Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
File: AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft (raw, json)
Hash identifier: mMutjfMxz0KdmVR1asrV/s8k+BAzrWKxzbz7L4mkkuI=
Subject key identifier: A9:CA:19:64:40:F9:A1:3B:06:BE:04:E2:6C:57:78:B1:CB:87:7F:44
Authority key identifier: 01:5D:E8:9C:2A:8C:2D:4D:E8:1A:43:67:5C:15:E5:43:EA:A1:70:E9
Certificate issuer: /CN=015de89c2a8c2d4de81a43675c15e543eaa170e9
Certificate serial: 019F9090FDD5A13AF184F8729F225873F9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
Manifest number: 0205
Signing time: Thu 23 Jul 2026 20:00:48 +0000
Manifest this update: Thu 23 Jul 2026 20:00:48 +0000
Manifest next update: Fri 24 Jul 2026 20:00:48 +0000
Files and hashes: 1: AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl (hash: sT1Q9TDKEDkLT1D7++VAzOZ94J7R+tB5L+KpBtz9Kys=)
2: mwJT56lh20lnnPNb2evS5T-qWow.roa (hash: JKi1qoZgs72wB/QUa1LelaEM2vIQZNp7ROnLWSEumqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:fd:d5:a1:3a:f1:84:f8:72:9f:22:58:73:f9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015de89c2a8c2d4de81a43675c15e543eaa170e9
Validity
Not Before: Jul 23 20:00:48 2026 GMT
Not After : Jul 24 20:00:48 2026 GMT
Subject: CN=a9ca196440f9a13b06be04e26c5778b1cb877f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:3e:ea:c0:db:26:af:80:d8:97:1d:27:21:
a7:ff:9b:bc:a4:52:7b:de:13:d2:98:af:45:85:18:
a8:a2:e9:e9:c3:d7:ee:e0:61:91:bb:df:ff:39:57:
31:91:92:bc:3d:61:40:49:6b:76:51:5d:67:9c:4a:
29:0c:a5:47:ad:6a:8a:c2:21:da:77:3e:1a:48:55:
c8:7b:fb:96:6a:e1:b4:6f:ee:27:0f:2a:bd:e6:13:
1b:11:1c:a2:12:69:4d:87:0e:cc:8b:f4:72:48:b8:
34:69:31:70:a3:0e:47:b5:b5:f2:f7:3d:aa:53:f8:
f3:2c:62:c0:20:f4:7b:7d:22:8b:c0:66:31:b6:fa:
f1:5e:40:60:57:f2:63:73:f1:d9:e5:da:5c:32:35:
75:cf:95:8b:3b:66:8c:f0:58:f7:fe:dc:58:55:fa:
f4:ed:ba:a6:d0:d2:4b:83:51:69:07:78:f1:7f:95:
84:bd:36:02:5d:2d:e9:a1:c4:9a:42:78:98:5a:c8:
2c:93:de:b8:2e:03:72:ad:64:5a:ae:9d:d2:6e:36:
79:d3:cb:0d:ae:77:a0:f8:49:fe:04:c0:47:e2:a7:
ee:0e:e0:f3:fa:47:72:8b:e7:cb:23:0b:d8:87:57:
37:84:e6:95:0c:34:96:e7:0a:13:fd:09:ce:ae:f6:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CA:19:64:40:F9:A1:3B:06:BE:04:E2:6C:57:78:B1:CB:87:7F:44
X509v3 Authority Key Identifier:
keyid:01:5D:E8:9C:2A:8C:2D:4D:E8:1A:43:67:5C:15:E5:43:EA:A1:70:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:02:64:96:9d:e1:e4:cd:9c:89:d3:96:11:81:34:78:9b:15:
e8:6d:01:24:c0:57:32:2a:25:d0:0a:5c:6e:cd:b8:b8:07:13:
8e:1b:bb:b9:18:38:b1:55:4f:7c:d8:1b:4a:d5:11:14:fd:88:
d4:19:ec:7e:2b:d9:55:07:3a:3e:a5:ff:24:93:aa:c6:fa:62:
84:af:d9:73:c6:d5:54:14:ae:b7:a6:c9:64:17:e7:63:42:2c:
72:63:f5:94:5f:8a:70:00:84:01:13:d1:e6:77:bd:13:c2:71:
3b:52:9b:a6:c0:84:ce:38:1b:15:87:11:34:4c:f2:fa:d1:ec:
6f:e0:49:15:ea:a6:94:52:a0:b8:4b:4b:df:84:6a:d8:f3:b1:
37:4d:40:fd:e7:e3:40:49:51:fa:d9:11:61:b7:1d:fc:90:00:
fd:73:81:b2:8f:8e:b3:b5:b8:6c:13:c0:1e:bf:88:d5:be:05:
5d:a7:03:80:42:08:56:84:ac:11:da:04:11:2d:2b:f3:69:d4:
25:fb:1a:01:3f:aa:11:ab:90:42:7f:f1:c6:00:48:63:a8:e8:
51:a7:4b:05:9d:ed:c8:54:35:fb:66:8f:e8:06:4b:3d:5f:b8:
3f:16:1e:bd:b6:a6:56:82:0c:d3:46:05:62:1c:1d:46:40:6b:
e5:ff:7f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:24 2026 by rpki-client