Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier: 3fZehRShsOAd2+yieWE7GGmA3L+rYMXGQiwc3eYSYBU=
Subject key identifier: 09:2C:4F:B1:6B:85:88:47:ED:06:53:50:B9:A0:8F:D7:8B:C5:C9:FD
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 019E1DFE8D31E29744CDEE181CB20C4884F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number: 141B
Signing time: Tue 12 May 2026 21:01:21 +0000
Manifest this update: Tue 12 May 2026 21:01:21 +0000
Manifest next update: Wed 13 May 2026 21:01:21 +0000
Files and hashes: 1: PrGwU2TW-rYM4XlKNokSqvhickE.roa (hash: fwpVBF6tUhobxteId7IZ9kM2ae4pupPUogMY1BLAryM=)
2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: fTBgf3mI3UHvxvmm5RWn6Jf6qsvdxziV7jguvalEBMA=)
3: dbor2V1CZeSh-DsNvUTjnrohp5k.roa (hash: ThyL23NfAVtNK001dI1v2bX0HhRJe3heaSpGsGvlJC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:8d:31:e2:97:44:cd:ee:18:1c:b2:0c:48:84:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: May 12 21:01:21 2026 GMT
Not After : May 13 21:01:21 2026 GMT
Subject: CN=092c4fb16b858847ed065350b9a08fd78bc5c9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:23:44:3f:01:75:3a:2c:c9:df:dc:38:2d:
2b:a6:ea:fa:f3:ce:c4:52:05:16:e6:7d:96:56:44:
5e:4e:31:8e:a0:f5:ed:5a:f2:fa:7f:17:30:a9:42:
14:5f:8d:45:4e:12:a4:e5:dc:c5:60:fe:17:38:e1:
0d:ad:48:d7:d1:25:06:04:c7:9b:17:9b:12:aa:83:
05:fc:59:b7:71:26:b5:e1:3b:99:4a:1f:e6:b8:1c:
03:d3:71:53:48:06:20:1b:c7:f6:4d:6c:ff:a6:65:
9d:a3:c3:67:97:64:a3:46:bd:56:e8:cc:3d:87:d5:
f3:20:69:26:c4:b3:1d:ba:14:b9:d9:28:71:f8:99:
d8:90:8a:e3:83:40:4f:0b:50:dc:6f:5f:d7:db:8c:
a5:3a:90:dd:78:52:02:ed:f0:51:a4:7d:8e:66:ce:
6b:0f:f4:c8:82:a2:5f:91:c5:cd:30:54:e6:42:39:
3f:9c:96:dd:06:0a:3d:5f:9a:15:b8:c8:12:f0:02:
f9:40:47:c7:f9:78:17:a9:4b:21:0d:e7:2e:41:52:
e3:cd:30:44:61:37:6c:49:33:f4:19:1c:ea:de:14:
d3:5f:10:13:1c:d7:9b:82:a5:94:77:35:47:be:cc:
c8:dc:63:9c:6d:ec:e7:e8:d6:08:48:5d:0d:84:98:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2C:4F:B1:6B:85:88:47:ED:06:53:50:B9:A0:8F:D7:8B:C5:C9:FD
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:09:8e:48:21:7d:b8:3f:7c:9f:98:a9:ce:94:f7:6c:9a:92:
04:f7:cf:a9:d7:79:3f:0e:b8:ed:85:ce:51:38:c1:90:1e:5f:
fb:84:94:40:94:f6:4f:e6:6d:c5:68:4b:ee:50:fe:e0:c1:96:
84:e9:42:fd:c0:3b:31:b9:55:1b:4e:ce:49:c2:0d:74:6b:b0:
ab:d0:10:a2:70:c7:4d:83:f7:3f:24:4e:79:15:f1:0c:7d:aa:
d9:13:e3:1d:da:13:42:aa:26:50:38:ac:be:43:18:c6:a8:2b:
0c:ec:8c:2e:d2:1e:61:32:72:5e:43:67:52:fe:55:19:d7:e5:
77:04:37:7a:bc:89:92:3a:62:d4:e9:09:47:3c:7d:c7:06:94:
e8:22:5c:65:5d:b4:a2:f1:3b:24:bc:6f:cb:e2:63:c4:c9:ca:
7b:e9:0b:71:0d:52:ca:b7:52:fc:77:b4:66:e8:06:11:6c:85:
1b:c1:a6:d2:cd:30:f9:1e:ce:2e:44:ea:da:0c:1f:88:b7:44:
1b:e5:28:31:c9:89:aa:04:1e:d4:11:d6:df:82:2b:4a:43:fd:
00:6f:5c:24:02:15:b1:6d:3b:a6:1e:c8:74:fb:c1:c5:49:4c:
cb:cb:0c:dd:f2:e0:ea:af:13:4b:47:4c:cb:47:5e:3c:17:5a:
ef:39:91:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:47:37 2026 by rpki-client