Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier: o6KAqY31Oz3PyrftBLpZdqI58h/77A+z3af0PY/r/gc=
Subject key identifier: 5E:15:29:55:01:17:2E:4F:EF:04:46:F9:0A:D1:F2:E3:60:90:7C:5C
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 01A0EA777152A8F944E98537905DA72BE612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number: 158E
Signing time: Tue 29 Sep 2026 00:01:31 +0000
Manifest this update: Tue 29 Sep 2026 00:01:31 +0000
Manifest next update: Wed 30 Sep 2026 00:01:31 +0000
Files and hashes: 1: PrGwU2TW-rYM4XlKNokSqvhickE.roa (hash: fwpVBF6tUhobxteId7IZ9kM2ae4pupPUogMY1BLAryM=)
2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: sfw1OQuA9odNsGmAiFjFlvycDk7RmpurfmurTuoVJhk=)
3: dbor2V1CZeSh-DsNvUTjnrohp5k.roa (hash: ThyL23NfAVtNK001dI1v2bX0HhRJe3heaSpGsGvlJC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 00:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:77:71:52:a8:f9:44:e9:85:37:90:5d:a7:2b:e6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Sep 29 00:01:31 2026 GMT
Not After : Sep 30 00:01:31 2026 GMT
Subject: CN=5e15295501172e4fef0446f90ad1f2e360907c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:91:be:02:4a:57:00:cf:c6:bb:c4:82:70:
a5:43:91:58:7e:3f:37:82:a0:ca:a7:35:6d:b3:82:
ad:12:35:57:bc:5b:aa:e3:ce:a8:07:e6:12:07:17:
de:ac:a1:c0:c9:d9:c7:5b:eb:2f:8f:df:c7:69:ec:
7e:68:5e:e8:8b:95:13:2d:ef:d0:01:b6:fe:3f:20:
b6:d8:0d:26:cb:c0:d8:c3:d3:7b:4b:93:24:b3:65:
f9:6a:15:61:c6:a8:49:0a:75:c1:17:df:df:2b:d3:
11:b9:6d:bb:fb:d1:fc:71:26:c8:01:c8:2c:9c:4e:
1a:25:66:89:cd:e7:4e:d7:eb:8e:f5:a6:cb:58:7c:
62:01:5c:1c:77:6d:fb:09:41:d4:1f:8f:df:0b:41:
e2:db:a3:38:8c:bb:82:4b:f9:40:03:28:24:39:91:
70:6b:d1:84:b2:52:07:4b:0c:47:97:95:c7:94:c8:
ea:e0:27:17:5f:8d:22:96:a7:bf:f2:09:b8:f4:02:
3f:c5:83:f0:34:ad:8e:45:ee:f2:32:09:ef:4e:f8:
d9:d8:82:9b:08:50:93:ac:0c:69:0b:08:e8:ba:13:
37:93:90:52:7a:62:c0:df:99:ce:31:e3:6c:1a:72:
bf:0b:e9:03:f2:58:d7:f8:91:bc:14:be:58:fb:1f:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:15:29:55:01:17:2E:4F:EF:04:46:F9:0A:D1:F2:E3:60:90:7C:5C
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c9:07:69:d5:f2:59:a3:33:3d:1b:7c:16:46:b1:9e:f4:6a:
b2:80:71:1c:8e:31:7a:cb:3f:6b:e3:9d:e7:ce:45:e0:50:c4:
66:c3:39:2c:9c:ac:84:27:d1:dd:1a:62:81:b9:20:13:64:cf:
9d:ea:cb:70:ec:ef:3d:53:7b:a8:e7:58:86:10:e8:17:a7:f8:
c4:c9:84:2e:2c:3e:60:c8:19:41:8b:07:5e:1b:9d:fc:07:21:
ee:18:a2:d1:fc:b1:5c:3e:9f:ab:8a:69:33:d5:b0:18:ff:3d:
45:73:16:d0:d3:4b:eb:cd:0d:a6:3c:1b:52:5e:43:b9:6d:62:
2f:b8:17:89:fc:54:40:a8:02:b4:55:81:60:2a:24:68:67:85:
99:24:16:34:f1:f9:fa:49:d9:92:05:b0:40:a9:bb:6b:41:86:
30:a4:41:ba:69:33:b6:5c:91:73:81:44:d2:b1:74:a0:a1:12:
21:48:e4:ce:5e:d7:84:47:d8:02:06:d3:06:0f:9f:cf:83:a6:
ef:56:fe:f1:af:e4:dd:bd:9f:96:45:07:05:b9:52:5e:66:b2:
1b:fe:c6:98:e4:24:62:e9:7f:53:52:cf:ba:5f:f0:a1:58:69:
6c:b8:5d:e7:b5:a4:43:07:e6:7b:15:a3:6a:83:d1:01:08:df:
06:ba:a9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:54:37 2026 by rpki-client