Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
File: AVgEEYI7SHN2g27WavP4qrsgEZw.mft (raw, json)
Hash identifier: T+IILNEHEukRS339QmBhwwLzk2mul7RpIQiItscUKbA=
Subject key identifier: 90:5F:B2:26:65:69:5D:94:E2:BB:F4:17:A2:40:47:21:D0:9C:CC:86
Authority key identifier: 01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C
Certificate issuer: /CN=01580411823b487376836ed66af3f8aabb20119c
Certificate serial: 019F92ED4D11A44BE354D07F8D4CF597B1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 07:00:52 +0000
Manifest this update: Fri 24 Jul 2026 07:00:52 +0000
Manifest next update: Sat 25 Jul 2026 07:00:52 +0000
Files and hashes: 1: AVgEEYI7SHN2g27WavP4qrsgEZw.crl (hash: HsLdKwulPd+zAVy6fboR9SuljYmkb8zSPdr2WG7YLaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:4d:11:a4:4b:e3:54:d0:7f:8d:4c:f5:97:b1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01580411823b487376836ed66af3f8aabb20119c
Validity
Not Before: Jul 24 07:00:52 2026 GMT
Not After : Jul 25 07:00:52 2026 GMT
Subject: CN=905fb22665695d94e2bbf417a2404721d09ccc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:53:61:81:af:91:0d:c7:74:28:49:7e:df:
6b:4b:7f:dc:c0:41:fb:e3:c0:e3:6c:df:c4:dd:ea:
e6:0a:39:f7:08:ce:e0:42:20:07:74:56:65:eb:34:
de:ee:b9:8f:c1:43:db:3c:4c:8a:60:c5:2f:84:4d:
18:15:99:2d:70:e0:fe:7b:54:2c:0d:76:84:b3:9c:
ec:f9:fc:20:39:55:84:6b:d7:6a:a6:60:93:4a:60:
28:65:83:4b:d3:8c:7d:9d:69:90:37:e2:14:fe:2e:
1a:d0:4d:0c:4d:e4:2d:c6:6c:6d:05:e9:06:d3:2a:
54:b9:a9:4c:5b:82:ce:cc:51:23:83:39:a2:44:1f:
1e:70:ff:0e:19:0e:29:76:ff:8a:29:e4:ff:aa:a5:
b1:3d:ef:96:4d:e8:0d:63:1c:1e:2f:4f:b5:97:28:
f3:1b:b6:1b:76:33:d3:27:ee:ac:00:1f:91:39:4f:
10:24:86:82:98:55:76:2d:c1:37:22:4a:2a:49:bb:
b2:a4:d6:cc:2f:3c:46:7b:13:20:b1:64:3e:97:7f:
d4:60:7e:c3:f9:a1:44:a4:d1:52:0b:cd:6f:cd:fb:
8e:4e:1e:44:a7:73:e7:01:b0:0d:5c:6f:94:26:d8:
59:ed:49:dd:1e:d9:10:b5:35:56:32:ea:69:90:6e:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5F:B2:26:65:69:5D:94:E2:BB:F4:17:A2:40:47:21:D0:9C:CC:86
X509v3 Authority Key Identifier:
keyid:01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:46:20:a2:82:f1:75:f2:42:33:2b:d6:9c:2f:75:a6:a4:d8:
30:55:4e:c1:cb:28:dc:f4:28:a7:99:6f:a5:1c:d6:49:ea:ca:
d0:bf:a7:8a:03:6a:ad:a3:e9:ec:e9:d2:18:40:8e:32:b8:0f:
ce:0d:8e:41:7a:fa:1f:f1:e3:78:97:c9:10:51:ac:b6:97:bf:
b6:f2:2b:87:d3:69:44:20:5d:d5:41:80:7d:58:46:c9:7e:00:
c5:0a:0a:1e:94:83:fc:96:e5:ac:08:82:eb:d2:4a:ac:0b:21:
0b:96:5d:d4:4d:ae:03:1a:43:97:9f:bc:f8:a7:cb:08:3e:35:
24:f6:af:3f:2a:e2:b8:35:01:3c:90:29:16:c4:04:e7:76:c7:
f6:ae:2d:55:df:7c:25:1c:93:4a:6c:e8:c1:21:68:d1:89:b2:
70:aa:77:08:2a:81:7d:f7:4a:67:26:28:87:53:d9:b9:97:1c:
0d:b4:ec:99:b9:ae:60:ea:f5:5c:07:d2:6c:ac:f7:e8:ba:20:
5c:99:f7:7f:c6:54:9f:4e:c2:a5:5e:ed:ab:38:6b:e9:90:2b:
b5:d7:77:c8:01:0f:d3:57:5b:82:17:59:86:68:40:70:f5:7e:
6f:75:f7:af:72:aa:5a:d2:ea:64:2e:d6:99:d3:5a:e7:e6:8c:
64:13:5a:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7U0RpEvjVNB/jUz1l7GzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNTgwNDExODIzYjQ4NzM3NjgzNmVkNjZhZjNmOGFhYmIy
MDExOWMwHhcNMjYwNzI0MDcwMDUyWhcNMjYwNzI1MDcwMDUyWjAzMTEwLwYDVQQD
Eyg5MDVmYjIyNjY1Njk1ZDk0ZTJiYmY0MTdhMjQwNDcyMWQwOWNjYzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9RTYYGvkQ3HdChJft9rS3/cwEH7
48DjbN/E3ermCjn3CM7gQiAHdFZl6zTe7rmPwUPbPEyKYMUvhE0YFZktcOD+e1Qs
DXaEs5zs+fwgOVWEa9dqpmCTSmAoZYNL04x9nWmQN+IU/i4a0E0MTeQtxmxtBekG
0ypUualMW4LOzFEjgzmiRB8ecP8OGQ4pdv+KKeT/qqWxPe+WTegNYxweL0+1lyjz
G7YbdjPTJ+6sAB+ROU8QJIaCmFV2LcE3IkoqSbuypNbMLzxGexMgsWQ+l3/UYH7D
+aFEpNFSC81vzfuOTh5Ep3PnAbANXG+UJthZ7UndHtkQtTVWMuppkG7QMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBfsiZlaV2U4rv0F6JARyHQnMyGMB8GA1UdIwQY
MBaAFAFYBBGCO0hzdoNu1mrz+Kq7IBGcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVZnRUVZSTdTSE4yZzI3V2F2UDRxcnNnRVp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wOWQ2NjctYjFjNS00NTIxLThiNWYt
YzE4YWJlY2RkNTI0LzEvQVZnRUVZSTdTSE4yZzI3V2F2UDRxcnNnRVp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wOWQ2NjctYjFjNS00NTIxLThiNWYtYzE4YWJlY2RkNTI0
LzEvQVZnRUVZSTdTSE4yZzI3V2F2UDRxcnNnRVp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUYgooLx
dfJCMyvWnC91pqTYMFVOwcso3PQop5lvpRzWSerK0L+nigNqraPp7OnSGECOMrgP
zg2OQXr6H/HjeJfJEFGstpe/tvIrh9NpRCBd1UGAfVhGyX4AxQoKHpSD/JblrAiC
69JKrAshC5Zd1E2uAxpDl5+8+KfLCD41JPavPyriuDUBPJApFsQE53bH9q4tVd98
JRyTSmzowSFo0YmycKp3CCqBffdKZyYoh1PZuZccDbTsmbmuYOr1XAfSbKz36Log
XJn3f8ZUn07CpV7tqzhr6ZArtdd3yAEP01dbghdZhmhAcPV+b3X3r3KqWtLqZC7W
mdNa5+aMZBNasw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:18 2026 by rpki-client