Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json)
Hash identifier: 0baIC4vAc/lqmdEXwfGKyJ2Y6A+6hxrgYP7ZwhBtkeM=
Subject key identifier: B3:12:D0:E3:FB:6C:45:E9:D5:15:7F:45:5B:D5:07:AC:07:4F:79:02
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial: 019D29975ED1B88F4D68716CE19DB34012E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 10:01:19 +0000
Manifest this update: Thu 26 Mar 2026 10:01:19 +0000
Manifest next update: Fri 27 Mar 2026 10:01:19 +0000
Files and hashes: 1: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: W1mXshqqttsWpTWdy4/E6VxXYqW/OkirBV9A8p187Nw=)
2: hBPMfJjzisDLgAAy42OAPWTEtn4.roa (hash: 7+lbylCTdmTyru0tkrcTEDn3h1rEwAZ3WSEJuuLSstI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:5e:d1:b8:8f:4d:68:71:6c:e1:9d:b3:40:12:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Validity
Not Before: Mar 26 10:01:19 2026 GMT
Not After : Mar 27 10:01:19 2026 GMT
Subject: CN=b312d0e3fb6c45e9d5157f455bd507ac074f7902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:be:60:bb:41:da:6f:74:0f:e8:11:08:dc:
fd:c3:af:6a:df:50:38:0b:0a:b0:c8:70:c7:48:e5:
8e:d3:05:97:be:81:b1:76:2b:e4:48:60:66:b6:52:
64:c0:9b:f4:ca:df:b1:50:98:7a:5f:3a:f9:22:27:
6e:c9:4d:45:00:16:81:85:9f:a6:ff:48:eb:98:41:
de:fd:87:2e:78:26:44:60:59:b5:64:fd:07:a2:c2:
fa:c7:5a:42:3f:87:b8:ce:33:eb:14:a2:69:04:30:
71:a1:98:fd:a8:3d:c7:30:a0:85:a2:d2:d7:0c:6d:
2e:62:77:c7:1c:b0:f2:f9:c4:6b:cf:8e:6f:63:11:
69:2c:f7:fd:4f:16:5e:07:da:3c:ba:8a:db:d9:57:
22:b5:a7:28:bd:b1:4d:1b:e9:c8:e9:4f:05:95:2e:
8c:b3:54:20:0e:36:2f:6c:83:6f:eb:bb:be:e2:d2:
77:24:d4:bb:f3:5d:6b:c2:16:39:4d:57:7d:87:aa:
37:b7:ca:46:97:57:c5:5e:b2:df:05:fa:60:23:9a:
4b:90:d1:2a:6a:99:91:62:1c:74:2e:91:74:87:71:
b6:bf:da:4b:cc:a1:51:cf:61:98:30:3f:ef:da:8c:
22:52:fd:39:16:1b:74:88:df:5f:c5:46:b5:bb:1e:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:12:D0:E3:FB:6C:45:E9:D5:15:7F:45:5B:D5:07:AC:07:4F:79:02
X509v3 Authority Key Identifier:
keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d8:b9:c6:cc:70:be:05:25:c5:7e:ce:28:46:ff:aa:48:fa:
77:eb:04:c5:cf:7b:aa:df:66:7d:99:ef:2c:7c:86:50:e8:97:
7d:94:b8:6d:1c:db:b5:d2:1d:91:4c:05:29:fe:3b:22:06:7c:
43:d0:a5:9c:c8:81:3c:2e:81:7b:56:8f:0d:9a:8a:40:ce:1f:
1f:3c:63:fc:94:20:07:40:9e:8b:83:27:66:18:f2:71:d6:b3:
2f:52:86:54:d4:48:de:b0:b4:73:6c:58:78:d4:27:c7:c2:28:
4b:f1:e9:43:74:ac:0a:b1:e9:36:6f:af:03:5f:70:c3:96:f2:
65:b8:67:e1:0c:67:61:43:b1:97:e8:08:bc:f8:33:0d:0d:0c:
8b:31:1b:ea:e4:75:a5:e1:a2:ec:b1:c6:bd:9a:e9:55:72:45:
0a:b1:9b:48:2c:cd:fd:d4:ee:90:f5:fe:28:b2:c6:f8:7f:08:
93:6d:da:d4:5a:db:55:ce:ac:44:45:f8:a0:b1:e9:16:60:06:
90:13:11:bb:40:1d:33:8e:25:75:c8:2a:07:43:94:fc:6f:c0:
c4:de:68:09:1a:22:06:e0:32:33:b8:59:37:54:da:4e:04:88:
b0:9d:ac:53:06:50:e1:13:e8:1d:c6:7d:c9:d6:2b:7e:f5:c7:
c0:a3:cf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:10:42 2026 by rpki-client