Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
File: aVyQxtYzPUdic9L9bIg6oq2o0RU.mft (raw, json)
Hash identifier: ag0Ea55VHxaznLaVXxhVyYEas/n/qSduXOoSzYLmPo0=
Subject key identifier: 0F:1B:88:CE:A1:66:0E:4E:5E:A7:55:D2:F5:B2:A5:91:11:92:E6:31
Authority key identifier: 69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
Certificate issuer: /CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Certificate serial: 01A0DD971ABA0E9B9E4A1C81FF85128E4719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
Manifest number: 028B
Signing time: Sat 26 Sep 2026 12:01:02 +0000
Manifest this update: Sat 26 Sep 2026 12:01:02 +0000
Manifest next update: Sun 27 Sep 2026 12:01:02 +0000
Files and hashes: 1: 6BKU6BQ0rm_dpv7UW41lofeDVAk.roa (hash: JSPR6ApMOGB4YeRrASVSoxpHimkIGb0YoSuAw+KKkoI=)
2: aVyQxtYzPUdic9L9bIg6oq2o0RU.crl (hash: pvBzG1OyGL8I8lzkxQgtriHJ+yHnu8EW/rzYHMuMGIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:1a:ba:0e:9b:9e:4a:1c:81:ff:85:12:8e:47:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Validity
Not Before: Sep 26 12:01:02 2026 GMT
Not After : Sep 27 12:01:02 2026 GMT
Subject: CN=0f1b88cea1660e4e5ea755d2f5b2a5911192e631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:1f:3e:c9:72:65:76:d0:fd:a4:44:5c:d7:
8a:ca:78:2a:d6:e6:ec:c2:ed:6e:1c:23:d2:e3:98:
42:4c:12:9a:66:01:08:fd:89:2f:f0:1f:ea:d6:d0:
20:af:39:62:b6:4b:a1:66:7d:5e:69:3a:0d:ec:1f:
5d:67:ad:52:e2:67:58:2f:bb:87:2d:06:b6:80:8f:
6c:45:01:72:7e:e7:98:7c:63:d4:ed:fa:b1:a2:ed:
b0:2b:a2:c2:fb:19:3c:7d:29:72:80:ba:86:89:6c:
85:12:60:1f:63:1a:37:a1:cc:49:8f:82:07:f6:7c:
18:b2:c4:fe:d8:b1:27:3c:12:71:9f:b7:8c:5f:3e:
7e:1a:78:16:ee:f5:ba:4a:e5:7c:c0:01:63:f4:be:
8c:0e:bb:d6:11:79:a6:87:2e:b7:0e:64:75:a4:93:
20:6f:6d:b5:be:e2:f1:48:f3:11:cb:15:5b:9f:47:
11:80:4b:0b:fa:ba:26:10:26:f1:d3:92:19:d1:d1:
4d:2c:8b:2b:91:15:e1:31:ab:45:79:bd:3e:e0:da:
2d:43:e1:ea:63:5d:9a:93:c6:d7:42:4b:d2:83:4c:
d2:63:65:40:e2:17:a5:c7:eb:a5:8f:ad:3c:8d:ca:
4d:98:59:3f:03:ae:dd:b6:15:2e:a2:6d:f1:d8:21:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1B:88:CE:A1:66:0E:4E:5E:A7:55:D2:F5:B2:A5:91:11:92:E6:31
X509v3 Authority Key Identifier:
keyid:69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f6:2b:12:13:17:b7:97:d6:37:52:77:ae:dd:b9:c6:6b:6f:
df:dd:0f:59:22:0e:05:52:56:e1:15:42:25:62:b4:2c:5b:59:
1b:16:89:4c:40:5e:8f:35:60:c9:e5:f0:c3:0d:cd:b8:bf:d6:
47:8f:9b:e1:6e:1b:ca:ff:9a:2d:da:26:c3:84:51:87:95:c4:
5d:bd:09:cb:f8:15:35:2e:ae:de:2c:6c:a3:84:e1:74:c7:36:
70:88:72:5a:4a:74:b7:2c:6d:e8:9a:46:12:47:a7:cd:6e:d6:
aa:b6:c7:c4:0c:09:68:aa:7b:2f:a8:c5:3d:ad:d6:39:dd:de:
76:50:4b:d6:fe:53:db:d6:90:d6:ce:ed:2c:29:3f:70:45:41:
05:34:53:1f:3b:0b:1a:31:92:d3:5a:d8:86:c4:85:0e:20:a5:
a8:66:bc:3b:be:4b:2c:97:4e:a1:0f:9b:35:13:7a:80:09:fe:
28:2c:48:45:a1:8e:65:b0:3c:b1:3f:8f:a3:8b:99:d5:23:0b:
bf:75:a9:d3:32:fe:52:0f:f5:0a:e4:ad:79:1b:44:d7:97:e4:
1b:7b:d6:bd:e4:02:b7:c5:5d:4f:f3:99:66:37:1a:00:46:f4:
ee:fb:7c:0d:9d:3d:ae:7a:f2:de:f4:62:c4:8e:24:0f:27:0c:
2c:8d:97:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:59:10 2026 by rpki-client