Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
File: AVgEEYI7SHN2g27WavP4qrsgEZw.mft (raw, json)
Hash identifier: qy1P+ytghB1Ar04j5xrc9pBBLpgYKG3G4gYVMgBhoGY=
Subject key identifier: 95:EF:3F:DA:E7:C4:4A:D0:E8:11:F9:FB:8C:BE:CE:0F:5B:A3:4D:A9
Authority key identifier: 01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C
Certificate issuer: /CN=01580411823b487376836ed66af3f8aabb20119c
Certificate serial: 01A0D7602A23D43D07545E700F70F23FACDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
Manifest number: 1A6C
Signing time: Fri 25 Sep 2026 07:03:18 +0000
Manifest this update: Fri 25 Sep 2026 07:03:18 +0000
Manifest next update: Sat 26 Sep 2026 07:03:18 +0000
Files and hashes: 1: AVgEEYI7SHN2g27WavP4qrsgEZw.crl (hash: d09y73wf0rcy7wH5VpKUy7OSv0PYboH9MjV0Tso8hdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:60:2a:23:d4:3d:07:54:5e:70:0f:70:f2:3f:ac:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01580411823b487376836ed66af3f8aabb20119c
Validity
Not Before: Sep 25 07:03:18 2026 GMT
Not After : Sep 26 07:03:18 2026 GMT
Subject: CN=95ef3fdae7c44ad0e811f9fb8cbece0f5ba34da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:42:4f:1a:85:50:ca:7f:d1:5a:7c:2e:57:
f6:61:43:c7:a4:04:b5:b8:ae:de:be:7a:6f:ff:38:
85:4e:b3:c8:4f:45:d9:68:1c:95:23:6c:18:54:fc:
c5:bb:92:58:9c:12:ec:41:86:1a:bb:ae:49:30:52:
36:4b:b1:e8:08:f8:56:1e:67:33:98:49:80:e8:10:
9e:1c:55:ee:7d:82:78:2d:c4:f2:99:c2:f7:3a:56:
2f:5a:ac:80:f9:40:ab:9e:a3:1c:03:d6:d9:d2:fe:
00:e1:85:fe:c4:c5:00:23:22:3c:b8:47:39:84:d8:
8b:aa:d3:b8:23:ef:a7:0f:a8:4e:91:39:0c:0a:91:
86:3b:06:6a:c3:86:35:13:6a:c1:da:87:20:9f:cd:
98:27:40:ed:24:fa:19:af:7f:53:c5:f7:9e:c3:e5:
89:dd:8d:47:b9:c6:e1:ae:95:3a:1b:ab:4c:0b:aa:
67:ab:be:36:b2:d7:ba:3f:76:40:22:9e:be:7b:6e:
85:98:b4:59:37:95:50:cb:03:a7:0b:f9:8a:38:4f:
17:21:1f:2c:04:2a:4a:b2:e9:34:67:2f:0e:c8:86:
9b:94:4a:7d:23:74:53:df:ec:9e:7b:79:d7:88:c9:
f0:7f:a2:02:c1:f0:aa:c9:e6:68:65:b2:52:8a:66:
a7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EF:3F:DA:E7:C4:4A:D0:E8:11:F9:FB:8C:BE:CE:0F:5B:A3:4D:A9
X509v3 Authority Key Identifier:
keyid:01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:dd:01:4d:7e:5e:bb:05:34:5b:2b:a5:7e:9e:2e:dd:10:8e:
5c:b8:1f:9a:99:a9:fc:be:a6:38:6c:4e:1c:a5:e5:f9:01:4e:
d4:85:db:9a:0d:7b:41:17:2f:00:ee:40:4b:3f:8b:d3:83:32:
4b:57:45:63:62:74:27:3b:b3:ca:78:dd:1a:21:d7:63:66:2e:
b7:4a:72:ca:50:69:f7:58:93:8f:d4:bf:ad:36:1b:c1:a2:a3:
c8:a1:03:b8:94:2b:4a:d3:2c:6c:97:bd:9f:25:94:f3:a8:46:
20:82:c6:5a:a7:91:94:cd:d0:95:a1:b8:0c:45:3e:4b:e2:4e:
58:02:6d:21:06:89:16:63:1e:64:2c:d7:95:f5:fb:f8:95:d3:
f2:79:12:5a:fd:77:25:5a:38:65:c4:3a:74:96:cb:df:02:32:
b6:16:93:70:b0:ff:24:ca:41:71:de:5b:0c:e5:ad:41:1c:0f:
68:4c:90:cf:b7:23:db:b0:62:9d:ca:11:8d:c5:f2:21:de:14:
81:7f:51:bc:89:3e:56:6c:ed:b1:db:c5:56:c8:e5:f5:21:cf:
d1:af:59:41:74:c5:df:80:59:01:0e:dd:15:9d:c0:30:bf:8f:
97:6a:c3:33:cd:46:65:a7:0b:4f:22:e8:b5:0b:bb:2e:6b:49:
99:07:b1:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXYCoj1D0HVF5wD3DyP6zdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNTgwNDExODIzYjQ4NzM3NjgzNmVkNjZhZjNmOGFhYmIy
MDExOWMwHhcNMjYwOTI1MDcwMzE4WhcNMjYwOTI2MDcwMzE4WjAzMTEwLwYDVQQD
Eyg5NWVmM2ZkYWU3YzQ0YWQwZTgxMWY5ZmI4Y2JlY2UwZjViYTM0ZGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9RCTxqFUMp/0Vp8Llf2YUPHpAS1
uK7evnpv/ziFTrPIT0XZaByVI2wYVPzFu5JYnBLsQYYau65JMFI2S7HoCPhWHmcz
mEmA6BCeHFXufYJ4LcTymcL3OlYvWqyA+UCrnqMcA9bZ0v4A4YX+xMUAIyI8uEc5
hNiLqtO4I++nD6hOkTkMCpGGOwZqw4Y1E2rB2ocgn82YJ0DtJPoZr39Txfeew+WJ
3Y1HucbhrpU6G6tMC6pnq742ste6P3ZAIp6+e26FmLRZN5VQywOnC/mKOE8XIR8s
BCpKsuk0Zy8OyIablEp9I3RT3+yee3nXiMnwf6ICwfCqyeZoZbJSimanCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXvP9rnxErQ6BH5+4y+zg9bo02pMB8GA1UdIwQY
MBaAFAFYBBGCO0hzdoNu1mrz+Kq7IBGcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVZnRUVZSTdTSE4yZzI3V2F2UDRxcnNnRVp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wOWQ2NjctYjFjNS00NTIxLThiNWYt
YzE4YWJlY2RkNTI0LzEvQVZnRUVZSTdTSE4yZzI3V2F2UDRxcnNnRVp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wOWQ2NjctYjFjNS00NTIxLThiNWYtYzE4YWJlY2RkNTI0
LzEvQVZnRUVZSTdTSE4yZzI3V2F2UDRxcnNnRVp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEt0BTX5e
uwU0Wyulfp4u3RCOXLgfmpmp/L6mOGxOHKXl+QFO1IXbmg17QRcvAO5ASz+L04My
S1dFY2J0JzuzynjdGiHXY2Yut0pyylBp91iTj9S/rTYbwaKjyKEDuJQrStMsbJe9
nyWU86hGIILGWqeRlM3QlaG4DEU+S+JOWAJtIQaJFmMeZCzXlfX7+JXT8nkSWv13
JVo4ZcQ6dJbL3wIythaTcLD/JMpBcd5bDOWtQRwPaEyQz7cj27BincoRjcXyId4U
gX9RvIk+VmztsdvFVsjl9SHP0a9ZQXTF34BZAQ7dFZ3AML+Pl2rDM81GZacLTyLo
tQu7LmtJmQexlg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 12:51:29 2026 by rpki-client