Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
File: avL7pFrWUxpj0XNQFPaZgH9H-9w.mft (raw, json)
Hash identifier: Fon11oxUajbFNAHmmsxvuMIsN5OH0zkvPYPtGR3VPz0=
Subject key identifier: F4:78:EC:ED:30:D5:DE:62:4B:84:7D:25:FC:D5:86:73:E3:C5:DA:E4
Authority key identifier: 6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
Certificate issuer: /CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Certificate serial: 01A0D07F8A3C10B435FD43B65022ED236E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
Manifest number: 0A96
Signing time: Wed 23 Sep 2026 23:00:14 +0000
Manifest this update: Wed 23 Sep 2026 23:00:14 +0000
Manifest next update: Thu 24 Sep 2026 23:00:14 +0000
Files and hashes: 1: 1LA-pOZoA1tm-AvQur9VCLqaFes.asa (hash: mtqiDgdC7wzQ/w6E+BKecLxFnmJqkZRjGx3+QKxgnv4=)
2: avL7pFrWUxpj0XNQFPaZgH9H-9w.crl (hash: XfBX3bcBPDTorkIZKVtamSwZRlSTgHtq8OI118IDYug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:8a:3c:10:b4:35:fd:43:b6:50:22:ed:23:6e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Validity
Not Before: Sep 23 23:00:14 2026 GMT
Not After : Sep 24 23:00:14 2026 GMT
Subject: CN=f478eced30d5de624b847d25fcd58673e3c5dae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:13:7b:b5:82:8a:e0:c1:78:dc:be:c6:b0:
bb:58:1b:31:6f:93:c5:b6:47:f9:09:de:2e:6f:f0:
0a:a1:fc:b3:d0:04:76:b4:73:9a:06:d1:bf:c5:d8:
4a:e9:31:11:a2:ec:b0:95:dc:66:6e:1d:68:76:80:
af:c5:99:2f:a3:f8:78:ab:1c:7c:f0:18:40:a0:ff:
80:25:8e:78:ad:8f:da:82:9b:ef:c0:4a:bd:8e:69:
87:41:33:1f:60:45:85:ca:e3:4d:9e:19:65:70:92:
51:23:52:72:58:93:76:5f:57:9e:0a:50:66:09:22:
af:e5:f8:de:ed:ce:1b:fd:73:0e:5d:0f:e3:ec:ae:
31:c1:c3:ee:80:3e:3e:f9:f6:8d:68:36:a1:3f:3a:
d6:60:06:67:6e:5f:7a:71:84:b6:a1:77:23:5b:ef:
2b:55:7d:2c:cf:a9:19:c7:72:f3:01:2a:2a:fd:5d:
bc:64:70:fa:ca:22:21:7e:b4:98:b5:4d:76:10:c7:
ca:76:d2:50:ca:72:22:ea:32:88:e3:22:a8:fa:26:
dd:4e:66:cf:1b:0c:ae:ea:82:ab:a1:d4:e2:78:55:
cf:93:41:bc:e5:88:b6:4c:3d:08:69:54:a3:0f:8b:
31:56:2b:f3:8e:07:e3:02:f3:66:1f:a9:0c:12:ab:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:78:EC:ED:30:D5:DE:62:4B:84:7D:25:FC:D5:86:73:E3:C5:DA:E4
X509v3 Authority Key Identifier:
keyid:6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f1:71:de:91:26:24:c8:69:69:ee:af:d2:80:97:0f:6a:ef:
b7:94:23:bf:82:ee:d3:2a:52:37:20:7a:ec:c0:59:d4:30:07:
f1:73:e3:6f:7e:72:1e:de:5a:cb:05:39:9b:a0:6c:f8:10:4a:
56:b3:f4:ae:0d:e8:c2:be:90:6f:f5:bf:b2:ea:ef:ff:2c:55:
f4:3f:8e:6e:ff:5d:68:3d:ea:2a:53:8e:76:f0:b2:9a:1a:88:
52:e3:fa:32:e8:b4:47:0f:2c:54:8f:e7:0b:4d:8e:08:4c:c1:
02:6a:f6:c3:f4:9d:46:e5:08:c2:ad:74:a6:a5:b4:63:dc:37:
6f:58:fb:ae:ff:49:7d:de:af:09:0b:29:9f:77:48:65:80:8d:
79:0e:34:98:98:52:28:f7:37:0d:d0:1b:c4:3f:f2:c7:1f:c1:
c2:6f:a8:0e:81:0e:5a:c0:6a:fc:10:65:37:f0:05:78:11:a7:
59:9c:75:ca:08:f9:4e:a2:23:90:27:30:fe:ae:92:66:fc:92:
25:ad:9b:86:fc:29:04:9b:57:68:ac:ad:31:fd:24:8b:79:d4:
ba:89:34:17:74:7d:13:28:f8:98:67:56:b2:9a:cb:e2:a5:8f:
c8:61:72:2f:fc:86:a2:ee:3e:e4:1d:97:9a:f0:03:08:e1:56:
21:fc:62:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:28:17 2026 by rpki-client