Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft
File: AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft (raw, json)
Hash identifier: bxHR7dOarZDfpY8JnDF9GyZaDCNMWfCgT0qL678zCLI=
Subject key identifier: 89:F4:F0:42:72:69:08:FF:BA:40:33:80:70:BF:0E:90:73:42:61:0A
Authority key identifier: 02:F5:46:89:04:A8:AA:7D:DB:5D:42:9E:A0:5E:8D:31:87:36:44:19
Certificate issuer: /CN=02f5468904a8aa7ddb5d429ea05e8d3187364419
Certificate serial: 019F91DA6316948E88F3F1AA68EFED13E646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvVGiQSoqn3bXUKeoF6NMYc2RBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft
Manifest number: 0363
Signing time: Fri 24 Jul 2026 02:00:36 +0000
Manifest this update: Fri 24 Jul 2026 02:00:36 +0000
Manifest next update: Sat 25 Jul 2026 02:00:36 +0000
Files and hashes: 1: AvVGiQSoqn3bXUKeoF6NMYc2RBk.crl (hash: eyza+wp0sa2gDeF+59Rlm/FWHpucAK3Wn3rjya+SJsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvVGiQSoqn3bXUKeoF6NMYc2RBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:63:16:94:8e:88:f3:f1:aa:68:ef:ed:13:e6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f5468904a8aa7ddb5d429ea05e8d3187364419
Validity
Not Before: Jul 24 02:00:36 2026 GMT
Not After : Jul 25 02:00:36 2026 GMT
Subject: CN=89f4f042726908ffba40338070bf0e907342610a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:8b:b9:bb:9f:6f:30:96:dd:ac:05:50:2e:
d5:6b:94:b7:cd:ee:47:68:0b:62:a7:34:e9:65:15:
f8:2a:b4:e1:87:99:33:b5:cc:ff:6e:ce:8e:44:68:
f0:e9:3d:2d:fa:91:e0:54:84:14:fc:7c:6c:a7:0e:
f8:a3:9b:87:cf:d5:d3:3f:d5:e7:13:80:81:60:62:
89:84:16:ab:cf:4b:2c:ba:5b:3f:73:38:4d:86:a7:
ea:69:ba:40:3a:da:8d:db:61:43:07:e6:66:1c:f6:
89:1d:59:e8:9e:7d:88:15:8d:4d:4d:e9:33:35:58:
78:94:ed:80:f7:84:b1:e2:28:36:0b:83:03:ad:c5:
de:90:74:e7:db:d6:b3:b0:41:f1:ad:0e:12:b2:fd:
c9:f2:dd:45:7e:c6:12:7d:25:d9:8e:72:6d:ef:cc:
95:79:34:ff:7f:0b:69:f8:55:80:9e:3b:37:71:dc:
75:1c:1e:bb:a5:5c:c0:99:ce:94:98:6b:eb:2a:25:
7b:cb:c7:00:ea:6b:1f:11:ed:46:d0:3d:c7:cc:42:
20:35:62:a7:f7:cb:f8:04:27:9c:50:ee:5c:5e:a8:
b9:27:4b:bd:84:24:b0:c0:03:07:5a:0f:c6:49:66:
2c:d0:64:b7:c3:1c:58:55:ca:b9:d0:21:31:bc:de:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F4:F0:42:72:69:08:FF:BA:40:33:80:70:BF:0E:90:73:42:61:0A
X509v3 Authority Key Identifier:
keyid:02:F5:46:89:04:A8:AA:7D:DB:5D:42:9E:A0:5E:8D:31:87:36:44:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvVGiQSoqn3bXUKeoF6NMYc2RBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:17:96:82:8c:37:89:44:c3:50:f8:48:24:99:c7:3a:d1:c6:
75:3c:8c:9e:fc:c3:f9:5b:ca:cb:d2:63:dc:02:32:aa:eb:97:
a9:37:28:bd:1a:1f:18:1e:d9:0a:33:74:0f:02:62:e6:49:0e:
b6:ae:3e:63:2f:55:88:3c:a6:82:74:79:98:bc:8c:61:ed:88:
b9:4b:ff:e0:30:28:e7:be:e2:ee:f7:7c:6b:8e:a0:24:dc:a7:
05:b5:56:3a:c5:a9:b9:97:de:c5:66:2d:26:3a:75:0d:3b:b4:
06:ca:e3:13:b0:ae:46:f2:1a:fb:91:35:a0:4f:e2:3f:29:56:
a0:1a:d3:a0:2f:9d:b0:15:69:22:5d:1d:db:03:82:9b:8e:62:
7b:bd:e1:f0:07:26:bb:e9:20:b1:7b:5b:0a:ae:95:57:a3:2e:
92:8f:f6:80:a4:7a:56:2e:52:5e:dd:4a:5d:f8:ea:ff:1d:2d:
b8:ba:86:01:45:1d:cb:0a:af:ea:90:9b:b9:c9:54:dd:4f:eb:
29:e7:d3:0f:6b:c6:e5:13:bb:24:4a:d7:b5:a6:17:63:1a:a3:
7b:8f:1e:51:81:d1:82:8c:08:81:f7:86:c4:3a:67:af:bb:1b:
3f:05:18:2f:db:d6:b7:cc:57:50:2b:43:72:1b:b3:57:5d:11:
5b:b3:c9:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2mMWlI6I8/GqaO/tE+ZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZjU0Njg5MDRhOGFhN2RkYjVkNDI5ZWEwNWU4ZDMxODcz
NjQ0MTkwHhcNMjYwNzI0MDIwMDM2WhcNMjYwNzI1MDIwMDM2WjAzMTEwLwYDVQQD
Eyg4OWY0ZjA0MjcyNjkwOGZmYmE0MDMzODA3MGJmMGU5MDczNDI2MTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvWLubufbzCW3awFUC7Va5S3ze5H
aAtipzTpZRX4KrThh5kztcz/bs6ORGjw6T0t+pHgVIQU/Hxspw74o5uHz9XTP9Xn
E4CBYGKJhBarz0ssuls/czhNhqfqabpAOtqN22FDB+ZmHPaJHVnonn2IFY1NTekz
NVh4lO2A94Sx4ig2C4MDrcXekHTn29azsEHxrQ4Ssv3J8t1FfsYSfSXZjnJt78yV
eTT/fwtp+FWAnjs3cdx1HB67pVzAmc6UmGvrKiV7y8cA6msfEe1G0D3HzEIgNWKn
98v4BCecUO5cXqi5J0u9hCSwwAMHWg/GSWYs0GS3wxxYVcq50CExvN5MnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIn08EJyaQj/ukAzgHC/DpBzQmEKMB8GA1UdIwQY
MBaAFAL1RokEqKp9211CnqBejTGHNkQZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXZWR2lRU29xbjNiWFVLZW9GNk5NWWMyUkJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zZDQ3ZGUtMzVjYS00Yjc1LWIwYjAt
YjlkY2RlMmY5NjAxLzEvQXZWR2lRU29xbjNiWFVLZW9GNk5NWWMyUkJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zZDQ3ZGUtMzVjYS00Yjc1LWIwYjAtYjlkY2RlMmY5NjAx
LzEvQXZWR2lRU29xbjNiWFVLZW9GNk5NWWMyUkJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBeWgow3
iUTDUPhIJJnHOtHGdTyMnvzD+VvKy9Jj3AIyquuXqTcovRofGB7ZCjN0DwJi5kkO
tq4+Yy9ViDymgnR5mLyMYe2IuUv/4DAo577i7vd8a46gJNynBbVWOsWpuZfexWYt
Jjp1DTu0BsrjE7CuRvIa+5E1oE/iPylWoBrToC+dsBVpIl0d2wOCm45ie73h8Acm
u+kgsXtbCq6VV6Muko/2gKR6Vi5SXt1KXfjq/x0tuLqGAUUdywqv6pCbuclU3U/r
KefTD2vG5RO7JErXtaYXYxqje48eUYHRgowIgfeGxDpnr7sbPwUYL9vWt8xXUCtD
chuzV10RW7PJcA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:10:35 2026 by rpki-client