Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier: w+IGm94g+r2cVIsicBp21W9qSrqRfJwOvWuFDK+rxT8=
Subject key identifier: ED:85:25:F6:14:3B:7E:53:49:5A:E4:B5:5B:8F:3A:7A:ED:F0:94:D1
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial: 019D2816C3E6D6ABACE825B22A66600AE851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number: 03AB
Signing time: Thu 26 Mar 2026 03:01:13 +0000
Manifest this update: Thu 26 Mar 2026 03:01:13 +0000
Manifest next update: Fri 27 Mar 2026 03:01:13 +0000
Files and hashes: 1: A9rhd59_7voAjZbMragLA3ftrbw.roa (hash: jQKHOIkJndimLRm6Iut1TREkFlVZwkrcXKBUSUJBxdk=)
2: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: 7xGsT3XJTjwVihu+SgZo1kNHUWGnDvA8CCoB+sGvH1c=)
3: d9Ge2npzpsYZ4-H4VMZTmU7XIWw.roa (hash: gyeML4vxjWokwcPNE5B6qDQbqzNUghx/e5PMeQjFWBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c3:e6:d6:ab:ac:e8:25:b2:2a:66:60:0a:e8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Validity
Not Before: Mar 26 03:01:13 2026 GMT
Not After : Mar 27 03:01:13 2026 GMT
Subject: CN=ed8525f6143b7e53495ae4b55b8f3a7aedf094d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:0d:91:86:1f:c1:0f:76:bb:38:59:f1:c5:
03:02:d7:fd:e2:87:91:ea:94:07:91:b9:bd:9e:f5:
63:f7:99:6c:b5:a9:9a:5c:19:3f:f1:19:11:f9:4c:
86:17:04:1a:7a:db:c1:b4:c3:5d:15:a9:98:ee:ea:
b5:75:33:68:9d:b5:bb:1e:e4:76:10:32:22:45:2c:
38:14:6d:32:16:29:73:d1:f8:25:19:0f:b5:3c:53:
52:7b:54:e6:77:1a:3a:bc:4e:ea:94:f2:de:37:58:
9f:57:a8:1b:14:3d:10:1a:81:4b:3a:8c:dc:35:6f:
bb:49:7e:e3:b7:35:e4:ca:ae:26:67:a7:89:70:93:
76:50:88:fd:31:4d:b7:43:9d:87:d0:b9:91:d7:4d:
8a:00:20:3c:5b:40:2b:7b:89:1d:0a:dc:3f:72:a7:
e9:c4:46:54:b5:95:5c:e9:c6:90:0b:79:38:22:60:
e0:40:27:ea:9e:55:b1:bf:20:00:63:60:5e:ca:f1:
46:90:5d:48:c9:7f:f8:d9:a7:de:11:91:7b:32:9e:
66:93:3b:43:39:b1:d7:33:52:c9:8d:c2:f8:11:d9:
44:f9:05:09:e1:87:43:0d:16:f6:35:cf:7f:6d:c2:
47:80:ea:c7:c5:5e:ba:e3:ff:c8:57:e2:14:c2:c0:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:85:25:F6:14:3B:7E:53:49:5A:E4:B5:5B:8F:3A:7A:ED:F0:94:D1
X509v3 Authority Key Identifier:
keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8d:8b:61:31:7b:73:65:57:71:af:51:17:2d:93:8e:74:d1:
0b:42:a1:87:81:9c:fa:72:38:e1:c0:6c:83:d5:c9:b3:31:4b:
50:ba:67:dc:3e:93:1d:69:ae:22:ba:d4:9d:bb:76:ff:21:21:
b5:13:a4:be:f2:c1:11:0e:3a:26:5a:5f:66:55:ac:a5:dc:6e:
e0:9c:80:50:26:38:ca:90:1e:13:77:fd:d5:5a:dd:4c:01:a6:
46:e5:20:0b:07:90:04:1e:82:88:1e:c4:c9:8a:7c:5f:07:c0:
e7:70:75:45:a1:36:6f:c3:e4:2c:f1:45:ff:34:aa:6a:f6:8d:
25:30:e7:5f:49:91:96:f7:cd:9a:36:54:b8:40:b1:19:99:e0:
91:29:15:31:47:e1:f9:48:46:ca:33:ae:b1:11:e3:4d:2a:4a:
67:44:65:13:19:2a:71:6b:67:ff:d0:ac:ee:b4:a5:3a:24:78:
24:80:da:89:04:ed:7b:ae:6f:3b:7a:0a:f4:8a:f1:f9:6a:59:
33:b5:31:c3:b1:01:cf:17:58:68:cb:16:b1:22:e7:8b:76:91:
87:16:b5:dd:93:ef:7c:ae:49:d4:49:cd:67:df:6c:b6:cf:39:
83:a0:f7:79:a2:58:5c:46:02:cf:f0:8e:36:a9:89:e2:4e:5b:
f6:8e:a9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:39 2026 by rpki-client