Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
File: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft (raw, json)
Hash identifier: 1EvlHpObsMgMQLsQTvetCBiAE1MWXNWwbcK8Ai4DrZs=
Subject key identifier: 6D:67:11:2F:5C:2F:1F:9E:DB:BC:D1:82:AE:44:67:4C:8F:D8:76:EE
Authority key identifier: 01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
Certificate issuer: /CN=01538851167b4e3d6f64d53797b08cb41371870f
Certificate serial: 01A0D2A5B44BB36017AF8CC8F953FF206E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 09:01:09 +0000
Manifest this update: Thu 24 Sep 2026 09:01:09 +0000
Manifest next update: Fri 25 Sep 2026 09:01:09 +0000
Files and hashes: 1: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl (hash: S9iZlsXp/4Eq66bvszt4IG4FRqhkPBN+ehfBAKL/ojU=)
2: mWE6kT69cqu-PW8JgJR1gCAZ64s.roa (hash: FJjpE6dQyURSUrQm7mC2IcezcL6cJcvz4TAfaMMJ8lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:b4:4b:b3:60:17:af:8c:c8:f9:53:ff:20:6e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01538851167b4e3d6f64d53797b08cb41371870f
Validity
Not Before: Sep 24 09:01:09 2026 GMT
Not After : Sep 25 09:01:09 2026 GMT
Subject: CN=6d67112f5c2f1f9edbbcd182ae44674c8fd876ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:16:4b:43:f0:1e:0d:3c:41:6d:df:c3:1d:99:
c3:12:9b:2d:f3:0b:00:2c:9d:0f:a0:25:66:a0:77:
e0:60:95:f0:36:8e:a4:04:0d:fc:c7:53:2a:94:f5:
3f:b9:9b:ec:f5:6c:52:0e:e9:94:53:3a:2f:fe:78:
f0:f8:2c:c4:5f:ee:eb:67:7e:b9:0c:c4:4c:db:d0:
1e:86:14:30:a5:58:7a:a9:b4:75:22:34:65:d6:14:
34:65:94:1a:b6:36:67:f9:dc:76:ff:5c:a7:87:41:
39:ea:4b:71:82:f5:43:94:dc:ec:12:97:9e:78:19:
5f:55:cf:4e:97:4e:f3:a5:d3:ef:37:d2:ce:7d:5a:
42:e1:6a:84:96:fd:00:ea:97:bb:1a:98:c3:d3:26:
bc:46:c5:77:0c:76:55:9f:25:17:41:b6:b8:03:cb:
94:28:5f:ad:4a:d7:26:50:15:35:d1:4c:86:aa:1b:
fc:73:32:7c:8a:fe:16:3d:b4:6f:92:22:d9:08:21:
e1:80:c0:c8:3d:1a:24:76:27:1b:e3:e3:78:41:b4:
1b:ca:18:79:1a:0f:f9:0a:ac:47:0c:fb:ca:30:b4:
d9:1a:0a:5e:f9:ee:82:3f:4b:c8:99:f0:49:a0:14:
b7:f3:59:fc:8e:4d:64:a3:81:53:6a:44:fb:41:0e:
36:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:67:11:2F:5C:2F:1F:9E:DB:BC:D1:82:AE:44:67:4C:8F:D8:76:EE
X509v3 Authority Key Identifier:
keyid:01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d4:25:47:0e:0f:6c:30:7c:71:f2:c6:04:67:31:31:12:5b:
ea:3b:cd:9f:c8:11:e6:94:16:38:08:e4:a7:57:af:63:e5:2c:
c1:f6:71:42:19:d5:5d:92:ee:14:78:07:71:64:6c:d0:b7:d5:
0a:30:35:4c:f9:85:6d:be:f9:0f:61:34:4f:93:51:1a:44:4f:
fa:b2:fc:5d:42:74:32:9c:f7:50:c4:19:02:26:da:c5:c2:e5:
ec:7d:08:da:d1:b7:73:cf:78:4d:26:0a:24:fd:52:b8:c8:5e:
18:48:ec:e7:a7:16:8f:b1:d7:23:73:f8:33:7e:8b:07:4c:70:
9e:3e:65:a4:13:be:30:44:b4:17:57:45:8f:3c:42:8c:ad:1d:
58:fd:4a:c4:aa:4b:1d:58:9e:2b:2c:91:ef:e7:71:70:e4:3f:
8b:54:ed:a1:64:a7:43:35:82:46:16:35:01:0f:a8:17:00:8e:
57:e1:4a:1d:b6:02:76:c9:61:9b:ca:e2:36:62:94:b5:4d:4e:
c9:71:5f:71:7b:a1:2d:76:b2:0f:21:ed:de:d9:f2:b1:a0:25:
93:ca:3a:8a:de:ca:a5:1e:89:60:58:d1:19:2f:74:40:6b:08:
b6:a6:55:e7:c4:a5:fd:da:12:a4:82:01:f3:c9:69:47:36:24:
a4:80:6a:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSpbRLs2AXr4zI+VP/IG5RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNTM4ODUxMTY3YjRlM2Q2ZjY0ZDUzNzk3YjA4Y2I0MTM3
MTg3MGYwHhcNMjYwOTI0MDkwMTA5WhcNMjYwOTI1MDkwMTA5WjAzMTEwLwYDVQQD
Eyg2ZDY3MTEyZjVjMmYxZjllZGJiY2QxODJhZTQ0Njc0YzhmZDg3NmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxZLQ/AeDTxBbd/DHZnDEpst8wsA
LJ0PoCVmoHfgYJXwNo6kBA38x1MqlPU/uZvs9WxSDumUUzov/njw+CzEX+7rZ365
DMRM29AehhQwpVh6qbR1IjRl1hQ0ZZQatjZn+dx2/1ynh0E56ktxgvVDlNzsEpee
eBlfVc9Ol07zpdPvN9LOfVpC4WqElv0A6pe7GpjD0ya8RsV3DHZVnyUXQba4A8uU
KF+tStcmUBU10UyGqhv8czJ8iv4WPbRvkiLZCCHhgMDIPRokdicb4+N4QbQbyhh5
Gg/5CqxHDPvKMLTZGgpe+e6CP0vImfBJoBS381n8jk1ko4FTakT7QQ42AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1nES9cLx+e27zRgq5EZ0yP2HbuMB8GA1UdIwQY
MBaAFAFTiFEWe049b2TVN5ewjLQTcYcPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVZPSVVSWjdUajF2Wk5VM2w3Q010Qk54aHc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iZjQyNjMtZmZhZS00MmQ3LWJlMGYt
NjI5NWI4NTRkZjg2LzEvQVZPSVVSWjdUajF2Wk5VM2w3Q010Qk54aHc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9iZjQyNjMtZmZhZS00MmQ3LWJlMGYtNjI5NWI4NTRkZjg2
LzEvQVZPSVVSWjdUajF2Wk5VM2w3Q010Qk54aHc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtQlRw4P
bDB8cfLGBGcxMRJb6jvNn8gR5pQWOAjkp1evY+UswfZxQhnVXZLuFHgHcWRs0LfV
CjA1TPmFbb75D2E0T5NRGkRP+rL8XUJ0Mpz3UMQZAibaxcLl7H0I2tG3c894TSYK
JP1SuMheGEjs56cWj7HXI3P4M36LB0xwnj5lpBO+MES0F1dFjzxCjK0dWP1KxKpL
HVieKyyR7+dxcOQ/i1TtoWSnQzWCRhY1AQ+oFwCOV+FKHbYCdslhm8riNmKUtU1O
yXFfcXuhLXayDyHt3tnysaAlk8o6it7KpR6JYFjRGS90QGsItqZV58Sl/doSpIIB
88lpRzYkpIBqMQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:52:42 2026 by rpki-client