Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: SbSDNz5BybfHtSLhA9tk9GnDE6PSdIA5qDENMPEsGXQ=
Subject key identifier: C2:FE:C3:BE:4C:AD:73:C0:F1:9F:94:B0:FD:F1:D6:F0:A8:C6:C1:6B
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 01A0EB5305AC4F28792457472E917C7E656C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 099E
Signing time: Tue 29 Sep 2026 04:01:21 +0000
Manifest this update: Tue 29 Sep 2026 04:01:21 +0000
Manifest next update: Wed 30 Sep 2026 04:01:21 +0000
Files and hashes: 1: ao-j9y2eNyjzBF-56aZku4fCkqU.roa (hash: jH5V+oJ22nO5z/wTNW5PeTwWZKC2MlE64btkDmNQ5Vc=)
2: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: 9RG263w39nz2yHrKG4K1RqJZRDhFPszSv+uqo6gMGcI=)
3: sXRIKDkocbyTzm_GTL7N5qzTlQA.roa (hash: Zqly+CyY2Doez5dPu8qN77QPc5JqqNkgXWgjtCg+Bfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:05:ac:4f:28:79:24:57:47:2e:91:7c:7e:65:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Sep 29 04:01:21 2026 GMT
Not After : Sep 30 04:01:21 2026 GMT
Subject: CN=c2fec3be4cad73c0f19f94b0fdf1d6f0a8c6c16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:83:cf:35:c2:3e:dc:58:3b:a6:3e:00:7b:ac:
bd:cb:e5:af:2c:24:92:44:10:39:1e:7e:34:d8:bc:
a0:8e:1d:95:be:18:ab:ce:45:ca:18:b1:17:42:a0:
c8:97:99:67:f3:0c:da:f7:6d:00:f1:02:7b:79:bd:
51:21:7c:6c:2d:97:23:78:d1:85:29:38:05:50:1e:
25:8a:b0:1f:61:a7:fe:fc:ff:39:0b:b1:a6:a5:e3:
e9:e9:1a:8d:99:3e:9e:50:62:cc:02:85:59:84:5c:
50:6f:1b:ba:3c:7a:62:20:20:c6:e9:35:91:1a:89:
c1:21:82:0c:b9:3a:10:04:b7:41:00:46:16:22:33:
1f:1c:fc:60:32:b5:4e:3d:13:61:d1:fa:fb:af:7d:
ab:47:3a:83:a4:1b:ef:1b:d5:c9:cf:32:92:2a:75:
11:4c:88:c5:ad:e7:34:51:5d:c9:9d:24:a2:e8:33:
15:50:2a:93:26:a2:58:17:86:9a:32:0d:6d:c0:49:
fd:f7:6a:1e:65:29:ba:a2:7b:6e:bb:e1:31:18:9f:
5a:27:9e:4a:92:10:41:8c:25:d5:da:4e:9a:96:9c:
f1:13:97:84:28:c8:23:9d:42:e5:55:00:00:55:60:
ed:b9:93:93:70:f3:d0:b5:37:c7:9c:80:22:27:6f:
21:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FE:C3:BE:4C:AD:73:C0:F1:9F:94:B0:FD:F1:D6:F0:A8:C6:C1:6B
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c6:89:44:17:e2:a3:5c:46:c8:23:3a:4a:e6:e5:b2:97:1d:
01:83:52:64:91:11:49:39:bd:f7:1d:43:63:0a:da:cc:cf:b1:
9b:f5:bb:32:08:77:6d:1e:c9:a6:04:d4:91:06:a2:08:80:25:
f5:05:c4:99:b4:0c:ba:d1:48:6d:d7:b0:02:75:8a:8f:1e:7d:
95:27:52:45:27:8f:a0:29:4c:65:61:fa:ad:04:3b:26:62:13:
d4:25:68:cc:f8:f6:96:f1:b1:67:31:af:a7:38:84:34:69:65:
b4:1f:17:70:58:38:6a:7f:b7:40:41:e7:80:90:6d:82:3f:79:
cb:5f:c8:24:0b:54:ab:9d:9f:0d:63:d4:a6:c5:68:50:bf:6b:
77:dc:e8:41:35:55:c1:be:fe:36:d5:f6:52:ed:c1:4c:c1:8b:
89:66:cd:59:23:54:ab:a2:53:83:a6:86:e9:b8:93:d8:72:94:
d9:bc:0b:88:3f:94:96:d8:2f:8d:2f:ce:4f:d4:2a:6c:4f:35:
69:70:5a:a4:f7:9b:e1:3e:05:1e:3c:3f:c3:ed:7f:d1:48:99:
4f:34:30:0e:30:fd:47:3c:ef:5b:8c:8f:dc:d9:bd:b0:7b:41:
29:3d:3e:43:fa:c8:42:bb:dd:24:bd:9c:a2:72:d9:3d:6a:d3:
2d:7d:f6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:15:23 2026 by rpki-client