Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
File: AVz-48K26knSnhA-I6Uixi44UxE.mft (raw, json)
Hash identifier: Oe4uGkyYWXhuNMlM8Yq71YpQuvY6XXGgoNGUg+XxGIM=
Subject key identifier: 96:1E:8B:AC:E5:C9:56:EA:20:41:C4:2D:98:ED:EA:0F:E6:DF:A6:DB
Authority key identifier: 01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
Certificate issuer: /CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Certificate serial: 019D28BBEC85474B781E0AB1C07EBECB7AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
Manifest number: 159D
Signing time: Thu 26 Mar 2026 06:01:37 +0000
Manifest this update: Thu 26 Mar 2026 06:01:37 +0000
Manifest next update: Fri 27 Mar 2026 06:01:37 +0000
Files and hashes: 1: AVz-48K26knSnhA-I6Uixi44UxE.crl (hash: GH4aKsYyZ7BOXosFrOVFWskB0wfl5rP7DVnVFtmqXjA=)
2: yiGu7GYVFl06PTOS15FwNMfxNOY.roa (hash: SBhefg3WhMmDzBzYzcHtIXjJbiTJDraUtRQdnjWSXSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ec:85:47:4b:78:1e:0a:b1:c0:7e:be:cb:7a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Validity
Not Before: Mar 26 06:01:37 2026 GMT
Not After : Mar 27 06:01:37 2026 GMT
Subject: CN=961e8bace5c956ea2041c42d98edea0fe6dfa6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:d5:7d:fe:9f:18:71:f8:eb:77:ad:58:c4:
c3:c6:79:c6:e0:1e:94:55:55:da:85:7f:4a:66:6a:
d7:0c:83:7f:7e:92:cd:d7:56:4d:9e:db:8c:b9:3f:
17:7c:b1:6b:7e:de:0d:9b:7f:57:30:ab:eb:d7:c5:
5a:af:72:67:e1:b3:2d:ce:30:f0:45:ca:a2:36:82:
4b:42:ba:60:c9:ae:40:c9:12:83:4d:12:e4:9a:b8:
f4:ad:34:9f:c3:7d:51:87:99:65:02:91:98:c0:12:
8e:fc:75:0e:1c:ca:9d:c6:67:9f:c5:62:e2:cf:27:
70:fc:22:7e:e3:ea:a9:9e:2b:e1:99:93:93:a2:1a:
c9:a8:30:bd:34:02:a4:b7:f2:16:5b:f0:df:de:0c:
98:8b:86:9e:3d:be:3e:b3:88:69:68:b2:d6:43:4f:
47:4f:bb:b3:75:da:1f:e6:91:61:c3:97:54:bd:7d:
ce:6f:38:4a:36:8b:ef:61:47:b9:18:6b:d3:99:ee:
c1:15:d2:9a:26:f3:3e:12:a9:86:54:4e:2d:e1:fa:
bc:6f:7b:c3:43:4d:0d:60:77:bd:89:c7:31:27:6b:
6b:e7:d4:a5:ca:af:be:c1:52:78:8e:6d:79:0c:74:
77:28:f0:80:6a:07:e8:fa:a0:26:09:9f:1c:d3:da:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1E:8B:AC:E5:C9:56:EA:20:41:C4:2D:98:ED:EA:0F:E6:DF:A6:DB
X509v3 Authority Key Identifier:
keyid:01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:53:6b:ab:93:d9:f0:75:a3:7e:14:53:20:3e:1f:6b:db:59:
db:90:6c:94:0d:6b:41:85:5e:84:80:39:97:73:c9:bf:02:0d:
c1:cb:ac:eb:52:2d:87:91:d4:2d:e6:46:fc:ae:32:b7:db:a8:
52:c7:91:a8:f4:06:d3:aa:81:25:76:b4:3a:a8:56:85:61:47:
e1:16:c4:da:d8:dc:bb:43:dc:a5:7a:1e:2b:a0:22:0e:80:c0:
64:7c:6e:44:f8:f8:52:1c:ad:de:ba:94:94:47:f1:ae:e8:a1:
1b:0a:da:57:e5:f7:3a:a3:29:9d:0e:f5:03:86:b7:7e:b5:1d:
72:cb:57:32:d7:3c:0e:18:de:7b:96:ca:07:8a:7c:18:5f:f9:
dc:2e:c7:b8:3c:33:41:b3:1c:fc:e6:ec:0e:36:11:d4:3e:8f:
5c:44:ba:79:0f:ad:9a:d5:3e:e2:db:e4:a9:73:b3:cb:ec:24:
e6:04:56:17:45:33:11:42:a6:34:f1:bc:d3:93:6b:58:b9:ff:
86:4f:a9:84:e5:be:8e:16:59:32:b4:b0:2b:50:36:99:a6:55:
f1:63:2a:c8:18:06:f4:b3:5d:85:42:30:3d:3d:d2:a2:b4:ba:
69:aa:a8:64:b2:c7:4f:fa:eb:f2:ce:6c:8b:28:34:16:4f:61:
e8:34:de:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou+yFR0t4HgqxwH6+y3rTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNWNmZWUzYzJiNmVhNDlkMjllMTAzZTIzYTUyMmM2MmUz
ODUzMTEwHhcNMjYwMzI2MDYwMTM3WhcNMjYwMzI3MDYwMTM3WjAzMTEwLwYDVQQD
Eyg5NjFlOGJhY2U1Yzk1NmVhMjA0MWM0MmQ5OGVkZWEwZmU2ZGZhNmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQzVff6fGHH463etWMTDxnnG4B6U
VVXahX9KZmrXDIN/fpLN11ZNntuMuT8XfLFrft4Nm39XMKvr18Var3Jn4bMtzjDw
RcqiNoJLQrpgya5AyRKDTRLkmrj0rTSfw31Rh5llApGYwBKO/HUOHMqdxmefxWLi
zydw/CJ+4+qpnivhmZOTohrJqDC9NAKkt/IWW/Df3gyYi4aePb4+s4hpaLLWQ09H
T7uzddof5pFhw5dUvX3ObzhKNovvYUe5GGvTme7BFdKaJvM+EqmGVE4t4fq8b3vD
Q00NYHe9iccxJ2tr59Slyq++wVJ4jm15DHR3KPCAagfo+qAmCZ8c09od4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYei6zlyVbqIEHELZjt6g/m36bbMB8GA1UdIwQY
MBaAFAFc/uPCtupJ0p4QPiOlIsYuOFMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYmRiY2ItYmU5Yy00M2JkLWFlY2Yt
NGJmNzZjZTM1NjFkLzEvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8zYmRiY2ItYmU5Yy00M2JkLWFlY2YtNGJmNzZjZTM1NjFk
LzEvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVNrq5PZ
8HWjfhRTID4fa9tZ25BslA1rQYVehIA5l3PJvwINwcus61Ith5HULeZG/K4yt9uo
UseRqPQG06qBJXa0OqhWhWFH4RbE2tjcu0PcpXoeK6AiDoDAZHxuRPj4Uhyt3rqU
lEfxruihGwraV+X3OqMpnQ71A4a3frUdcstXMtc8Dhjee5bKB4p8GF/53C7HuDwz
QbMc/ObsDjYR1D6PXES6eQ+tmtU+4tvkqXOzy+wk5gRWF0UzEUKmNPG805NrWLn/
hk+phOW+jhZZMrSwK1A2maZV8WMqyBgG9LNdhUIwPT3SorS6aaqoZLLHT/rr8s5s
iyg0Fk9h6DTeQQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:11 2026 by rpki-client