Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json)
Hash identifier: dQOhq5WqvwzGhJCPK6dc3o+6J/AyGDbpBUBvK3gsijw=
Subject key identifier: 60:D7:13:A4:F9:C9:E8:6F:98:01:11:70:A8:2C:F3:4C:51:3E:09:A9
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial: 01A100919579521DAE12C0C4275053FFEC62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
Manifest number: 1A86
Signing time: Sat 03 Oct 2026 07:01:43 +0000
Manifest this update: Sat 03 Oct 2026 07:01:43 +0000
Manifest next update: Sun 04 Oct 2026 07:01:43 +0000
Files and hashes: 1: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: XsnOEOVr/bDCFdtEsyHeSaU851eTRZMCp2ptTqWM/uM=)
2: hBPMfJjzisDLgAAy42OAPWTEtn4.roa (hash: 7+lbylCTdmTyru0tkrcTEDn3h1rEwAZ3WSEJuuLSstI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:91:95:79:52:1d:ae:12:c0:c4:27:50:53:ff:ec:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Validity
Not Before: Oct 3 07:01:43 2026 GMT
Not After : Oct 4 07:01:43 2026 GMT
Subject: CN=60d713a4f9c9e86f98011170a82cf34c513e09a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ec:99:ad:fa:9c:43:26:a9:02:bd:40:e6:bc:
a8:24:ba:bc:fb:7a:fc:19:4b:08:2b:85:ce:46:65:
19:cf:f6:ca:f8:78:62:53:b2:b1:33:cd:6d:ef:b0:
b8:54:e4:ff:f6:65:fc:e0:61:b5:39:a9:55:96:55:
fc:58:9e:3b:7a:f2:ba:e5:3e:ad:c0:2c:73:3d:51:
8b:a0:87:c5:d3:07:3b:f2:36:27:93:12:93:3e:a8:
b5:78:d9:5e:fb:49:91:d9:14:6b:13:3c:c7:82:97:
38:a2:30:13:a2:50:6a:b1:da:5a:5d:a9:7e:af:19:
31:b4:0f:b3:9f:4a:19:9f:b1:4d:db:b1:93:5e:31:
2c:78:d3:d4:7d:6d:26:7a:84:52:e1:eb:23:3d:80:
b9:da:2a:a0:0c:17:bc:35:d7:b3:f0:b3:0f:bf:99:
9a:4d:cc:bb:9b:95:23:3d:6e:2c:e2:bc:08:a7:76:
aa:88:a5:aa:8f:2d:2f:ad:23:5b:22:bd:0f:19:e4:
26:45:56:45:94:e3:60:eb:db:94:ec:87:fc:7e:b2:
b2:e6:d3:c3:c8:af:74:d2:7d:6a:6f:4b:b7:d4:2e:
d4:39:78:0f:70:be:04:95:74:d5:9a:c7:b3:4b:1a:
72:7e:31:8e:a5:87:37:50:68:9f:10:d8:60:05:bb:
91:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D7:13:A4:F9:C9:E8:6F:98:01:11:70:A8:2C:F3:4C:51:3E:09:A9
X509v3 Authority Key Identifier:
keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:31:0f:f3:32:10:ef:88:6a:f3:e6:f9:fc:98:46:11:0f:fa:
96:3c:19:ff:9e:a5:65:a2:66:f7:e7:4d:41:be:18:b1:89:b3:
79:23:af:bf:ca:d1:33:04:76:67:d4:9c:cf:cd:31:ae:47:c5:
83:52:e7:53:81:3e:37:0e:fd:08:07:44:fb:2d:75:76:68:f7:
99:01:ba:d6:85:68:2d:1c:f5:af:0d:82:93:57:fe:0e:03:cf:
35:76:cb:1c:5a:7f:c4:85:53:05:17:5b:e4:fe:46:b8:53:d8:
88:29:ca:89:b4:04:e9:df:82:d3:97:bc:3c:15:a5:bb:fb:8f:
36:af:b7:00:9a:23:42:bd:ca:db:ac:a7:78:fb:96:d4:df:2e:
51:9b:ce:63:e1:60:41:60:cf:ba:03:5a:1c:ab:82:4c:16:1c:
3b:8f:79:2c:95:2d:37:c5:51:79:e7:08:00:9d:4c:6d:52:ce:
d5:b5:4a:c9:43:48:6d:f5:98:70:6b:19:75:ac:10:8c:1d:79:
32:ba:a7:a9:7e:8b:87:07:5b:1b:13:70:94:d7:fe:45:0e:b0:
98:cb:76:9a:f0:4b:ae:a7:98:91:e4:9d:70:75:70:70:f5:09:
67:7c:43:de:09:f2:b4:fa:2a:34:0d:3b:b2:6f:3a:17:58:30:
21:32:cc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:21:59 2026 by rpki-client