
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: 7Um9CWMaYb6wLRPboaAQvJNGVXgrURXor9EAW1Lcyng=
Subject key identifier: 5B:A0:59:62:76:9C:B8:C8:3C:9D:A6:D6:8D:D0:1B:87:69:1C:1F:91
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 019E1ED99C73ECAE83661456BBB297E268A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 082B
Signing time: Wed 13 May 2026 01:00:38 +0000
Manifest this update: Wed 13 May 2026 01:00:38 +0000
Manifest next update: Thu 14 May 2026 01:00:38 +0000
Files and hashes: 1: ao-j9y2eNyjzBF-56aZku4fCkqU.roa (hash: jH5V+oJ22nO5z/wTNW5PeTwWZKC2MlE64btkDmNQ5Vc=)
2: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: GUTEMRgzx0mUypZUKfBYICtpyRXRZOqWioIFKNEGg/k=)
3: sXRIKDkocbyTzm_GTL7N5qzTlQA.roa (hash: Zqly+CyY2Doez5dPu8qN77QPc5JqqNkgXWgjtCg+Bfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:9c:73:ec:ae:83:66:14:56:bb:b2:97:e2:68:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: May 13 01:00:38 2026 GMT
Not After : May 14 01:00:38 2026 GMT
Subject: CN=5ba05962769cb8c83c9da6d68dd01b87691c1f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:87:2f:b3:ad:4c:b8:9b:fa:1a:05:a7:eb:f9:
67:27:a7:06:d2:64:b5:70:b0:2e:44:14:d7:f2:9c:
ac:37:0a:7b:b8:ee:06:74:94:97:79:02:b9:6c:4a:
45:aa:a5:1b:fa:3a:10:d8:8c:49:65:11:fe:53:39:
45:ad:16:95:48:2b:35:47:1f:ec:4a:c6:55:32:be:
52:97:38:86:8e:86:a2:6b:e4:8c:a2:37:e0:de:25:
96:a3:52:98:cd:34:b5:46:62:8c:de:bd:33:b5:89:
80:87:bc:fd:eb:70:66:1a:8f:77:92:03:d1:ad:de:
75:08:ad:ea:f1:4f:66:d5:06:2a:0a:07:25:c8:5a:
89:fc:d9:c8:9c:08:67:89:7c:2f:d9:df:d4:39:5f:
60:75:05:ac:82:d4:85:03:6a:d2:34:c7:1b:cc:25:
40:9a:98:10:52:f3:84:13:a4:23:6b:fd:e4:63:f7:
cf:49:dc:92:00:75:b3:1d:52:1f:66:12:07:26:36:
76:72:9f:91:c6:f6:26:6c:84:ba:2e:38:84:10:b6:
6e:ca:b0:dd:9c:e3:2d:99:d5:af:85:2e:a9:51:c3:
c1:2f:60:05:b7:5f:6f:2d:6c:7e:cd:24:63:8b:7f:
25:a4:b3:05:e6:5c:b7:74:6f:f4:ad:76:19:02:b5:
df:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A0:59:62:76:9C:B8:C8:3C:9D:A6:D6:8D:D0:1B:87:69:1C:1F:91
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:98:4b:ca:23:12:c0:d5:c2:34:17:07:be:e0:e8:46:07:25:
eb:cb:25:02:cd:a3:29:b5:b3:a0:7e:5a:48:af:ee:09:1e:54:
49:c6:04:02:94:04:58:1f:0d:d4:00:d4:86:78:14:c3:87:0d:
60:39:4c:50:4f:25:68:e9:1e:8c:20:d6:cd:9f:76:e9:42:d7:
3e:30:da:ec:f2:ee:32:93:5a:6f:0a:ad:ca:ba:c1:d4:9a:d2:
9d:07:ad:f7:c8:dd:22:fe:a5:32:70:49:8d:09:d7:d6:7a:60:
e0:56:c4:60:e9:34:47:8a:60:ea:92:56:4a:65:49:20:d0:1e:
7e:58:35:75:37:83:56:f9:7c:c1:ef:02:38:91:8c:25:e3:3f:
da:61:cd:83:7d:16:61:73:bb:ec:c8:86:a7:5c:87:0f:d1:67:
05:7a:3d:e9:35:8d:57:6e:03:55:ad:61:e2:42:a8:0b:83:83:
3b:b6:6a:e2:34:34:ae:15:3b:33:d7:74:4c:91:3f:cd:de:2c:
7b:cb:47:42:39:b3:7a:d5:e2:b3:40:b1:8d:ec:0f:34:22:1c:
d2:0a:5a:ab:a6:d3:9f:39:a7:43:11:96:b4:08:93:05:03:b8:
19:c9:18:21:c1:92:28:fe:82:c5:88:08:5e:27:63:98:43:b0:
4f:fb:18:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:53:36 2026 by rpki-client