Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json)
Hash identifier: ga/0obnzuAv88yss/OQCLSDYJoKzHujnkq13PB/uAs8=
Subject key identifier: C1:38:29:73:46:C4:4C:29:81:00:75:92:21:A2:11:50:BD:38:66:66
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial: 019F93926978612D3D4EA25AE73B665229F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 10:01:13 +0000
Manifest this update: Fri 24 Jul 2026 10:01:13 +0000
Manifest next update: Sat 25 Jul 2026 10:01:13 +0000
Files and hashes: 1: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: ICg4wM6u0POZWlIsbtZYU+8IIj3ZC5Qm7YtNHx3ltcM=)
2: hBPMfJjzisDLgAAy42OAPWTEtn4.roa (hash: 7+lbylCTdmTyru0tkrcTEDn3h1rEwAZ3WSEJuuLSstI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:69:78:61:2d:3d:4e:a2:5a:e7:3b:66:52:29:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Validity
Not Before: Jul 24 10:01:13 2026 GMT
Not After : Jul 25 10:01:13 2026 GMT
Subject: CN=c138297346c44c298100759221a21150bd386666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:c6:25:23:a4:17:39:92:70:1e:89:0f:a0:
b0:e6:4d:5a:80:0e:02:04:9c:79:a8:f0:a3:63:d1:
22:9e:40:56:ae:f0:16:b7:02:3c:1c:f4:cc:cd:ef:
e4:da:69:ee:5a:30:d2:74:39:95:a2:5c:27:59:21:
dd:f8:23:14:32:2c:7c:e5:e0:37:cd:63:80:2f:ea:
19:f9:5c:a3:fd:94:56:76:45:cd:89:c0:cc:1a:e9:
3f:89:ea:5b:8c:26:ab:df:24:c2:97:42:1a:04:bb:
0f:30:77:c4:6a:31:71:5c:5d:ca:03:97:55:82:0a:
67:3a:5c:cd:41:96:ec:b0:73:f9:83:b9:6b:c1:87:
d4:f2:b6:ba:5b:ab:6c:f5:91:59:0b:cb:2b:06:fb:
a1:a9:08:80:44:de:df:ae:44:2d:28:f2:70:cf:fb:
09:8b:fb:a4:aa:22:4e:16:db:bc:32:51:3e:8e:71:
f7:4a:12:7c:66:4e:ec:fc:a0:dc:ab:c7:6f:05:f9:
89:93:33:09:ee:c8:55:5d:79:74:fe:3c:25:d4:eb:
49:84:99:2e:5f:71:05:66:4f:39:63:c1:7f:2c:23:
9f:dd:7c:92:32:24:83:ac:21:55:68:51:cf:88:65:
98:7a:28:dd:41:a7:95:d3:d3:17:24:01:d7:75:ed:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:38:29:73:46:C4:4C:29:81:00:75:92:21:A2:11:50:BD:38:66:66
X509v3 Authority Key Identifier:
keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3f:67:f9:d5:b8:b5:16:b0:15:6c:89:2a:2e:85:97:d9:30:
a4:ff:98:72:e9:8f:fe:5e:19:53:ee:47:32:ac:62:d1:6d:d5:
90:ca:f7:5a:79:aa:2c:35:e8:bc:e8:05:89:ca:72:c4:b2:55:
33:00:31:30:a9:e9:30:d3:72:83:91:28:15:04:67:8b:50:20:
34:a4:06:22:89:92:1d:ef:c8:f4:19:35:8d:0b:71:b2:0f:ed:
d2:f2:44:86:fa:1a:05:72:85:02:4d:55:bf:1b:f8:2a:ec:36:
fd:4c:73:f0:ae:42:89:37:9f:03:2d:fd:fc:f8:be:ee:c3:42:
60:45:2f:bf:5d:16:01:34:32:25:11:05:1d:38:b5:b9:97:dc:
c5:39:35:6b:62:99:25:a0:c5:1b:55:41:0b:5a:d5:4f:59:13:
d6:d9:f3:be:00:e0:fe:a6:e2:6d:fc:23:1f:9c:c5:69:13:2e:
88:c4:b1:9b:39:50:a1:24:a0:93:0f:61:de:65:2d:9a:f7:e7:
5c:4c:f1:71:76:ca:ea:68:49:0a:39:36:06:fa:e3:f2:7a:09:
df:3e:3b:8f:b1:d7:b6:e4:bb:54:b7:b6:3d:77:fa:41:a2:69:
4d:55:bf:ce:fc:37:dd:41:5c:a9:18:9e:7b:61:91:e1:ab:d0:
94:d1:5e:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Tkml4YS09TqJa5ztmUinwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZmFiMDkxNjhlN2NjNjZiNjYzYzYxNjJkNWM4ZDQ1NDk2
NWNjZTIwHhcNMjYwNzI0MTAwMTEzWhcNMjYwNzI1MTAwMTEzWjAzMTEwLwYDVQQD
EyhjMTM4Mjk3MzQ2YzQ0YzI5ODEwMDc1OTIyMWEyMTE1MGJkMzg2NjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgDGJSOkFzmScB6JD6Cw5k1agA4C
BJx5qPCjY9EinkBWrvAWtwI8HPTMze/k2mnuWjDSdDmVolwnWSHd+CMUMix85eA3
zWOAL+oZ+Vyj/ZRWdkXNicDMGuk/iepbjCar3yTCl0IaBLsPMHfEajFxXF3KA5dV
ggpnOlzNQZbssHP5g7lrwYfU8ra6W6ts9ZFZC8srBvuhqQiARN7frkQtKPJwz/sJ
i/ukqiJOFtu8MlE+jnH3ShJ8Zk7s/KDcq8dvBfmJkzMJ7shVXXl0/jwl1OtJhJku
X3EFZk85Y8F/LCOf3XySMiSDrCFVaFHPiGWYeijdQaeV09MXJAHXde1TewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFME4KXNGxEwpgQB1kiGiEVC9OGZmMB8GA1UdIwQY
MBaAFGr6sJFo58xmtmPGFi1cjUVJZcziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9hYWZjYjItNDkxZC00YjgwLTkxNjgt
NWYzMzgxYjA3MWRhLzEvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9hYWZjYjItNDkxZC00YjgwLTkxNjgtNWYzMzgxYjA3MWRh
LzEvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoT9n+dW4
tRawFWyJKi6Fl9kwpP+YcumP/l4ZU+5HMqxi0W3VkMr3WnmqLDXovOgFicpyxLJV
MwAxMKnpMNNyg5EoFQRni1AgNKQGIomSHe/I9Bk1jQtxsg/t0vJEhvoaBXKFAk1V
vxv4Kuw2/Uxz8K5CiTefAy39/Pi+7sNCYEUvv10WATQyJREFHTi1uZfcxTk1a2KZ
JaDFG1VBC1rVT1kT1tnzvgDg/qbibfwjH5zFaRMuiMSxmzlQoSSgkw9h3mUtmvfn
XEzxcXbK6mhJCjk2Bvrj8noJ3z47j7HXtuS7VLe2PXf6QaJpTVW/zvw33UFcqRie
e2GR4avQlNFesQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:26:59 2026 by rpki-client