Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier: bxC70rEGjtWboTC3mSkPgMDavyO09MFz/+/O2U1s1/c=
Subject key identifier: 16:0E:01:BE:30:A3:99:C3:C4:51:7E:E8:8A:F8:1B:12:12:14:75:D6
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial: 01A0CCD9CFEB302B20C9357A74123868E243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number: 058F
Signing time: Wed 23 Sep 2026 06:00:21 +0000
Manifest this update: Wed 23 Sep 2026 06:00:21 +0000
Manifest next update: Thu 24 Sep 2026 06:00:21 +0000
Files and hashes: 1: A9rhd59_7voAjZbMragLA3ftrbw.roa (hash: jQKHOIkJndimLRm6Iut1TREkFlVZwkrcXKBUSUJBxdk=)
2: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: tHZEmt1md4yfChw/GvOr6U1ibK794vU0aPruXlCRGD4=)
3: ofJXmIsyK_jDudPiA8bDAQbKAlU.roa (hash: +olJpgKdSnPRSUcTlissuMFWoxiuQFVYufPs4uhUsXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:cf:eb:30:2b:20:c9:35:7a:74:12:38:68:e2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Validity
Not Before: Sep 23 06:00:21 2026 GMT
Not After : Sep 24 06:00:21 2026 GMT
Subject: CN=160e01be30a399c3c4517ee88af81b12121475d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:39:7d:b0:91:54:4a:22:90:14:c3:17:25:0d:
8b:c6:7a:dd:f3:80:ec:8b:ab:70:c4:e6:4f:53:fb:
b8:e0:f4:4c:31:48:9e:42:01:5d:42:40:0c:d9:39:
51:89:ac:83:da:e9:20:f0:03:3b:fc:cb:29:02:aa:
e9:c9:98:5c:71:4c:51:9a:20:b6:e8:4c:c2:e2:e6:
93:cb:f2:b1:7f:f0:1a:6f:f6:dd:25:84:f5:fa:cb:
e1:95:96:d0:09:6c:47:59:5f:6f:34:a4:18:11:9e:
1b:61:60:e5:c2:60:64:7c:1b:26:06:82:b3:de:17:
3b:23:3a:93:38:de:a3:6c:a3:05:9b:5b:7b:8e:d9:
ad:a2:84:57:f5:bb:d1:89:dd:41:ec:2a:8b:df:01:
7b:e9:59:ec:8d:7c:14:89:d7:06:8c:b5:7c:e2:d3:
84:6b:9c:d6:76:5f:ea:fc:df:08:cd:f5:8e:0c:64:
3c:21:c2:f8:f2:85:a3:c5:40:a5:92:6b:eb:80:bd:
b6:1b:81:33:41:47:de:68:6c:49:c4:14:20:8d:7b:
ec:56:b7:29:1b:e1:a1:4d:3c:5e:f8:00:fa:d8:41:
89:c5:04:e5:c7:e6:85:c8:7f:78:e5:87:81:c0:34:
76:22:5c:2b:34:78:ec:a6:41:24:8a:51:fc:1c:cd:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0E:01:BE:30:A3:99:C3:C4:51:7E:E8:8A:F8:1B:12:12:14:75:D6
X509v3 Authority Key Identifier:
keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b9:28:8b:fa:7c:5b:20:25:3b:27:26:6b:44:1d:cc:64:74:
e9:16:b5:b0:64:90:34:b8:c0:c6:1b:d2:7a:b9:bc:12:a4:71:
cf:24:a9:b3:77:ce:83:cb:2d:a1:c7:4a:e3:d9:fa:56:61:4f:
ca:3f:6d:2e:cb:ba:b4:c5:13:a2:ed:de:3e:7f:77:0c:ea:c9:
e5:f2:3c:d9:d0:6d:ac:21:0d:8f:0e:36:d7:2c:ab:b1:6f:a7:
3f:1c:31:d1:aa:8e:53:b6:18:37:a0:42:f0:c0:b0:8f:51:4a:
75:86:55:0f:40:91:54:89:b3:e2:d8:b0:fd:8e:17:20:0e:fa:
da:33:49:3f:c1:fe:98:86:08:a0:a5:0d:06:39:89:96:56:8d:
ac:10:0c:97:0e:c1:9c:50:c3:21:ed:d6:94:37:b0:78:6f:3a:
ed:98:3d:b4:c8:27:ae:93:d7:17:0f:1d:a5:c6:6d:1f:82:4f:
64:22:ea:94:0b:d4:bb:04:03:ae:e6:58:df:22:16:ba:82:6c:
0e:49:d1:50:51:6e:24:ee:e3:ad:16:b1:4c:8a:e2:3d:cc:8d:
23:ca:b7:bc:a5:8b:06:7a:dc:92:ec:b5:ab:39:9f:45:39:2f:
d7:5b:0a:54:54:af:4f:a7:59:da:6e:f1:b2:74:7b:80:55:b5:
10:98:5b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:25:58 2026 by rpki-client