Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier: L9NPB43Dmret6KfnR/Fe7+YXkxz42SukpzgqaTLVC5Q=
Subject key identifier: 12:FD:62:B4:1E:A4:F6:5D:FE:47:D2:B0:5C:36:78:3B:89:CB:59:DF
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer: /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial: 01A0DD2A34217F873C2775819CA06B26BB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number: 11FC
Signing time: Sat 26 Sep 2026 10:02:05 +0000
Manifest this update: Sat 26 Sep 2026 10:02:05 +0000
Manifest next update: Sun 27 Sep 2026 10:02:05 +0000
Files and hashes: 1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: 1N5RZiaFnKhhmXzuak1hUNK1mVD9VPoqrWsGMNif/Yw=)
2: ZHDfzOd0Vs1cFH4Cds3NQzXm5e0.roa (hash: b2Z3qDf5qe3MjesJLnqAMi8pQaoBZLbH5mVHFy7vu6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:2a:34:21:7f:87:3c:27:75:81:9c:a0:6b:26:bb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Validity
Not Before: Sep 26 10:02:05 2026 GMT
Not After : Sep 27 10:02:05 2026 GMT
Subject: CN=12fd62b41ea4f65dfe47d2b05c36783b89cb59df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:e9:99:48:9e:06:95:61:bb:ab:05:71:ca:
c7:bf:48:fe:1b:fa:b4:f6:64:d7:1f:92:6a:55:d1:
16:d7:24:69:02:c2:7d:f4:b0:12:63:b0:91:3d:39:
e9:ff:44:8b:f6:f3:4d:15:da:56:ad:0c:77:b7:fd:
18:3e:39:b9:14:ea:60:fa:2b:f6:d7:54:9f:32:06:
e3:22:a2:66:95:2d:52:28:d7:38:dc:b7:cf:e1:e5:
71:17:d3:d9:08:59:64:98:af:e5:ec:53:3e:7e:dc:
4d:09:a0:2f:aa:69:60:f1:1a:3f:56:8e:27:b7:13:
e1:b1:d5:5a:37:da:27:a2:99:e7:4e:a9:60:8c:57:
08:cd:be:36:fd:54:77:6b:87:d9:95:fb:1a:2c:62:
b6:d0:50:f5:85:67:38:41:9c:34:43:67:ea:c1:d4:
8f:8d:9d:f4:5a:19:87:3d:71:5c:fc:23:62:37:04:
9f:90:aa:3a:7e:90:5c:d3:0c:70:d9:f5:84:81:ee:
ca:f3:fd:91:e4:a8:4c:dc:9d:9a:53:63:c3:7b:5e:
dd:5b:a8:30:20:37:9c:fd:5d:6a:bd:07:28:ae:c7:
a1:32:ef:0f:a2:e5:95:7a:b7:a1:ff:34:31:b2:1b:
73:a2:ea:dc:95:f9:0c:4a:8d:18:dd:81:96:e5:4d:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FD:62:B4:1E:A4:F6:5D:FE:47:D2:B0:5C:36:78:3B:89:CB:59:DF
X509v3 Authority Key Identifier:
keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:68:68:7d:cf:31:f0:8a:66:38:b4:bd:24:d4:ae:82:48:7d:
89:c4:64:03:53:ed:e2:c8:4d:f7:66:7f:33:d3:8d:c9:42:ce:
0e:d1:e5:e6:39:2e:5b:ed:ed:f2:29:f3:de:56:4b:bd:35:06:
d9:c7:11:19:24:b6:49:e0:c6:d4:73:fd:8a:e3:a4:07:30:da:
2e:32:a8:67:bf:0d:97:31:09:b2:48:49:55:ff:c1:23:f8:c1:
0d:ce:8c:49:ec:49:fd:f3:c5:09:53:44:b1:f8:66:8d:86:2d:
8b:44:db:ea:54:8f:03:bc:71:52:49:6f:47:12:44:5b:61:ce:
a1:63:14:2c:de:bd:56:05:06:f3:ce:d3:4e:91:41:3f:08:1a:
7b:9f:a4:91:72:59:df:88:ee:da:ce:66:79:00:0f:15:46:09:
ab:d3:cb:08:b5:aa:6e:09:da:18:a4:f0:ac:05:c8:34:d6:40:
3e:4e:ed:12:4d:59:dd:be:db:52:2b:ac:6f:1c:99:05:ec:63:
7e:b5:b7:3e:76:03:86:2f:39:16:e2:b6:96:76:06:3f:1b:33:
c4:ff:68:20:92:64:27:f8:b5:26:29:f8:0c:bf:33:f7:28:2d:
9f:a6:bf:20:67:5f:7c:d1:f2:da:75:0c:ff:a2:be:48:8f:2e:
60:2f:67:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdKjQhf4c8J3WBnKBrJruVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTZhZmM1NGZlNjNlZDE3NDBkNWU4OTZiM2Y1OTFiMTE4
NGY2ZGMwHhcNMjYwOTI2MTAwMjA1WhcNMjYwOTI3MTAwMjA1WjAzMTEwLwYDVQQD
EygxMmZkNjJiNDFlYTRmNjVkZmU0N2QyYjA1YzM2NzgzYjg5Y2I1OWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn77pmUieBpVhu6sFccrHv0j+G/q0
9mTXH5JqVdEW1yRpAsJ99LASY7CRPTnp/0SL9vNNFdpWrQx3t/0YPjm5FOpg+iv2
11SfMgbjIqJmlS1SKNc43LfP4eVxF9PZCFlkmK/l7FM+ftxNCaAvqmlg8Ro/Vo4n
txPhsdVaN9onopnnTqlgjFcIzb42/VR3a4fZlfsaLGK20FD1hWc4QZw0Q2fqwdSP
jZ30WhmHPXFc/CNiNwSfkKo6fpBc0wxw2fWEge7K8/2R5KhM3J2aU2PDe17dW6gw
IDec/V1qvQcorsehMu8PouWVereh/zQxshtzourclfkMSo0Y3YGW5U2oqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBL9YrQepPZd/kfSsFw2eDuJy1nfMB8GA1UdIwQY
MBaAFNeWr8VP5j7RdA1eiWs/WRsRhPbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2Yt
MGE4NjM1OGU5Yzg0LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2YtMGE4NjM1OGU5Yzg0
LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWhofc8x
8IpmOLS9JNSugkh9icRkA1Pt4shN92Z/M9ONyULODtHl5jkuW+3t8inz3lZLvTUG
2ccRGSS2SeDG1HP9iuOkBzDaLjKoZ78NlzEJskhJVf/BI/jBDc6MSexJ/fPFCVNE
sfhmjYYti0Tb6lSPA7xxUklvRxJEW2HOoWMULN69VgUG887TTpFBPwgae5+kkXJZ
34ju2s5meQAPFUYJq9PLCLWqbgnaGKTwrAXINNZAPk7tEk1Z3b7bUiusbxyZBexj
frW3PnYDhi85FuK2lnYGPxszxP9oIJJkJ/i1Jin4DL8z9ygtn6a/IGdffNHy2nUM
/6K+SI8uYC9nYg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:29:07 2026 by rpki-client