Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft
File: AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft (raw, json)
Hash identifier: mAwGD3OMGo02/1ly1Ml9c/K0pJZ36AbFIzPMoYAhadc=
Subject key identifier: BB:3F:A9:25:D6:90:44:B6:30:A3:64:E6:16:E0:42:04:73:37:0B:67
Authority key identifier: 02:F5:46:89:04:A8:AA:7D:DB:5D:42:9E:A0:5E:8D:31:87:36:44:19
Certificate issuer: /CN=02f5468904a8aa7ddb5d429ea05e8d3187364419
Certificate serial: 01A0CAB48EAF3CFA2E3EB516688DE787B8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvVGiQSoqn3bXUKeoF6NMYc2RBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft
Manifest number: 0405
Signing time: Tue 22 Sep 2026 20:00:25 +0000
Manifest this update: Tue 22 Sep 2026 20:00:25 +0000
Manifest next update: Wed 23 Sep 2026 20:00:25 +0000
Files and hashes: 1: AvVGiQSoqn3bXUKeoF6NMYc2RBk.crl (hash: oirs0kuD16fGMBKINqlpFvE51mfwJjhYg6XxX3oFH0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvVGiQSoqn3bXUKeoF6NMYc2RBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:8e:af:3c:fa:2e:3e:b5:16:68:8d:e7:87:b8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f5468904a8aa7ddb5d429ea05e8d3187364419
Validity
Not Before: Sep 22 20:00:25 2026 GMT
Not After : Sep 23 20:00:25 2026 GMT
Subject: CN=bb3fa925d69044b630a364e616e0420473370b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:b8:ca:6c:8d:ef:85:97:a1:47:2b:61:15:
33:0e:59:c6:b4:b0:cc:af:b7:76:85:f6:31:48:fe:
aa:19:fb:f6:8e:56:1a:2a:b0:f1:a9:95:8b:cb:1b:
2c:ca:f0:8c:4d:a0:50:9a:4a:0c:ed:6e:f9:43:45:
5f:bd:64:10:6c:99:3f:16:f7:4d:9e:b8:01:f5:ac:
60:12:b0:8d:af:e6:08:e5:e9:40:10:c1:8d:86:17:
2f:fb:85:91:e6:0e:8c:f0:ad:ae:50:cd:0e:e1:53:
ea:4a:8c:f6:40:52:0a:35:79:2f:09:7b:95:a7:34:
da:a7:0f:a8:b5:f7:a7:43:77:2c:68:4d:7f:fe:64:
8d:bd:50:39:bd:cc:8b:a0:c7:ea:9e:83:36:7e:96:
4c:28:db:c9:d4:b3:50:5d:f4:d2:6d:b4:05:f5:9b:
f8:ef:1b:31:c7:fc:f3:52:0a:11:c5:e4:0a:59:2f:
b8:c9:75:24:f7:19:45:b6:f2:2a:eb:df:85:c0:8b:
dc:c7:40:0e:fc:13:6f:d4:84:3b:fa:b0:7e:21:34:
ed:e2:89:cf:8d:11:0e:ae:3f:8c:29:85:24:06:89:
7c:56:2e:03:14:5c:23:29:c4:81:6d:7b:f9:19:52:
7e:b2:9b:c3:77:f8:db:97:78:dd:57:10:cf:7f:4a:
34:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3F:A9:25:D6:90:44:B6:30:A3:64:E6:16:E0:42:04:73:37:0B:67
X509v3 Authority Key Identifier:
keyid:02:F5:46:89:04:A8:AA:7D:DB:5D:42:9E:A0:5E:8D:31:87:36:44:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvVGiQSoqn3bXUKeoF6NMYc2RBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/3d47de-35ca-4b75-b0b0-b9dcde2f9601/1/AvVGiQSoqn3bXUKeoF6NMYc2RBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bc:46:e5:77:5d:6a:05:84:af:e6:4d:97:41:5e:f8:4e:d8:
10:e7:3d:ef:5e:c1:27:42:ad:6c:0f:31:3e:29:e7:0e:8f:a1:
ea:c8:c3:f9:93:c3:d4:9f:9c:85:25:bd:fb:ba:9e:c7:e7:a0:
49:25:4d:97:53:6e:64:a2:2e:6b:53:fe:93:7c:87:30:4f:3c:
ee:cc:6a:63:5d:55:b0:9a:34:95:14:ce:13:f4:e8:9f:70:b6:
c2:d9:30:ee:bc:ba:9f:1b:2b:2d:26:a6:de:c4:cf:e7:21:59:
8b:7f:27:8c:c8:59:91:0b:ec:3b:8d:03:a8:93:b7:4c:d7:12:
ad:cd:19:7e:5f:99:e7:45:7a:8c:a5:fa:db:73:4f:09:c4:c7:
3f:13:d0:36:6c:01:37:99:90:88:ff:b5:0e:b9:77:15:99:8e:
83:9b:31:89:a6:a9:86:b0:83:ce:c0:10:b2:c6:b5:9d:8f:13:
1f:3e:47:48:d9:c6:ff:f3:7a:19:4d:86:4d:74:00:e2:2c:f6:
12:09:74:83:3c:84:07:fc:8d:b2:de:7d:ba:7a:01:ee:ac:87:
24:5c:c0:af:49:7b:87:b8:03:11:17:8f:73:94:c9:26:ce:90:
94:06:ed:4a:21:d2:72:a4:d4:d6:e3:2b:19:91:11:8d:c3:dd:
05:61:89:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKtI6vPPouPrUWaI3nh7jfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZjU0Njg5MDRhOGFhN2RkYjVkNDI5ZWEwNWU4ZDMxODcz
NjQ0MTkwHhcNMjYwOTIyMjAwMDI1WhcNMjYwOTIzMjAwMDI1WjAzMTEwLwYDVQQD
EyhiYjNmYTkyNWQ2OTA0NGI2MzBhMzY0ZTYxNmUwNDIwNDczMzcwYjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlW4ymyN74WXoUcrYRUzDlnGtLDM
r7d2hfYxSP6qGfv2jlYaKrDxqZWLyxssyvCMTaBQmkoM7W75Q0VfvWQQbJk/FvdN
nrgB9axgErCNr+YI5elAEMGNhhcv+4WR5g6M8K2uUM0O4VPqSoz2QFIKNXkvCXuV
pzTapw+otfenQ3csaE1//mSNvVA5vcyLoMfqnoM2fpZMKNvJ1LNQXfTSbbQF9Zv4
7xsxx/zzUgoRxeQKWS+4yXUk9xlFtvIq69+FwIvcx0AO/BNv1IQ7+rB+ITTt4onP
jREOrj+MKYUkBol8Vi4DFFwjKcSBbXv5GVJ+spvDd/jbl3jdVxDPf0o0BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLs/qSXWkES2MKNk5hbgQgRzNwtnMB8GA1UdIwQY
MBaAFAL1RokEqKp9211CnqBejTGHNkQZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXZWR2lRU29xbjNiWFVLZW9GNk5NWWMyUkJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zZDQ3ZGUtMzVjYS00Yjc1LWIwYjAt
YjlkY2RlMmY5NjAxLzEvQXZWR2lRU29xbjNiWFVLZW9GNk5NWWMyUkJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zZDQ3ZGUtMzVjYS00Yjc1LWIwYjAtYjlkY2RlMmY5NjAx
LzEvQXZWR2lRU29xbjNiWFVLZW9GNk5NWWMyUkJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrxG5Xdd
agWEr+ZNl0Fe+E7YEOc9717BJ0KtbA8xPinnDo+h6sjD+ZPD1J+chSW9+7qex+eg
SSVNl1NuZKIua1P+k3yHME887sxqY11VsJo0lRTOE/Ton3C2wtkw7ry6nxsrLSam
3sTP5yFZi38njMhZkQvsO40DqJO3TNcSrc0Zfl+Z50V6jKX623NPCcTHPxPQNmwB
N5mQiP+1Drl3FZmOg5sxiaaphrCDzsAQssa1nY8THz5HSNnG//N6GU2GTXQA4iz2
Egl0gzyEB/yNst59unoB7qyHJFzAr0l7h7gDERePc5TJJs6QlAbtSiHScqTU1uMr
GZERjcPdBWGJJQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:42:34 2026 by rpki-client