Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
File: AV8u9ttQKZTXsMjknNSnd725NXI.mft (raw, json)
Hash identifier: +5QgJsZRbWvM4QS1fCpEdaZTIr8qYjfHfo/tC7hvEUI=
Subject key identifier: CC:CC:F0:2E:96:8A:3C:CA:94:14:48:AC:14:BB:75:FA:46:DD:6A:D9
Authority key identifier: 01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
Certificate issuer: /CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Certificate serial: 019D27724593A9158D2369C2E924D7270480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
Manifest number: 1554
Signing time: Thu 26 Mar 2026 00:01:33 +0000
Manifest this update: Thu 26 Mar 2026 00:01:33 +0000
Manifest next update: Fri 27 Mar 2026 00:01:33 +0000
Files and hashes: 1: AV8u9ttQKZTXsMjknNSnd725NXI.crl (hash: s3UCv0/uwMS62s70Nyus2kI5P0CuZZqTdXa8fZOCMgA=)
2: zO6UKEO2UsX-uJJtYaV0kqdh2lk.roa (hash: BNJ+i4qsWrDUg9fXwYJtm2jlZYe3Zjo1dqX8YeGBA8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:45:93:a9:15:8d:23:69:c2:e9:24:d7:27:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Validity
Not Before: Mar 26 00:01:33 2026 GMT
Not After : Mar 27 00:01:33 2026 GMT
Subject: CN=ccccf02e968a3cca941448ac14bb75fa46dd6ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:ae:61:e1:48:48:81:dc:0e:9a:86:40:63:
eb:50:f4:77:d4:37:c9:01:2d:33:39:34:5b:63:99:
41:3e:4a:a6:ba:26:12:ce:c5:15:e4:6f:e7:e8:07:
19:c8:f8:79:05:98:7f:0d:f4:5a:9a:16:b0:3a:a3:
72:ea:9a:20:d4:ab:f4:7f:8d:62:ec:eb:42:a3:b3:
c5:74:89:3c:05:d0:bc:e3:92:aa:d8:71:39:d6:3f:
8a:95:86:08:b8:c3:7e:23:5f:a5:c0:a2:17:80:d1:
52:4a:b0:56:35:81:ff:07:63:0d:b2:61:02:ac:18:
c5:8a:e0:65:34:ce:67:05:fa:6a:18:c4:1f:73:54:
85:e8:60:8b:a9:df:f0:5e:06:f2:d8:b4:3d:de:1e:
12:64:d1:d4:9c:22:57:0e:49:02:e6:32:5d:26:db:
a9:e1:5d:4c:e6:d7:c1:3e:ee:36:ae:45:02:99:d4:
18:4b:3a:ee:2c:9b:df:b7:94:f8:54:17:45:50:f4:
01:f9:f5:bd:6d:f7:87:51:40:4d:16:3c:9a:5e:0c:
7a:b1:24:21:31:0a:95:e8:2e:d6:fd:5b:f2:31:dc:
b4:b9:fb:08:7d:01:d7:ec:9b:9b:cd:7c:de:eb:e8:
4a:f2:e1:20:6e:3a:a2:20:07:b0:37:fb:87:7e:c0:
bc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CC:F0:2E:96:8A:3C:CA:94:14:48:AC:14:BB:75:FA:46:DD:6A:D9
X509v3 Authority Key Identifier:
keyid:01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:de:b8:47:29:91:99:2d:05:63:e6:5a:79:22:58:ef:3e:5e:
c8:3b:b1:ed:36:95:a8:bd:c0:bd:b2:ab:05:7d:d6:f3:90:c1:
bb:77:fd:db:7e:d3:eb:ab:1d:38:6c:02:8c:28:8a:b3:06:6e:
c8:cd:4e:86:c2:35:40:13:06:1f:c8:28:8b:d8:0d:2c:5d:46:
4c:c9:e2:0d:b4:35:58:2d:8e:00:1d:39:92:31:4c:a1:e9:09:
84:ca:82:95:bb:96:2d:f4:55:77:f7:5c:14:e6:63:02:f9:69:
92:d3:c8:14:6a:ef:aa:54:15:1c:da:ab:5f:42:75:a2:45:8a:
8d:ee:4b:47:d5:a9:0d:d8:0b:ae:8f:59:6f:7e:c6:d1:04:ca:
e0:e7:1f:7b:fb:e9:0c:45:7b:1d:eb:6a:de:b9:3e:eb:0a:9b:
6b:a8:92:b3:9a:3e:51:09:59:77:08:6c:55:d1:cc:1c:76:f9:
9c:bc:73:ef:a5:bd:c6:36:88:54:c9:d6:5c:9a:2a:39:98:34:
2f:0f:b2:e4:13:61:0c:59:b1:6e:20:b5:bc:55:18:7e:4d:ac:
79:a2:15:8a:b7:da:63:e7:ce:97:e3:c3:00:55:ed:e1:b9:83:
b4:85:ab:dc:c2:c3:86:2e:34:47:2c:1e:85:9b:3e:ee:13:53:
f9:e1:ab:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:02 2026 by rpki-client