Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft
File: AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft (raw, json)
Hash identifier: ftTfQ/NEIinTPPgnxNjjU5QcwqewqAjgSg6s4b7OBb0=
Subject key identifier: 7B:C3:17:C9:AD:C2:C2:7D:19:F1:81:E9:03:3C:55:96:40:76:41:24
Authority key identifier: 02:F5:46:89:04:A8:AA:7D:DB:5D:42:9E:A0:5E:8D:31:87:36:44:19
Certificate issuer: /CN=02f5468904a8aa7ddb5d429ea05e8d3187364419
Certificate serial: 019E1D2226A00C236668585E2505F4CF3C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvVGiQSoqn3bXUKeoF6NMYc2RBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft
Manifest number: 02A2
Signing time: Tue 12 May 2026 17:00:37 +0000
Manifest this update: Tue 12 May 2026 17:00:37 +0000
Manifest next update: Wed 13 May 2026 17:00:37 +0000
Files and hashes: 1: AvVGiQSoqn3bXUKeoF6NMYc2RBk.crl (hash: yc+Qpg7FqSEjaLB0MAsCvQBcZBxFqZD2fL+am2h9nhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvVGiQSoqn3bXUKeoF6NMYc2RBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:26:a0:0c:23:66:68:58:5e:25:05:f4:cf:3c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f5468904a8aa7ddb5d429ea05e8d3187364419
Validity
Not Before: May 12 17:00:37 2026 GMT
Not After : May 13 17:00:37 2026 GMT
Subject: CN=7bc317c9adc2c27d19f181e9033c559640764124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:6c:7e:d4:dd:f5:44:fa:ca:d6:90:e1:22:
23:cc:dc:9c:08:f8:3a:1a:59:92:48:47:ab:ec:e5:
4f:bf:aa:78:2c:8b:49:0d:e3:9c:24:ed:ac:54:3e:
a8:d3:dc:28:cc:be:1e:1e:eb:3e:e2:ea:95:ef:91:
16:a4:de:0a:d3:c4:3a:b6:d5:27:b2:b3:88:1c:e1:
2d:4a:87:fe:90:3f:ae:14:78:69:70:95:72:72:5b:
99:86:4a:12:99:43:fb:c2:0d:ce:5a:2a:a5:f6:3a:
2d:d8:d1:a8:9e:df:27:34:7d:7f:23:d8:03:4e:f9:
fd:11:5a:22:1b:a3:60:e4:2e:5f:96:32:42:c9:0d:
4d:4a:68:d5:e7:82:78:6f:bb:1b:1e:2a:cf:7e:2e:
df:3c:1f:ee:da:d7:08:0a:c3:1e:34:af:46:ac:2b:
12:f0:a4:48:4b:09:a5:61:8d:dd:e2:d7:fb:eb:33:
bb:26:a5:0a:72:73:f3:4e:71:ac:35:d1:6f:ae:61:
c9:c6:72:b7:c8:5d:f1:13:23:37:2b:70:c9:f6:cc:
7c:37:5e:e0:87:91:90:4e:94:bf:74:cc:07:26:e7:
5d:d9:85:48:00:b6:2e:e2:70:05:4d:79:63:05:16:
88:be:92:48:45:0d:5a:22:f6:06:7f:b6:97:4e:ef:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C3:17:C9:AD:C2:C2:7D:19:F1:81:E9:03:3C:55:96:40:76:41:24
X509v3 Authority Key Identifier:
keyid:02:F5:46:89:04:A8:AA:7D:DB:5D:42:9E:A0:5E:8D:31:87:36:44:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvVGiQSoqn3bXUKeoF6NMYc2RBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c2:9d:d9:00:ae:84:0b:e6:62:c2:8a:ac:ac:73:e5:4d:d3:
09:46:f3:1b:79:80:ac:ca:d2:a0:36:12:73:d2:ae:11:61:a5:
a1:2a:52:e8:d8:34:cc:d8:c9:48:a2:46:80:49:a7:53:37:02:
cb:0c:87:44:1f:d0:0f:b5:c1:d9:7f:63:18:d0:75:6f:f5:b9:
7b:3a:f2:6b:a0:64:6f:a7:b4:95:43:67:94:d3:0e:50:83:7e:
dd:cf:bb:fb:29:d5:fd:7b:64:4c:63:23:c1:50:5f:f1:74:1b:
3a:d8:64:75:c4:e3:b1:aa:eb:f2:af:14:ba:bb:da:2e:e0:e1:
09:bb:d6:e1:32:3b:76:51:29:f8:97:dd:d8:5d:66:11:9e:69:
13:76:89:d3:ec:5a:72:00:a2:c4:4a:2b:fb:17:90:d7:77:6e:
fb:b6:95:c3:54:39:fc:5b:4f:d6:13:74:15:c1:23:9e:16:db:
4b:24:0c:bf:dc:52:5b:01:5f:6f:af:71:e6:a7:f9:ef:f3:26:
d2:a0:ec:33:da:61:be:aa:94:8e:8a:ea:4e:a3:ce:2b:6c:88:
95:93:14:cb:b0:c1:d7:88:f1:27:bf:f3:d8:11:03:6d:1b:13:
d2:eb:cf:8f:90:53:55:e4:a1:ea:a7:92:d1:d4:03:14:54:b7:
70:b1:12:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:30:49 2026 by rpki-client