Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
File: AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft (raw, json)
Hash identifier: LeSWBDjqQO7ZW8R0TMI/Ecfu5CSR4WrkJExrHiguJwA=
Subject key identifier: A3:F8:4E:17:BB:40:E1:3F:50:B8:8F:25:4A:C8:73:82:E6:A1:D1:1E
Authority key identifier: 01:5D:E8:9C:2A:8C:2D:4D:E8:1A:43:67:5C:15:E5:43:EA:A1:70:E9
Certificate issuer: /CN=015de89c2a8c2d4de81a43675c15e543eaa170e9
Certificate serial: 01A0CD47B1F42213820DD5E72754D30784F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
Manifest number: 02A9
Signing time: Wed 23 Sep 2026 08:00:22 +0000
Manifest this update: Wed 23 Sep 2026 08:00:22 +0000
Manifest next update: Thu 24 Sep 2026 08:00:22 +0000
Files and hashes: 1: AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl (hash: WUCOod7LnTKNlFeMcVjDWR+UiKSJ+N7JSOE6Ahr5fxw=)
2: mwJT56lh20lnnPNb2evS5T-qWow.roa (hash: JKi1qoZgs72wB/QUa1LelaEM2vIQZNp7ROnLWSEumqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:b1:f4:22:13:82:0d:d5:e7:27:54:d3:07:84:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015de89c2a8c2d4de81a43675c15e543eaa170e9
Validity
Not Before: Sep 23 08:00:22 2026 GMT
Not After : Sep 24 08:00:22 2026 GMT
Subject: CN=a3f84e17bb40e13f50b88f254ac87382e6a1d11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:5e:8b:a1:f6:ab:31:09:f1:63:95:30:c1:
20:23:bb:3d:bb:9c:55:b6:4a:98:1b:f3:73:f4:5d:
c5:42:9f:9b:4b:a3:8d:c8:a3:99:2f:6b:9a:dc:e4:
42:bc:8e:9a:32:be:ff:17:0d:dc:6a:79:4a:5f:d1:
4d:4c:72:a0:3b:b6:22:98:09:57:cc:a5:12:ad:24:
ca:5a:f8:16:49:84:fe:9e:1a:20:a2:68:98:0f:5f:
a5:3f:5d:b6:b2:60:18:9b:39:58:bb:b2:7e:1e:30:
54:5b:23:35:cf:90:03:9b:3c:7d:a5:d2:b1:63:0c:
42:54:75:ea:ac:72:5d:95:c5:1a:aa:c0:2b:08:94:
8a:7e:ff:b7:05:45:48:73:d7:ab:be:86:6c:3a:cb:
9f:a7:c6:46:7d:9a:d0:fb:7f:09:4d:0e:37:90:2f:
fd:de:de:bf:74:f1:2e:9a:21:12:be:68:8e:18:00:
ec:1c:5c:f0:55:f8:3f:70:46:ea:d5:51:3e:f9:53:
c8:35:a8:ba:cc:69:2a:b8:6f:af:f8:cd:9f:43:91:
a8:84:cc:2d:62:45:7a:a9:17:b0:0d:71:8d:4a:6a:
b7:dc:d3:64:85:02:22:ad:c9:e8:c6:03:57:99:cf:
b2:81:21:03:c8:74:fe:9d:00:04:82:5d:f5:ab:dd:
7f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F8:4E:17:BB:40:E1:3F:50:B8:8F:25:4A:C8:73:82:E6:A1:D1:1E
X509v3 Authority Key Identifier:
keyid:01:5D:E8:9C:2A:8C:2D:4D:E8:1A:43:67:5C:15:E5:43:EA:A1:70:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d7:82:8d:9e:4c:27:0b:f7:84:aa:4b:95:cd:fe:74:e5:77:
f2:cf:dc:fb:e9:ac:bd:31:99:3f:71:2b:a8:48:74:6a:24:fa:
f6:f0:c1:e7:9f:cf:6d:e0:e5:9d:3b:c6:82:14:6f:41:60:44:
fc:8f:b2:ef:26:28:9a:80:cf:4d:89:da:8f:0e:b4:b9:2f:ba:
19:b9:d1:ab:c7:4f:96:cb:b0:ab:41:78:83:7e:b7:f6:cc:8f:
10:7d:4b:a1:65:14:0b:f0:44:3a:c3:0c:18:e5:8a:a8:c2:fa:
0d:a5:2f:a6:df:66:92:fb:aa:d4:13:ef:12:19:2f:93:31:4d:
f5:2b:59:c3:f1:68:e3:5c:6b:25:08:0b:fd:5d:93:aa:ed:81:
d7:99:55:18:ba:3a:93:70:f2:ec:cd:66:9a:d4:5c:59:4a:ad:
3a:7a:05:b0:40:6d:03:87:3a:02:40:78:ae:6c:42:68:42:a6:
2c:2d:46:1f:db:fe:e4:f6:fd:97:bd:01:fb:f9:20:c0:f1:05:
64:1f:b5:4a:d2:b4:7f:05:d2:a4:79:46:77:b1:05:45:01:62:
84:bc:be:cf:5e:5b:83:a4:8d:c5:80:11:9a:9e:c2:9b:e6:13:
92:30:91:f5:29:63:ad:ed:3f:dc:1c:3d:6c:c5:cd:76:84:ca:
d1:b3:44:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:28:18 2026 by rpki-client