Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
File: avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft (raw, json)
Hash identifier: IYZr8Z2x0VzkiLIpbbWnYJeP+DRHbU9oLYQZDsLjwBk=
Subject key identifier: 07:B1:55:A1:3F:00:5E:5E:2B:F9:C7:4D:93:AB:98:A6:60:EA:A9:D9
Authority key identifier: 6A:F2:A6:6A:99:71:E4:77:EF:FD:5F:08:87:A2:9A:2F:9A:37:4F:E6
Certificate issuer: /CN=6af2a66a9971e477effd5f0887a29a2f9a374fe6
Certificate serial: 019F8F7EED6F0F7B80AD9E41226E02A2F185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:27 +0000
Manifest this update: Thu 23 Jul 2026 15:01:27 +0000
Manifest next update: Fri 24 Jul 2026 15:01:27 +0000
Files and hashes: 1: 1-J4vNKUg5kTPF6XesrAZ4VjDX98.roa (hash: phX6owyDB4twltvk1dyR8ljZf5zcVZSNNxPOme7Wmno=)
2: avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl (hash: s2XjSfqBDpXh7n6y4MWQB3+YgO07MtJm5lHhvgB1XFY=)
3: dGbP3G7L_AfcaaypWrUahXw6VQE.roa (hash: nX44iiUCb4BIYGZwGIjq1mG40V7UM3XbGwpmF2vnsQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:ed:6f:0f:7b:80:ad:9e:41:22:6e:02:a2:f1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2a66a9971e477effd5f0887a29a2f9a374fe6
Validity
Not Before: Jul 23 15:01:27 2026 GMT
Not After : Jul 24 15:01:27 2026 GMT
Subject: CN=07b155a13f005e5e2bf9c74d93ab98a660eaa9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:17:84:ec:ed:22:3b:12:ea:e5:94:13:36:
ed:bc:07:2e:a9:e6:a8:12:96:53:5a:9c:36:8b:a0:
c4:80:c6:8f:58:4c:0f:18:a6:d1:df:8a:8b:f6:4e:
3e:55:b6:4e:cb:84:2f:2e:d3:1c:e9:55:bd:ea:2b:
ed:8c:76:da:36:90:41:dc:e5:ef:49:7d:cb:cc:f0:
1f:1b:62:99:e6:5b:d6:bf:af:89:92:59:2b:c1:22:
e0:0e:47:79:17:8c:be:da:74:2a:83:e1:db:4f:e4:
63:53:0e:42:02:43:2e:c5:f4:55:96:0c:5f:c3:16:
ab:78:09:c8:ba:f0:e6:d5:06:63:43:d8:bf:47:a2:
54:7f:af:54:4c:59:01:e1:d6:a0:aa:a9:38:66:60:
5a:5b:d7:c8:3a:3a:c0:d6:8b:49:85:b6:5a:2e:34:
be:d3:2d:81:eb:cd:2b:73:11:95:b2:4f:1a:55:ae:
27:22:b0:06:ee:a3:e6:f3:25:10:ac:43:3c:ca:cd:
3c:d9:e0:8a:23:08:67:56:c3:1e:ed:c8:c1:67:a8:
bc:5d:9f:8d:09:21:f6:93:70:89:25:0a:33:cd:12:
2e:79:4e:6f:2d:2e:a5:8f:db:b4:01:e8:11:3c:93:
68:b1:20:03:29:a7:cb:d9:ea:13:a0:5f:0b:17:c7:
3a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B1:55:A1:3F:00:5E:5E:2B:F9:C7:4D:93:AB:98:A6:60:EA:A9:D9
X509v3 Authority Key Identifier:
keyid:6A:F2:A6:6A:99:71:E4:77:EF:FD:5F:08:87:A2:9A:2F:9A:37:4F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:01:64:a8:f0:9d:10:c2:6e:82:cb:00:e0:e8:9a:55:88:50:
ce:fc:36:56:a3:47:ae:cd:cd:64:82:41:76:35:31:a8:e5:04:
24:ee:c2:6e:17:62:ad:ad:c0:f0:c3:09:52:bc:12:ed:a8:74:
58:3a:53:5a:f8:9a:db:59:1a:6c:18:ac:2a:5c:59:1b:21:16:
54:54:a7:8e:f4:be:36:e0:a8:7e:de:ab:5a:64:03:19:eb:05:
48:78:8e:e1:a8:da:e6:05:65:38:7d:36:23:ab:00:71:53:02:
d9:87:49:9f:a0:90:86:40:88:15:80:e2:1a:2e:9e:04:ee:fc:
dc:27:8f:f8:aa:24:05:50:ff:29:f6:3e:23:4d:b7:50:d4:03:
5c:a0:c6:ad:af:64:a5:e8:70:b1:01:e8:c5:1a:26:b2:65:6d:
d8:f7:96:cf:20:8c:41:3b:41:17:18:5b:63:a0:c9:6b:49:3e:
dd:18:cb:fa:8c:6e:8a:1b:d6:ef:be:9d:1f:d3:d3:be:ce:39:
39:ff:d9:54:a9:43:05:4d:f7:02:02:82:1f:16:e5:71:9d:7b:
85:83:d0:9a:48:ae:04:c5:ee:f3:f0:b7:8c:87:2c:3f:e3:6f:
34:f6:6e:09:b8:46:4e:f1:88:a2:64:72:60:97:04:9b:76:bb:
ce:2c:94:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pfu1vD3uArZ5BIm4CovGFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZjJhNjZhOTk3MWU0NzdlZmZkNWYwODg3YTI5YTJmOWEz
NzRmZTYwHhcNMjYwNzIzMTUwMTI3WhcNMjYwNzI0MTUwMTI3WjAzMTEwLwYDVQQD
EygwN2IxNTVhMTNmMDA1ZTVlMmJmOWM3NGQ5M2FiOThhNjYwZWFhOWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDYXhOztIjsS6uWUEzbtvAcuqeao
EpZTWpw2i6DEgMaPWEwPGKbR34qL9k4+VbZOy4QvLtMc6VW96ivtjHbaNpBB3OXv
SX3LzPAfG2KZ5lvWv6+JklkrwSLgDkd5F4y+2nQqg+HbT+RjUw5CAkMuxfRVlgxf
wxareAnIuvDm1QZjQ9i/R6JUf69UTFkB4dagqqk4ZmBaW9fIOjrA1otJhbZaLjS+
0y2B680rcxGVsk8aVa4nIrAG7qPm8yUQrEM8ys082eCKIwhnVsMe7cjBZ6i8XZ+N
CSH2k3CJJQozzRIueU5vLS6lj9u0AegRPJNosSADKafL2eoToF8LF8c6hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAexVaE/AF5eK/nHTZOrmKZg6qnZMB8GA1UdIwQY
MBaAFGrypmqZceR37/1fCIeimi+aN0/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZLbWFwbHg1SGZ2X1Y4SWg2S2FMNW8zVC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My85MDg5NTYtYzVlNi00YTNlLTlmMTct
YTE0Y2EwZWMxYzFhLzEvYXZLbWFwbHg1SGZ2X1Y4SWg2S2FMNW8zVC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My85MDg5NTYtYzVlNi00YTNlLTlmMTctYTE0Y2EwZWMxYzFh
LzEvYXZLbWFwbHg1SGZ2X1Y4SWg2S2FMNW8zVC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowFkqPCd
EMJugssA4OiaVYhQzvw2VqNHrs3NZIJBdjUxqOUEJO7Cbhdira3A8MMJUrwS7ah0
WDpTWvia21kabBisKlxZGyEWVFSnjvS+NuCoft6rWmQDGesFSHiO4aja5gVlOH02
I6sAcVMC2YdJn6CQhkCIFYDiGi6eBO783CeP+KokBVD/KfY+I023UNQDXKDGra9k
pehwsQHoxRomsmVt2PeWzyCMQTtBFxhbY6DJa0k+3RjL+oxuihvW776dH9PTvs45
Of/ZVKlDBU33AgKCHxblcZ17hYPQmkiuBMXu8/C3jIcsP+NvNPZuCbhGTvGIomRy
YJcEm3a7ziyU1Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:03 2026 by rpki-client