Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: 7dtD61Yx2TvBt05dH4rguOEg/iVLiATw9JK40N8/Re0=
Subject key identifier: 60:EE:F7:FB:02:FE:BC:5A:6F:2D:F0:07:15:4D:CA:A1:8E:0F:13:80
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 01A102802FA8C7D650017CB3AC551B257B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 09AA
Signing time: Sat 03 Oct 2026 16:01:57 +0000
Manifest this update: Sat 03 Oct 2026 16:01:57 +0000
Manifest next update: Sun 04 Oct 2026 16:01:57 +0000
Files and hashes: 1: ao-j9y2eNyjzBF-56aZku4fCkqU.roa (hash: jH5V+oJ22nO5z/wTNW5PeTwWZKC2MlE64btkDmNQ5Vc=)
2: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: 0SfPiyAPnMwlu4dJaxdBQCDEwL4mU733YvhelGU7hIE=)
3: sXRIKDkocbyTzm_GTL7N5qzTlQA.roa (hash: Zqly+CyY2Doez5dPu8qN77QPc5JqqNkgXWgjtCg+Bfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 16:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:80:2f:a8:c7:d6:50:01:7c:b3:ac:55:1b:25:7b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Oct 3 16:01:57 2026 GMT
Not After : Oct 4 16:01:57 2026 GMT
Subject: CN=60eef7fb02febc5a6f2df007154dcaa18e0f1380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:04:24:0f:ed:0f:83:0f:89:31:5c:b6:1b:c5:
34:1c:d1:ec:bd:a2:49:2d:fe:37:d1:aa:39:0b:85:
a5:4a:91:72:1a:fd:48:81:eb:36:e6:03:3c:62:41:
af:26:d2:b2:7d:d9:8c:a0:f3:0c:83:d9:04:fa:f2:
1c:de:19:42:e3:c5:7b:03:41:67:93:22:7b:8f:6b:
cf:f9:f0:cb:3e:5d:85:a8:f5:9a:c4:69:b1:c4:f7:
97:d3:3c:75:6b:9a:a6:58:fb:02:90:d7:be:6b:b0:
09:59:aa:06:e0:74:bd:9f:9b:22:0f:e6:00:0f:ef:
e0:e0:fa:36:aa:d1:d1:d1:b5:fc:2c:fe:a7:89:13:
88:38:3f:c1:3d:49:c8:ab:1a:65:3c:d6:18:f1:59:
2d:69:53:12:83:35:ef:7a:29:76:fa:57:bc:e4:48:
63:52:97:e5:9d:2d:89:0c:a3:69:d9:a5:71:be:6f:
4d:73:cd:71:63:66:bd:eb:44:43:75:e2:a0:44:c4:
93:63:2b:73:0e:8f:fe:72:98:4d:94:39:30:e5:60:
92:61:fc:fb:95:23:36:10:e4:75:3f:25:de:2e:5d:
bf:a9:71:2b:52:69:2a:a8:b5:11:05:e8:a2:28:f4:
75:57:a9:bb:15:7f:a4:2c:68:6e:d8:d3:7b:04:1a:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EE:F7:FB:02:FE:BC:5A:6F:2D:F0:07:15:4D:CA:A1:8E:0F:13:80
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b3:af:6a:e7:37:b0:26:38:6c:ed:5a:b6:57:17:02:85:4e:
ee:cc:7b:67:a0:5a:21:44:d1:6f:46:cc:41:7b:c7:72:0d:31:
84:7b:d3:9c:12:3b:6a:05:1d:2e:7d:75:6e:69:03:85:74:c4:
d7:ef:22:a9:68:36:42:ce:51:ef:35:1a:94:1a:37:35:35:59:
ac:be:8d:c4:c3:f5:1e:fa:9f:1c:8a:ba:e9:e0:a1:d5:ec:6d:
4a:bc:77:18:17:88:37:e0:de:3f:17:63:a1:e3:71:d7:b0:cd:
cb:5a:57:23:06:f3:80:06:df:16:4b:6a:db:54:50:b9:81:9a:
4d:57:1a:80:3f:fe:39:2f:a9:d5:16:28:cf:b8:8e:b0:10:78:
8b:bb:0a:27:ae:d7:81:b3:4a:16:35:2c:1e:0e:8b:4d:ef:53:
77:a8:20:eb:a5:f2:9c:9a:03:6c:6b:c5:85:7f:59:54:ce:bd:
3a:4c:5f:61:e4:fb:64:36:6f:0c:d1:6f:98:26:03:fd:5c:87:
ac:9a:be:18:73:1a:0e:69:f0:3a:0c:07:f1:28:93:28:fd:9a:
bc:96:05:bc:d7:37:c2:56:36:c3:df:7e:7f:a9:e3:8c:50:8f:
81:d0:7a:cf:04:0a:ae:db:04:b2:62:8a:d7:2d:bf:46:be:b7:
14:7c:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 04:15:03 2026 by rpki-client