Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json)
Hash identifier: Eteq7qu2zV3Wo8faepfSwq4FP4+SySj0ZLvHTzGPCIE=
Subject key identifier: FE:DD:D2:B9:BD:D4:C3:F5:67:B3:11:FE:EA:CC:E8:D1:A2:2C:6E:68
Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Certificate serial: 019D2AE0F68E3CF3A1E61F0D1F0BB81A129E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 16:01:19 +0000
Manifest this update: Thu 26 Mar 2026 16:01:19 +0000
Manifest next update: Fri 27 Mar 2026 16:01:19 +0000
Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: VdPIyMNN/6kyXXe6py2TEUImbtbwJO1CUqnTya0+rLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:f6:8e:3c:f3:a1:e6:1f:0d:1f:0b:b8:1a:12:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Validity
Not Before: Mar 26 16:01:19 2026 GMT
Not After : Mar 27 16:01:19 2026 GMT
Subject: CN=feddd2b9bdd4c3f567b311feeacce8d1a22c6e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:65:af:61:b1:40:95:10:9f:6e:69:38:e9:
06:40:be:23:04:80:79:7b:8e:ae:07:3e:5f:91:5a:
53:77:94:6f:55:d8:63:b5:08:8e:09:1e:b3:0b:ec:
93:52:13:2e:5d:4f:43:d4:3f:ee:a7:a9:ca:08:a8:
6c:5a:54:cd:04:31:eb:22:c5:e8:b3:11:4d:4d:56:
70:d2:81:28:8e:c4:ee:2c:85:aa:70:bc:e9:bc:a7:
f9:7d:59:56:03:7f:2e:54:86:08:99:48:4e:95:71:
2e:7b:de:cb:0d:10:68:dc:a2:6a:e8:bc:a4:af:c4:
bf:6c:08:3e:59:a4:08:05:af:fa:bc:ae:e6:42:77:
a7:37:3c:21:52:a4:5d:b2:58:c0:c2:8e:8c:8c:54:
43:9b:ee:73:7c:cf:63:0c:0a:7f:60:60:2b:09:af:
81:76:29:dc:20:48:2c:06:5a:9c:75:c8:41:75:9d:
d1:bf:cb:0e:63:02:a7:69:16:3c:57:aa:e3:1b:1a:
da:28:5f:f5:c8:8c:76:41:c7:77:04:c2:c2:db:76:
21:2f:64:e0:8e:f1:ed:0a:e8:a9:c3:b4:17:60:4b:
70:88:98:3e:b4:c3:44:6b:27:5c:ed:96:15:5e:4b:
29:42:85:78:ba:86:e7:f8:57:c6:31:bb:0a:73:db:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DD:D2:B9:BD:D4:C3:F5:67:B3:11:FE:EA:CC:E8:D1:A2:2C:6E:68
X509v3 Authority Key Identifier:
keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:47:99:25:81:56:cf:09:23:73:37:6f:cf:07:94:0a:3b:a2:
b0:23:61:d9:66:d2:c0:83:70:bf:0c:34:cd:3c:81:14:41:50:
d7:9c:81:c9:36:68:33:95:ae:34:14:4e:72:60:54:25:de:56:
cf:46:c4:95:a1:75:23:18:77:bc:b2:0f:d5:d8:19:f5:0f:7e:
88:1b:53:07:5d:d7:c4:af:c2:a7:6c:4b:95:60:0d:42:85:c2:
04:5e:86:38:64:4f:70:90:c4:b6:7b:a0:32:4c:7b:1b:09:df:
50:1e:37:53:40:03:ce:f8:a7:a8:4a:25:81:d1:4f:8e:52:40:
2e:30:80:96:a4:a3:7c:c0:49:56:57:a8:13:57:75:c8:7e:0c:
17:e2:ae:91:a7:12:83:18:c6:c1:0e:31:c0:26:7e:28:c5:7d:
9c:00:0b:89:c5:0a:ba:6b:6b:f4:86:a4:b5:96:e6:6f:88:e7:
7f:3e:00:0f:c5:8d:3a:0c:e3:c3:74:e9:89:b8:66:3b:c9:66:
56:23:53:bd:bc:db:fa:28:a8:2b:a1:d7:42:9d:b9:e5:f2:b2:
a5:b4:23:ba:bb:d2:be:5b:15:f7:44:9f:c6:e8:86:6c:f2:20:
9e:74:e3:32:6f:22:ed:b5:ee:44:ad:dd:77:27:9b:e3:db:eb:
2e:12:a5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:13:46 2026 by rpki-client