Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: S/xTqWT9gfnFcj4M+2z0he2VyvB2MZf4URACXwgsnRQ=
Subject key identifier: AA:8E:20:83:65:DC:27:80:AB:5D:BC:37:83:D9:08:7B:D7:E2:4A:CB
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 019F95807D5091A650FB831819A4370833FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 08ED
Signing time: Fri 24 Jul 2026 19:00:53 +0000
Manifest this update: Fri 24 Jul 2026 19:00:53 +0000
Manifest next update: Sat 25 Jul 2026 19:00:53 +0000
Files and hashes: 1: ao-j9y2eNyjzBF-56aZku4fCkqU.roa (hash: jH5V+oJ22nO5z/wTNW5PeTwWZKC2MlE64btkDmNQ5Vc=)
2: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: pfwajgma0e+XoiKT3Bzh9vjtEc4E/HkCldUHCuLJTfw=)
3: sXRIKDkocbyTzm_GTL7N5qzTlQA.roa (hash: Zqly+CyY2Doez5dPu8qN77QPc5JqqNkgXWgjtCg+Bfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:7d:50:91:a6:50:fb:83:18:19:a4:37:08:33:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Jul 24 19:00:53 2026 GMT
Not After : Jul 25 19:00:53 2026 GMT
Subject: CN=aa8e208365dc2780ab5dbc3783d9087bd7e24acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2e:6c:6e:13:89:09:6d:5a:2d:6f:1a:17:20:
72:57:e0:bb:35:a8:5f:7b:38:d0:04:04:21:ee:b5:
0c:bd:59:59:7a:d4:87:27:2c:d3:db:20:f0:e3:6f:
af:e7:89:b1:d7:81:9c:59:8d:07:ff:95:4b:46:31:
d0:27:53:f8:ba:87:a2:4c:8c:de:22:08:01:eb:9b:
54:83:ae:f4:52:c1:e3:18:89:03:ae:c1:80:53:66:
95:97:76:6f:91:cc:d7:e1:8d:46:b6:13:d0:58:a3:
98:44:4b:1c:1b:0f:46:04:d2:28:c2:75:3b:6c:eb:
c9:ea:d5:56:f1:26:f3:82:8c:e3:d8:3a:8a:fc:91:
a2:38:76:1b:42:cf:6e:0d:fc:de:bc:b4:b9:c9:8d:
e6:47:33:23:ab:e8:17:e8:29:d5:fd:5b:be:d4:c9:
3b:6f:fd:a0:b4:d4:83:ff:f5:11:99:eb:c4:23:87:
37:9d:73:91:4b:af:79:3d:f8:d4:88:10:d4:28:d2:
98:d6:4c:b0:79:33:c1:52:d3:69:c7:37:97:97:52:
c1:c9:f9:dd:57:1c:c7:e2:a1:0d:f3:07:de:76:43:
a8:e9:d2:7d:bd:18:96:45:5e:40:fd:4a:44:b7:41:
a3:20:09:45:a6:37:c3:02:ef:c2:5f:8d:e0:56:0c:
43:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8E:20:83:65:DC:27:80:AB:5D:BC:37:83:D9:08:7B:D7:E2:4A:CB
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:be:8c:50:6c:f8:38:54:bb:47:ae:59:a7:3d:d7:1d:0e:50:
bd:21:fa:7e:35:d3:79:60:3a:0b:ac:8c:d3:7e:fa:76:e7:0a:
88:1d:34:d2:e3:31:76:5a:99:17:0f:01:ae:12:39:05:5e:2f:
9b:10:0c:5d:75:8b:04:6c:0c:73:e3:71:69:79:64:2d:2f:79:
b3:9a:c6:a0:35:0d:a2:d1:d6:8f:b1:a1:09:c4:93:63:bc:36:
ef:1d:11:39:5e:d7:e5:12:14:db:6d:65:43:e8:8c:e1:d8:f0:
1e:42:c4:35:68:1a:04:82:74:bf:a2:5f:ef:f7:58:bb:a9:3f:
55:9b:3a:59:df:9e:05:b5:a9:3a:49:07:11:89:11:d9:da:3c:
67:b5:cd:df:9e:4f:c1:bf:87:eb:d3:cf:55:4f:cf:b2:1e:97:
43:41:5d:dc:fa:41:77:a5:7f:e4:cf:61:9a:74:5a:a7:05:e7:
bc:68:24:92:14:2b:f3:52:00:c1:2f:61:80:5c:81:88:a0:76:
d4:b6:5f:f0:d8:71:6e:bf:dd:db:f1:db:60:27:1d:b4:aa:9d:
88:f0:e7:95:50:99:9b:08:9b:d7:53:84:10:eb:c4:4d:dd:f6:
e6:0a:76:f8:b5:dd:82:33:8b:e0:54:e7:ec:a5:a3:2d:52:b0:
88:47:4a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:10:59 2026 by rpki-client