Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
File: avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft (raw, json)
Hash identifier: 2jAvIRFIlmAeztbFIaOi83DJzP576KIOWPeivh+Sif4=
Subject key identifier: 37:16:1F:03:4B:16:D5:DA:AA:DE:18:0D:1D:D4:33:9B:76:F7:48:EE
Authority key identifier: 6A:F2:A6:6A:99:71:E4:77:EF:FD:5F:08:87:A2:9A:2F:9A:37:4F:E6
Certificate issuer: /CN=6af2a66a9971e477effd5f0887a29a2f9a374fe6
Certificate serial: 01A0CC35419E8D71FAC2FF1AEF3799AEC488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:00:37 +0000
Manifest this update: Wed 23 Sep 2026 03:00:37 +0000
Manifest next update: Thu 24 Sep 2026 03:00:37 +0000
Files and hashes: 1: 1-J4vNKUg5kTPF6XesrAZ4VjDX98.roa (hash: phX6owyDB4twltvk1dyR8ljZf5zcVZSNNxPOme7Wmno=)
2: avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl (hash: wBBCkFJ0D3n8eeG0LntbDoQUwpX/PPcErL1B6eNaaf0=)
3: dGbP3G7L_AfcaaypWrUahXw6VQE.roa (hash: nX44iiUCb4BIYGZwGIjq1mG40V7UM3XbGwpmF2vnsQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:41:9e:8d:71:fa:c2:ff:1a:ef:37:99:ae:c4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2a66a9971e477effd5f0887a29a2f9a374fe6
Validity
Not Before: Sep 23 03:00:37 2026 GMT
Not After : Sep 24 03:00:37 2026 GMT
Subject: CN=37161f034b16d5daaade180d1dd4339b76f748ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:0a:58:22:2c:67:92:24:7e:ca:33:06:ad:
8c:5f:94:1f:a5:a0:48:fe:ae:3f:3e:4b:29:f5:8d:
35:2a:51:fa:46:6b:48:bf:54:05:14:42:77:6c:13:
6c:c5:94:ed:bb:3c:0e:60:90:84:74:1e:40:54:0d:
ef:c6:6f:47:af:ca:a3:ec:e2:66:3f:93:f1:81:b8:
1b:50:8f:72:8d:38:8a:e8:48:4a:18:f2:9e:08:bd:
38:d7:76:aa:a3:57:4e:4e:4e:44:6b:23:1b:87:7e:
de:29:23:16:6d:c9:91:70:9c:06:89:bc:26:3e:1c:
33:6c:a9:f8:c8:22:9d:b2:c2:8c:9d:e5:c1:e2:9c:
69:91:ee:5b:86:2e:b6:20:43:f7:da:46:ed:57:b2:
f3:31:97:0e:f6:9f:fe:f6:78:22:a9:cd:b5:07:80:
7c:53:11:02:be:db:9d:6a:27:b4:7c:72:ae:54:24:
56:45:f6:2f:10:24:10:21:ea:a8:de:be:8c:fa:c8:
3b:0d:be:b0:ab:00:dc:03:29:68:64:90:10:7a:99:
df:78:c4:e5:40:8b:79:65:08:34:8a:46:22:78:3b:
74:b4:3f:3c:38:f1:3e:4c:ef:bb:54:0c:ee:7a:00:
46:24:4a:55:c0:eb:73:25:3b:fb:22:02:9b:b7:d7:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:16:1F:03:4B:16:D5:DA:AA:DE:18:0D:1D:D4:33:9B:76:F7:48:EE
X509v3 Authority Key Identifier:
keyid:6A:F2:A6:6A:99:71:E4:77:EF:FD:5F:08:87:A2:9A:2F:9A:37:4F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:05:78:b9:f8:2f:8e:b7:14:bf:c0:44:13:97:6a:ca:97:8d:
e7:bc:6b:7d:1f:98:a3:89:16:72:20:03:ca:c0:ec:81:bb:c4:
d8:2e:a5:f0:15:d3:00:69:5f:73:8e:a4:a5:ae:db:84:8f:6f:
3b:fd:4f:cd:d5:cb:e3:c0:6e:fc:ad:1a:67:64:eb:48:e8:dd:
66:ff:3d:de:7c:28:da:14:79:b4:9d:b8:cd:62:e4:6b:c3:e3:
b9:03:cc:e3:24:7d:f4:7c:00:e4:16:21:ed:d7:3a:73:d1:b4:
cb:75:e2:a1:c9:ee:9a:51:02:6b:70:f1:da:38:6b:13:ce:a1:
d9:1e:ac:4b:89:de:2f:6d:0f:51:21:d4:98:ba:be:54:f0:78:
d0:a6:10:7e:b7:05:4f:3d:ef:9b:c9:b1:2e:7e:c7:bb:f9:61:
e1:4e:20:60:3b:87:80:b7:92:30:aa:0c:14:d5:a9:1b:39:0d:
68:76:70:29:74:d2:1b:78:97:79:bb:6b:ab:cd:07:d1:49:0f:
5e:44:5b:9f:e5:3d:07:79:70:c6:1a:fd:6c:4e:f6:89:58:fb:
2b:0b:2c:fc:63:27:61:32:d7:51:33:a2:60:ac:2d:59:45:dd:
05:e0:bc:78:b0:46:65:06:84:b3:e3:04:ff:15:2b:f5:8a:7a:
5f:f4:1b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:55:40 2026 by rpki-client