Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
File: AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft (raw, json)
Hash identifier: s8IDQsBHpZ6GHfrYv/aTZ5253HHiEEUg+XC53NGp6n4=
Subject key identifier: 4E:85:B9:AC:BC:49:6C:1F:4F:68:0C:EE:C8:46:19:4E:D1:D0:6E:C0
Authority key identifier: 01:5D:E8:9C:2A:8C:2D:4D:E8:1A:43:67:5C:15:E5:43:EA:A1:70:E9
Certificate issuer: /CN=015de89c2a8c2d4de81a43675c15e543eaa170e9
Certificate serial: 019D341AA973A511B0073133A3FC996A1707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
Manifest number: CC
Signing time: Sat 28 Mar 2026 11:00:55 +0000
Manifest this update: Sat 28 Mar 2026 11:00:55 +0000
Manifest next update: Sun 29 Mar 2026 11:00:55 +0000
Files and hashes: 1: AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl (hash: IuHJxbHMAXBkzCIZOPbQQbHo0XCcXD8tBgHD2QbW2XQ=)
2: mwJT56lh20lnnPNb2evS5T-qWow.roa (hash: JKi1qoZgs72wB/QUa1LelaEM2vIQZNp7ROnLWSEumqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:a9:73:a5:11:b0:07:31:33:a3:fc:99:6a:17:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015de89c2a8c2d4de81a43675c15e543eaa170e9
Validity
Not Before: Mar 28 11:00:55 2026 GMT
Not After : Mar 29 11:00:55 2026 GMT
Subject: CN=4e85b9acbc496c1f4f680ceec846194ed1d06ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:56:f4:c5:55:cd:9e:35:ad:04:ba:d1:1c:
f3:43:6b:ac:96:cd:82:a5:a1:1a:d0:1e:19:f0:3b:
53:66:f4:72:7a:0a:f9:6a:41:7a:00:ba:04:b3:14:
a6:44:8c:c6:6f:5e:d9:75:a1:d1:4e:86:44:6b:96:
6f:6a:59:e6:c1:bc:62:a0:bc:ce:40:fe:ce:50:f7:
c8:9c:bc:53:25:ae:f8:dc:06:b9:fc:e0:78:e1:e1:
1f:7c:0d:d7:11:81:1e:26:4e:37:33:eb:80:a8:7d:
21:6e:de:d7:64:f3:20:62:8a:45:c4:2b:8d:9b:83:
74:0e:fd:66:86:7d:8d:a8:28:69:c2:1f:30:8c:ff:
97:d7:f1:02:df:90:e4:eb:71:1c:2f:d6:67:5c:e6:
c4:03:2f:d9:ef:55:42:38:f8:c6:f5:97:3c:79:40:
aa:f3:a9:ad:1b:ef:5d:8c:0f:03:d3:79:bc:ac:3e:
df:05:6a:5e:20:9c:e2:40:55:6c:4c:7a:84:2e:95:
8f:38:30:a4:de:71:41:a4:04:9a:87:10:46:24:42:
bb:0d:23:7a:87:37:65:6e:86:81:ea:88:8a:93:80:
f9:e7:44:fc:23:da:9d:5f:0c:ca:f4:dd:61:35:aa:
75:2e:c4:23:86:bf:0b:eb:90:dc:73:13:44:85:08:
0f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:85:B9:AC:BC:49:6C:1F:4F:68:0C:EE:C8:46:19:4E:D1:D0:6E:C0
X509v3 Authority Key Identifier:
keyid:01:5D:E8:9C:2A:8C:2D:4D:E8:1A:43:67:5C:15:E5:43:EA:A1:70:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3d:65:06:ee:f0:c4:d7:01:62:f9:53:d3:38:9b:71:95:cc:
d0:d4:92:94:76:5c:f8:e5:ca:6d:4a:d3:52:c6:80:cd:33:2c:
ea:39:70:17:dc:a1:49:eb:84:f1:1f:94:e8:6b:b7:df:36:81:
32:1d:dd:f4:68:9d:d9:eb:61:ea:23:34:ec:cd:54:9f:6b:82:
8c:a0:7c:3c:bf:d6:64:78:aa:ed:fe:a9:7c:1a:aa:78:95:e0:
69:4d:e8:f6:26:ca:6d:92:93:92:0d:e4:50:2a:9f:1f:cb:51:
ac:30:50:08:05:86:8a:e2:a6:70:39:4f:0d:d5:f4:75:f1:74:
a8:81:71:8c:b6:c4:c1:2d:f6:c8:01:34:90:6e:99:97:5c:87:
9d:c0:a0:00:36:36:bb:22:9d:5a:3e:a3:b7:31:cd:01:15:e3:
e4:c7:2b:55:98:f7:5d:af:75:55:97:4a:83:c6:03:7f:ab:4a:
ad:d1:5a:d3:60:62:a0:24:73:0d:23:52:5d:58:d4:98:d6:9f:
cf:e5:49:1a:b4:5c:78:76:4a:95:a7:55:e5:7e:5f:aa:6d:f3:
74:df:fb:db:df:22:f4:a2:7d:13:b1:d3:9c:cb:57:1c:9c:24:
84:9b:a6:a4:69:82:4b:cb:f0:b7:a9:94:f5:d5:06:c5:34:0c:
12:1a:ad:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:12 2026 by rpki-client