Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
File: AVz-48K26knSnhA-I6Uixi44UxE.mft (raw, json)
Hash identifier: LGoMRdeLyKxwIbXTybSCH+27z3U38cXLebZginlpV2Y=
Subject key identifier: C9:A6:66:23:D2:FC:F1:BD:0E:0F:99:BD:B7:E1:AF:7B:68:46:B6:5B
Authority key identifier: 01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
Certificate issuer: /CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Certificate serial: 019E1DFE68A63FC014CB8D575CA56CE4E4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
Manifest number: 161C
Signing time: Tue 12 May 2026 21:01:12 +0000
Manifest this update: Tue 12 May 2026 21:01:12 +0000
Manifest next update: Wed 13 May 2026 21:01:12 +0000
Files and hashes: 1: AVz-48K26knSnhA-I6Uixi44UxE.crl (hash: Hi/xmBggcpu9KaZfMjBysjivpm05p5i4xHS6zkr4fDk=)
2: yiGu7GYVFl06PTOS15FwNMfxNOY.roa (hash: SBhefg3WhMmDzBzYzcHtIXjJbiTJDraUtRQdnjWSXSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:68:a6:3f:c0:14:cb:8d:57:5c:a5:6c:e4:e4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Validity
Not Before: May 12 21:01:12 2026 GMT
Not After : May 13 21:01:12 2026 GMT
Subject: CN=c9a66623d2fcf1bd0e0f99bdb7e1af7b6846b65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:60:4f:a4:bc:0a:e8:e4:b6:37:b3:ba:0c:
b7:a1:0c:e9:c6:ce:88:b0:78:e8:05:07:92:c6:27:
a9:ff:5b:27:d3:33:5a:87:b7:1c:b5:e1:f7:24:41:
b8:b6:69:0d:be:8e:d1:b7:65:d9:b5:23:2d:fe:d9:
9d:85:96:05:d5:09:e5:11:07:ce:bf:e7:45:cf:36:
d8:cd:c8:19:8a:45:b2:08:91:08:9e:f7:4c:56:f4:
8c:42:b6:ac:93:01:e8:9e:96:86:2b:fa:68:94:d4:
fc:55:5e:13:d6:71:01:5b:9f:a8:49:9a:a3:bc:fa:
7f:5a:06:de:00:ee:a9:97:52:99:db:53:b9:d5:99:
38:03:2c:01:ae:1c:50:5d:83:aa:4b:78:02:f0:5c:
e2:a5:1b:17:ae:52:c9:a1:ad:b3:0e:03:66:e9:ce:
98:62:fe:15:3d:d3:f6:9d:6e:3a:b4:02:48:66:32:
77:0f:3b:a6:ce:82:5e:51:f8:c8:1a:74:18:4e:0d:
9f:53:09:3d:83:ef:8c:4a:7a:b5:d2:d2:29:ae:33:
d0:74:6c:34:b3:83:ea:fa:e5:59:6f:60:b6:47:46:
85:ed:05:ec:66:cb:ea:5b:c5:2b:5d:f1:45:82:b8:
9d:4e:11:82:cb:51:40:3e:0e:45:50:af:15:84:f4:
b4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A6:66:23:D2:FC:F1:BD:0E:0F:99:BD:B7:E1:AF:7B:68:46:B6:5B
X509v3 Authority Key Identifier:
keyid:01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9e:dc:e8:ea:c2:c1:f8:0b:17:a4:95:ba:6a:c9:61:a9:7f:
3a:63:1f:13:4f:c9:46:5e:d5:00:e8:65:67:75:06:6e:b2:91:
3f:5d:ef:db:7a:45:19:91:8d:df:4b:59:8c:5b:f5:9f:23:e4:
cc:22:2e:09:75:c7:df:c5:bb:b2:45:fc:07:46:8b:30:2b:44:
fd:9d:bf:eb:cd:da:32:c2:b5:d7:4e:e9:1d:4d:66:2a:d3:a1:
ee:f7:c9:9f:5b:01:73:cc:1f:51:5f:b4:38:1f:12:ff:6e:72:
59:d6:8e:c2:81:83:ed:10:7f:46:6a:be:6a:8c:65:4f:40:45:
aa:bd:2d:b1:e3:f3:90:da:ab:09:dc:30:e3:b2:37:ad:4b:7f:
62:10:57:70:3b:f5:b6:72:51:6f:e6:de:5d:6a:bc:52:7a:77:
1c:3e:c5:88:dd:db:27:34:7a:71:f2:ab:14:0a:c7:4d:79:77:
1b:95:48:54:b3:b8:47:4e:be:89:29:42:96:8a:0d:40:ce:64:
93:f1:b7:04:29:80:fb:60:36:41:0f:69:60:a9:1a:52:23:ab:
40:34:81:5e:63:2b:68:5c:5c:47:e4:70:45:13:29:a8:d0:50:
ff:9b:d2:c9:e8:cf:9f:9f:33:f0:b7:1f:8b:76:87:7d:65:54:
cc:b5:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:17 2026 by rpki-client