Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
File: AvxcBk9RWcih-kBmyMuP9wFnHdI.mft (raw, json)
Hash identifier: VCa1iQRrjRng+cnuI9bfptT/0bKbW7KLBNMI6J8r/fk=
Subject key identifier: CB:6B:32:E1:BD:89:26:12:A3:71:04:19:FE:FB:EB:5D:A5:24:D2:85
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Certificate issuer: /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial: 01A0CA7DAFD0D04379F8FD1A377911975D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
Manifest number: 0F8A
Signing time: Tue 22 Sep 2026 19:00:29 +0000
Manifest this update: Tue 22 Sep 2026 19:00:29 +0000
Manifest next update: Wed 23 Sep 2026 19:00:29 +0000
Files and hashes: 1: AvxcBk9RWcih-kBmyMuP9wFnHdI.crl (hash: UGZISRyh57yvQ5Hgjlrcr8vH7xl8QPpZWif9vgTR/VM=)
2: aieeYAXcHf6iZv5A5jAAy7zNKfU.roa (hash: +Mh/5aHvThjQydJerYwnqxyvk8cU5lJddJlC7wDae6g=)
3: pV8pE_cOHYJYSxBxGWWyjX19c8g.asa (hash: eS3GUrvb75q/7iupe8O+vpHF97RDhum8PqoVzv8QV5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:af:d0:d0:43:79:f8:fd:1a:37:79:11:97:5d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Validity
Not Before: Sep 22 19:00:29 2026 GMT
Not After : Sep 23 19:00:29 2026 GMT
Subject: CN=cb6b32e1bd892612a3710419fefbeb5da524d285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:74:7c:67:9e:9b:42:c0:f8:42:47:b9:b6:c0:
ef:37:03:cb:d0:cf:57:76:2e:d6:82:8a:d6:c0:d2:
04:47:b8:71:88:6f:99:8b:b3:44:4a:1a:37:1c:a5:
a4:92:97:9d:7e:09:67:84:22:d7:45:51:5e:3e:d1:
a1:37:16:08:57:82:58:2a:d3:d5:60:f3:e2:df:00:
cf:13:1f:7b:59:4c:2a:4f:b0:f2:f4:ef:9b:10:d3:
4d:2c:fa:78:c4:f5:34:92:15:38:f7:3a:12:9e:f3:
96:a3:a6:e1:3a:ea:b7:80:a1:3b:66:72:07:85:bd:
a2:bc:a2:1f:19:ff:3e:43:28:a3:a9:89:d5:ae:41:
89:95:41:71:e9:f4:df:82:ad:f1:12:cc:61:6c:99:
05:68:0b:6e:be:59:bc:79:e4:4d:27:d0:c8:7e:e3:
31:5f:14:58:a6:e7:78:c8:b3:23:37:11:a5:f9:ee:
02:3f:95:0e:04:2d:ab:b1:41:f7:7e:f1:be:e1:92:
79:2f:e3:73:14:8b:a6:b3:85:70:86:8b:f3:28:ef:
6b:4c:f5:cf:41:f0:db:ce:9b:98:85:57:76:f2:98:
9d:a1:9d:61:88:33:7c:8b:2b:07:85:63:d7:5c:4b:
3a:b7:4c:3a:3d:e5:0d:1a:f8:4d:8f:a2:8c:10:d9:
e3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6B:32:E1:BD:89:26:12:A3:71:04:19:FE:FB:EB:5D:A5:24:D2:85
X509v3 Authority Key Identifier:
keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:80:4c:1f:f9:34:b3:70:3d:82:eb:f8:60:fd:8b:9b:31:d3:
a2:b5:49:90:0a:ba:65:a4:d3:89:9c:4a:ee:9d:0e:fb:42:04:
c8:ac:83:27:07:99:99:58:0c:c3:4c:1a:65:74:98:e3:81:dd:
b1:08:6f:6d:11:9b:19:9a:7e:a2:fb:a1:0b:c2:9c:bb:05:32:
ae:92:90:85:c2:e5:c9:f2:96:5d:44:65:1f:f7:70:08:7d:20:
a6:63:59:99:75:80:d4:ab:92:08:fc:52:94:29:cc:ce:32:ef:
f5:07:50:95:40:b6:36:d7:7a:02:b8:7d:5c:74:8d:b1:15:29:
ed:9b:98:8d:c1:70:71:92:9d:7f:6a:a6:e5:df:67:53:c1:cd:
12:fe:72:72:36:79:84:ef:19:d2:90:da:39:aa:ae:e0:2e:b2:
ab:15:8d:b0:47:09:46:66:fe:fe:6d:58:e7:fd:c6:bb:cc:f3:
a8:a3:15:82:d9:e2:a8:d3:72:eb:d3:17:59:16:6d:40:bf:b3:
a4:ee:55:52:b0:ed:8e:62:eb:dd:d4:8e:6b:f3:6b:2d:0f:a8:
92:8d:d5:d8:a4:83:34:3f:5a:00:fb:16:90:60:9f:17:35:27:
b3:77:12:89:a1:31:1a:5d:72:25:f6:a3:04:7a:6e:5d:eb:be:
ca:09:6c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:17 2026 by rpki-client