hash: BNJ+i4qsWrDUg9fXwYJtm2jlZYe3Zjo1dqX8YeGBA8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:2c:f4:3c:b5:5a:d4:95:93:02:05:a8:ff:c1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Validity
Not Before: May 13 00:01:10 2026 GMT
Not After : May 14 00:01:10 2026 GMT
Subject: CN=20f7eee3cd81f73aa2137252cd83d700ee459ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:ba:d3:9a:72:99:bf:24:68:8c:e2:f3:5d:
73:f9:e5:0e:01:05:01:98:56:45:f5:e1:7e:6b:14:
f3:b1:d6:23:d7:09:ad:f0:bb:e5:79:b7:f6:e8:3e:
54:97:f4:7d:63:4b:4a:fb:f3:b8:9b:70:87:de:d6:
86:e4:47:e8:a7:6b:90:c0:5b:1e:2a:c3:bf:b9:62:
d3:dd:6b:98:7c:c1:f5:4a:dc:e3:86:3a:d6:5b:8d:
97:7e:ed:03:2e:50:7d:61:52:a3:b1:a6:c1:58:de:
c8:81:d3:b3:c2:cb:d6:fb:97:1f:40:7d:6c:ac:88:
d0:15:4e:40:89:aa:11:7e:6d:90:20:e1:f2:70:6e:
da:45:c8:bf:94:d1:f7:5f:d5:1e:d9:28:bc:9c:f0:
01:2d:18:39:ca:5b:86:62:14:4d:18:50:0b:0c:09:
c1:04:16:82:b5:ee:3c:3e:0e:32:45:fb:3b:ba:5f:
72:87:f6:37:2c:75:a0:46:a6:b3:bb:34:b4:9e:d9:
61:ed:30:07:2c:a9:7c:c8:d7:8f:c3:0d:ef:7d:67:
e9:3e:40:bc:2a:25:61:61:3d:7a:ec:8c:4b:73:c4:
ec:a5:70:39:14:19:ca:9e:d0:56:1a:ee:92:ca:af:
48:a1:71:0d:56:6c:58:b4:cc:27:6c:9e:4a:ec:5f:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F7:EE:E3:CD:81:F7:3A:A2:13:72:52:CD:83:D7:00:EE:45:9E:A1
X509v3 Authority Key Identifier:
keyid:01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c5:59:8f:57:87:db:3e:72:f0:b8:bc:f2:17:63:de:85:af:
f1:5e:8c:5c:82:28:9d:d8:04:76:49:87:8a:32:ed:79:12:b1:
6e:1a:ad:f3:7d:83:f2:6c:0f:bf:a0:27:b9:5b:2c:02:1b:88:
f4:28:f2:56:2c:34:02:14:0d:ad:5c:dd:b0:e5:af:d1:a1:a5:
fc:22:1f:b0:14:16:cc:9a:2c:ac:2e:d6:ef:6e:4a:a5:0b:5d:
46:fb:e6:ef:8b:6a:fa:0b:25:d4:1d:85:58:c1:04:be:91:b1:
28:37:76:f1:d0:36:4a:3d:a3:d8:b3:3e:b2:ea:c9:07:6f:64:
58:5d:03:ea:f8:b5:5b:88:ac:d0:38:57:a3:f1:e8:85:22:21:
8b:d4:34:09:1b:2c:b7:e4:10:88:ab:c8:a3:e8:61:18:f8:c5:
98:c9:8f:c0:c3:d0:5a:64:fc:14:60:e3:42:12:8a:83:b0:8b:
5f:3e:55:85:fd:f6:77:cc:52:ec:af:42:d4:7f:a8:4b:a7:7c:
4d:24:43:16:2f:71:4e:22:9b:e4:40:bd:c8:b1:13:64:79:8d:
50:4d:b0:ee:2a:de:b5:ff:e4:c0:4c:a4:2c:c1:d6:4b:63:77:
39:94:25:6a:3c:bb:0b:65:88:32:be:11:af:aa:86:3e:6e:ba:
f3:d7:5f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:32:04 2026 by rpki-client