Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier: fdFbcpo5u3LMDwqWJKjbxHnFcBZBnTCUD1TrIZLfa0s=
Subject key identifier: 34:E8:A7:38:A6:4C:E3:6A:4D:5C:07:21:3C:86:79:39:D6:06:B7:4C
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 019D26CCEEBFE24197F85FD5024E6A4E80F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number: 139B
Signing time: Wed 25 Mar 2026 21:00:57 +0000
Manifest this update: Wed 25 Mar 2026 21:00:57 +0000
Manifest next update: Thu 26 Mar 2026 21:00:57 +0000
Files and hashes: 1: PrGwU2TW-rYM4XlKNokSqvhickE.roa (hash: fwpVBF6tUhobxteId7IZ9kM2ae4pupPUogMY1BLAryM=)
2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: sO9hTVRsNWEjwjcbS/tRjo7OcN8zntIje9ki5KbOHBk=)
3: dbor2V1CZeSh-DsNvUTjnrohp5k.roa (hash: ThyL23NfAVtNK001dI1v2bX0HhRJe3heaSpGsGvlJC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ee:bf:e2:41:97:f8:5f:d5:02:4e:6a:4e:80:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Mar 25 21:00:57 2026 GMT
Not After : Mar 26 21:00:57 2026 GMT
Subject: CN=34e8a738a64ce36a4d5c07213c867939d606b74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1b:59:7d:bf:9a:75:b3:06:97:20:dd:15:5f:
e3:53:5e:8c:63:58:0d:9e:aa:30:df:63:7c:c4:13:
9b:60:e6:f9:b4:28:20:79:71:b7:37:82:e9:d8:9e:
c7:42:d9:77:58:73:de:0d:71:a7:a3:d0:e8:bb:93:
1e:d8:f0:62:fc:26:92:3c:c9:c3:e3:71:2c:6c:21:
91:ba:06:c3:88:2b:d1:61:d2:44:3b:29:58:0e:40:
9c:2f:eb:56:28:04:fe:bf:69:95:57:e4:0c:3d:56:
c6:13:bc:b9:83:36:e0:fc:8f:cc:46:08:08:84:6f:
c9:2e:b1:19:51:a6:f4:d9:76:c0:4f:ff:50:92:e4:
9d:a6:95:b0:c0:bf:c9:a7:d8:bd:f1:1a:ef:8c:76:
1a:f5:3e:de:6d:31:f5:60:00:b5:58:d3:37:a1:f2:
e2:4c:6c:c3:c1:62:94:ca:d7:f5:cc:71:1e:d5:61:
0c:6f:2c:76:cd:9a:b9:b6:e5:5e:46:ee:04:2b:f7:
ae:50:7a:4f:0a:d8:2a:ba:06:78:ad:a6:cc:f5:c4:
39:55:02:07:f1:ab:24:d5:26:59:7e:c6:e7:19:f3:
17:5a:73:0b:74:97:a8:b3:d2:5b:b8:bb:67:c1:2c:
8f:83:be:a3:fa:db:82:32:42:ba:2f:81:a0:91:10:
6c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E8:A7:38:A6:4C:E3:6A:4D:5C:07:21:3C:86:79:39:D6:06:B7:4C
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:52:de:64:20:7c:d1:54:5d:37:a6:cc:06:d8:c4:68:6b:2f:
32:be:5b:54:94:7b:77:c6:f3:4e:69:ae:66:d8:74:c6:18:59:
a3:2d:c9:f4:65:8a:5f:b5:53:1a:e3:93:76:50:b0:5d:05:3f:
1e:ba:1d:2d:17:5b:c7:07:d3:7f:18:41:4d:15:e6:31:12:6e:
83:37:fb:1c:fd:60:e0:1e:cb:eb:93:cf:69:cb:34:89:66:0b:
34:52:ff:d4:e1:15:4c:c9:78:59:2c:2b:99:3c:97:55:bd:bc:
5d:8a:88:ff:b0:55:7c:0d:90:0e:34:65:a8:be:cb:ed:f2:8a:
f8:06:91:06:76:22:fa:26:e5:33:7c:03:51:b5:60:3f:8b:0a:
d2:ec:9a:ec:62:07:bf:77:be:35:86:7b:dd:3b:41:58:3b:8f:
3d:d2:9c:c8:9f:0f:a4:f0:77:fc:2d:03:08:61:26:15:69:ea:
e1:8d:cf:00:ec:a0:bf:62:0c:9a:d4:9b:6b:e8:ba:b8:55:6f:
d0:4d:3d:31:0f:0f:e4:b1:e0:09:9d:d7:a6:f7:8c:ad:b0:cd:
d6:4c:22:29:5a:1e:ee:c3:49:43:10:19:04:8a:6a:14:e2:25:
03:0d:ef:68:34:e0:69:9a:ab:5a:96:4d:f5:9f:cd:56:23:b2:
e9:23:8c:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzO6/4kGX+F/VAk5qToDwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZjljNTQwYjE0NmJiNDRjODIxOWQwMTM3NWMxMDEyNDky
MGFlOWYwHhcNMjYwMzI1MjEwMDU3WhcNMjYwMzI2MjEwMDU3WjAzMTEwLwYDVQQD
EygzNGU4YTczOGE2NGNlMzZhNGQ1YzA3MjEzYzg2NzkzOWQ2MDZiNzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xtZfb+adbMGlyDdFV/jU16MY1gN
nqow32N8xBObYOb5tCggeXG3N4Lp2J7HQtl3WHPeDXGno9Dou5Me2PBi/CaSPMnD
43EsbCGRugbDiCvRYdJEOylYDkCcL+tWKAT+v2mVV+QMPVbGE7y5gzbg/I/MRggI
hG/JLrEZUab02XbAT/9QkuSdppWwwL/Jp9i98RrvjHYa9T7ebTH1YAC1WNM3ofLi
TGzDwWKUytf1zHEe1WEMbyx2zZq5tuVeRu4EK/euUHpPCtgqugZ4rabM9cQ5VQIH
8ask1SZZfsbnGfMXWnMLdJeos9JbuLtnwSyPg76j+tuCMkK6L4GgkRBs1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTopzimTONqTVwHITyGeTnWBrdMMB8GA1UdIwQY
MBaAFGr5xUCxRrtEyCGdATdcEBJJIK6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zNzk1MjktZjQ2OS00MzYzLThiODct
NDIxYTk5YmRkNzhmLzEvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zNzk1MjktZjQ2OS00MzYzLThiODctNDIxYTk5YmRkNzhm
LzEvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlLeZCB8
0VRdN6bMBtjEaGsvMr5bVJR7d8bzTmmuZth0xhhZoy3J9GWKX7VTGuOTdlCwXQU/
HrodLRdbxwfTfxhBTRXmMRJugzf7HP1g4B7L65PPacs0iWYLNFL/1OEVTMl4WSwr
mTyXVb28XYqI/7BVfA2QDjRlqL7L7fKK+AaRBnYi+iblM3wDUbVgP4sK0uya7GIH
v3e+NYZ73TtBWDuPPdKcyJ8PpPB3/C0DCGEmFWnq4Y3PAOygv2IMmtSba+i6uFVv
0E09MQ8P5LHgCZ3XpveMrbDN1kwiKVoe7sNJQxAZBIpqFOIlAw3vaDTgaZqrWpZN
9Z/NViOy6SOMCQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:00 2026 by rpki-client