Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier: YNAxwqHB86JyZOVhdsvIhMk7+qI2Qz/Xw7zatbeLcKQ=
Subject key identifier: 7A:4E:10:77:C8:B6:42:6B:E5:86:6C:75:60:EF:D9:46:C2:EB:71:07
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial: 01A1DF15228EFD2D7AB6221D23137B257C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number: 061D
Signing time: Sun 15 Nov 2026 12:01:06 +0000
Manifest this update: Sun 15 Nov 2026 12:01:06 +0000
Manifest next update: Mon 16 Nov 2026 12:01:06 +0000
Files and hashes: 1: A9rhd59_7voAjZbMragLA3ftrbw.roa (hash: jQKHOIkJndimLRm6Iut1TREkFlVZwkrcXKBUSUJBxdk=)
2: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: 5faTnD+SKyzvoWKFm28txSnKhBvldFnnW05ZX9gzkjc=)
3: ofJXmIsyK_jDudPiA8bDAQbKAlU.roa (hash: +olJpgKdSnPRSUcTlissuMFWoxiuQFVYufPs4uhUsXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:22:8e:fd:2d:7a:b6:22:1d:23:13:7b:25:7c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Validity
Not Before: Nov 15 12:01:06 2026 GMT
Not After : Nov 16 12:01:06 2026 GMT
Subject: CN=7a4e1077c8b6426be5866c7560efd946c2eb7107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:23:f4:e1:03:28:10:5c:2a:14:67:89:11:
10:cd:90:29:38:a7:57:e1:ae:b4:d9:f7:b0:f9:9c:
4e:3f:38:79:72:be:3a:f8:42:1f:11:50:64:83:b4:
35:fc:c0:fd:6b:d3:b7:20:66:3c:e8:97:76:a4:74:
19:3a:c0:9a:82:4e:14:20:f6:1b:99:cf:1c:dc:e2:
18:b3:97:a7:85:4e:76:40:5f:84:4d:d4:6f:85:c6:
f4:9f:c8:4a:8d:be:8a:18:fb:fb:97:12:bf:44:8a:
b6:48:08:8b:32:cf:ea:60:7e:a0:d0:8e:86:13:1b:
5b:af:7e:fc:4b:d0:6b:a4:06:f8:45:5f:f0:a9:9f:
b0:49:81:ab:c9:cc:3a:0d:5b:27:de:5d:77:82:10:
f1:d6:17:29:12:10:57:37:45:7f:5e:dd:39:c4:09:
62:56:db:d1:46:88:ca:22:e1:d4:07:84:1b:a8:20:
01:9c:7c:51:92:b1:db:e5:0b:51:81:c0:00:d2:79:
a1:98:8a:25:f4:6d:2b:9f:70:9e:60:ef:cc:d9:5a:
67:df:44:97:6e:f1:f5:9c:2b:62:c4:cd:3a:01:ef:
ee:f4:ad:2c:f1:d4:52:b1:e7:5a:3a:00:5d:4d:47:
45:64:0b:2e:7a:94:bf:e5:a3:34:1f:2f:8d:e6:df:
b6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4E:10:77:C8:B6:42:6B:E5:86:6C:75:60:EF:D9:46:C2:EB:71:07
X509v3 Authority Key Identifier:
keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9d:1e:a2:a4:87:65:13:60:e9:e1:2d:10:24:ca:f6:97:f8:
a5:33:10:55:4d:e6:c0:54:23:d1:72:ad:0f:7c:eb:3e:c4:10:
a9:9f:54:61:a0:b2:00:51:d9:49:69:d2:d8:27:ef:41:fa:eb:
94:03:f0:36:18:7b:27:7a:22:ba:7f:f9:7e:d5:23:1c:26:d4:
94:ae:d8:08:b3:65:b9:4e:38:5c:8d:b0:62:79:f6:c5:51:92:
42:15:eb:80:92:6c:b4:1e:7d:4a:02:a5:66:85:1e:8a:37:15:
b9:4b:11:43:76:d7:ee:a1:a7:bc:58:34:74:4f:6e:54:c8:75:
0a:11:a0:21:4d:dc:83:8f:96:55:5f:c9:36:58:83:98:c6:f6:
5d:8c:53:4f:10:98:3a:a4:44:b0:ad:a4:98:41:fd:68:4d:1d:
8c:e0:25:cb:f8:12:f4:cb:0c:fe:44:2c:1e:29:9d:8f:78:0a:
2c:09:8f:e4:b7:ce:6e:a9:2e:bf:78:a8:13:08:34:bf:e3:28:
7e:13:bc:a0:0f:c7:73:ba:78:d0:75:4c:44:ba:90:25:47:68:
b2:91:49:bb:94:fe:c4:ae:c8:20:48:66:3d:5e:00:44:11:a0:
9b:ff:cd:3c:fc:6b:82:37:ea:6f:0e:e4:03:0b:af:c4:ee:04:
27:fa:d1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:19:54 2026 by rpki-client