Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
File: AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft (raw, json)
Hash identifier: ukH/IfyyOLicG1NtxTg1JFQqpdZD7hj+hzNUuChf/qA=
Subject key identifier: 95:0C:EC:B0:11:21:E1:7B:26:79:99:CA:68:59:FE:16:25:A1:3E:4E
Authority key identifier: 01:5D:E8:9C:2A:8C:2D:4D:E8:1A:43:67:5C:15:E5:43:EA:A1:70:E9
Certificate issuer: /CN=015de89c2a8c2d4de81a43675c15e543eaa170e9
Certificate serial: 019E1BD8C7E7D1ADE4C2D658487E108BFE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
Manifest number: 0144
Signing time: Tue 12 May 2026 11:00:51 +0000
Manifest this update: Tue 12 May 2026 11:00:51 +0000
Manifest next update: Wed 13 May 2026 11:00:51 +0000
Files and hashes: 1: AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl (hash: wIXiAMSWZC7X8HQKhyMIHo7gEzdVTBhZI/inh/QsC2s=)
2: mwJT56lh20lnnPNb2evS5T-qWow.roa (hash: JKi1qoZgs72wB/QUa1LelaEM2vIQZNp7ROnLWSEumqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:c7:e7:d1:ad:e4:c2:d6:58:48:7e:10:8b:fe:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015de89c2a8c2d4de81a43675c15e543eaa170e9
Validity
Not Before: May 12 11:00:51 2026 GMT
Not After : May 13 11:00:51 2026 GMT
Subject: CN=950cecb01121e17b267999ca6859fe1625a13e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:83:cf:d3:9d:a3:90:43:7f:ed:5e:d0:d0:
0e:08:3b:3e:f2:3a:35:67:dc:91:73:42:a8:89:4a:
a7:8c:d2:00:59:a0:5a:e1:1f:a2:77:87:ec:29:9f:
77:82:cd:4a:1e:71:da:8a:3e:be:f0:27:89:31:c0:
5d:91:5e:e0:18:8f:f7:f6:7a:4f:cf:8c:bb:de:3d:
94:6e:65:eb:06:a0:ae:d8:63:ad:25:5d:5c:ab:29:
29:ee:61:2f:e4:70:f8:8f:73:cd:1b:d6:f2:e8:ab:
79:91:c7:dd:6a:26:1d:91:17:c8:93:92:01:68:11:
93:a6:90:bd:99:f4:59:76:eb:3a:c7:99:6f:ae:d2:
d8:87:19:d3:d9:51:dd:6d:39:52:d7:3a:e6:33:02:
73:e8:40:86:0d:d4:13:6d:56:50:6a:b0:f4:1d:c2:
c3:c6:29:85:34:a0:47:f6:da:36:41:9e:1a:20:d0:
49:d0:4c:0b:e0:66:b0:0f:fb:66:cb:b8:27:56:dc:
2a:85:78:05:df:27:56:4a:7e:4b:54:1b:76:11:06:
37:cd:77:0f:cc:3d:cb:fb:e6:13:fe:6f:5a:af:9c:
d8:70:22:b6:0e:f6:3f:77:07:e9:77:8d:da:c6:c0:
63:e8:83:b1:fd:82:d6:56:30:54:ec:bb:de:08:04:
7a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0C:EC:B0:11:21:E1:7B:26:79:99:CA:68:59:FE:16:25:A1:3E:4E
X509v3 Authority Key Identifier:
keyid:01:5D:E8:9C:2A:8C:2D:4D:E8:1A:43:67:5C:15:E5:43:EA:A1:70:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b8:9d:81:e0:4f:05:37:1d:28:a1:68:55:87:b6:b6:78:94:
a4:5e:66:53:46:cd:72:47:36:6c:bd:17:db:8f:75:5a:99:27:
81:5f:13:c5:0b:6d:01:41:4a:06:4b:2f:71:b4:34:ca:49:c5:
8b:e5:51:0b:6f:7c:12:3a:13:33:44:8a:bd:ff:90:92:ff:40:
77:d4:8f:42:9c:24:fb:cf:c5:1a:0f:d8:97:19:25:62:57:a1:
5a:a0:f1:df:61:9e:13:ad:2a:55:5c:17:d4:10:c4:98:6c:0c:
f2:3b:e8:18:8a:89:9e:9b:b4:74:1b:56:e2:d6:7b:d9:1c:fe:
fe:ac:45:1d:ad:06:de:7d:20:de:4c:4a:b1:1d:e7:78:2d:f2:
3f:ed:c1:cf:46:af:0b:f9:ab:71:30:af:e6:83:30:77:00:52:
10:99:8b:5e:f0:70:c7:72:4b:cb:0f:28:ce:97:27:cb:b7:0f:
d3:8b:32:95:f6:4c:3c:f6:2a:50:71:28:03:30:7e:dd:7a:15:
7e:61:70:21:61:e4:8e:96:92:38:5e:0c:86:01:4b:38:f7:2d:
66:b6:fe:63:73:85:b7:12:69:33:e2:52:51:e6:b9:4c:6a:de:
c4:83:9f:14:d8:72:71:85:6c:b1:cc:32:bc:69:7e:b9:6b:13:
84:c3:9c:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2Mfn0a3kwtZYSH4Qi/41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNWRlODljMmE4YzJkNGRlODFhNDM2NzVjMTVlNTQzZWFh
MTcwZTkwHhcNMjYwNTEyMTEwMDUxWhcNMjYwNTEzMTEwMDUxWjAzMTEwLwYDVQQD
Eyg5NTBjZWNiMDExMjFlMTdiMjY3OTk5Y2E2ODU5ZmUxNjI1YTEzZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM6Dz9Odo5BDf+1e0NAOCDs+8jo1
Z9yRc0KoiUqnjNIAWaBa4R+id4fsKZ93gs1KHnHaij6+8CeJMcBdkV7gGI/39npP
z4y73j2UbmXrBqCu2GOtJV1cqykp7mEv5HD4j3PNG9by6Kt5kcfdaiYdkRfIk5IB
aBGTppC9mfRZdus6x5lvrtLYhxnT2VHdbTlS1zrmMwJz6ECGDdQTbVZQarD0HcLD
ximFNKBH9to2QZ4aINBJ0EwL4GawD/tmy7gnVtwqhXgF3ydWSn5LVBt2EQY3zXcP
zD3L++YT/m9ar5zYcCK2DvY/dwfpd43axsBj6IOx/YLWVjBU7LveCAR6zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUM7LARIeF7JnmZymhZ/hYloT5OMB8GA1UdIwQY
MBaAFAFd6JwqjC1N6BpDZ1wV5UPqoXDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVYzb25DcU1MVTNvR2tOblhCWGxRLXFoY09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8wMTQ2MzQtN2ZlYi00N2RhLWFhZTIt
ZTIxZTAwODI2MzZmLzEvQVYzb25DcU1MVTNvR2tOblhCWGxRLXFoY09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8wMTQ2MzQtN2ZlYi00N2RhLWFhZTItZTIxZTAwODI2MzZm
LzEvQVYzb25DcU1MVTNvR2tOblhCWGxRLXFoY09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLidgeBP
BTcdKKFoVYe2tniUpF5mU0bNckc2bL0X2491WpkngV8TxQttAUFKBksvcbQ0yknF
i+VRC298EjoTM0SKvf+Qkv9Ad9SPQpwk+8/FGg/YlxklYlehWqDx32GeE60qVVwX
1BDEmGwM8jvoGIqJnpu0dBtW4tZ72Rz+/qxFHa0G3n0g3kxKsR3neC3yP+3Bz0av
C/mrcTCv5oMwdwBSEJmLXvBwx3JLyw8ozpcny7cP04sylfZMPPYqUHEoAzB+3XoV
fmFwIWHkjpaSOF4MhgFLOPctZrb+Y3OFtxJpM+JSUea5TGrexIOfFNhycYVsscwy
vGl+uWsThMOcyg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:43:21 2026 by rpki-client