Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
File: AV8u9ttQKZTXsMjknNSnd725NXI.mft (raw, json)
Hash identifier: CknOYkO/0b93jQ749OKQgUJtet4uyVqIoTp/hUAEEsQ=
Subject key identifier: D0:ED:16:B8:63:CA:76:E3:E0:13:45:4E:DC:4E:50:7E:78:E0:6A:7B
Authority key identifier: 01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
Certificate issuer: /CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Certificate serial: 019CABD9489735F2B122F0C7DA47122F8CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
Manifest number: 1514
Signing time: Mon 02 Mar 2026 00:01:09 +0000
Manifest this update: Mon 02 Mar 2026 00:01:09 +0000
Manifest next update: Tue 03 Mar 2026 00:01:09 +0000
Files and hashes: 1: AV8u9ttQKZTXsMjknNSnd725NXI.crl (hash: PhBsgLGwQJyHZbgqRdvEY1ObpiVo4ZDbcsNvUwV3zj4=)
2: zO6UKEO2UsX-uJJtYaV0kqdh2lk.roa (hash: BNJ+i4qsWrDUg9fXwYJtm2jlZYe3Zjo1dqX8YeGBA8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:48:97:35:f2:b1:22:f0:c7:da:47:12:2f:8c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Validity
Not Before: Mar 2 00:01:09 2026 GMT
Not After : Mar 3 00:01:09 2026 GMT
Subject: CN=d0ed16b863ca76e3e013454edc4e507e78e06a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:d5:da:eb:92:f5:13:b7:12:68:59:08:44:
45:8d:7d:38:e5:2d:b2:0f:dc:66:c0:31:69:6d:9c:
09:63:c1:cc:4d:39:dc:a7:8a:cc:ce:2f:61:57:a9:
a5:7e:93:b5:ef:8f:6b:07:52:d3:08:0a:57:1d:fe:
b8:8d:38:93:a8:7f:f3:ca:ae:07:53:e9:dd:0d:86:
d2:6f:0e:b7:f5:8a:b9:ed:22:5f:64:8f:ba:36:85:
36:7e:2e:93:3f:0a:8d:88:6a:93:44:5a:3d:8c:63:
ae:15:e8:d5:bc:5a:6d:de:16:1a:2c:c5:35:24:51:
38:c7:ce:09:69:22:8d:e0:db:18:1b:ed:df:48:0f:
5f:69:0a:1b:54:fc:9e:d9:9a:0b:ba:31:c8:9c:04:
42:41:47:5e:aa:d0:f4:5f:98:cc:ee:09:05:6a:73:
db:35:4b:d6:26:4a:b7:48:60:05:b9:29:66:13:1b:
16:5d:38:67:a8:13:e5:66:6d:b6:4a:01:5e:8e:19:
a4:7a:0e:17:45:85:50:ff:dd:9c:77:4b:75:16:1f:
63:30:22:99:a5:46:39:91:4c:26:45:73:0e:f9:fd:
d1:7f:db:49:4c:1f:1d:7a:e9:c5:61:86:94:72:44:
61:b2:c0:19:0e:ec:dd:1a:c5:3d:34:e8:6d:77:35:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:ED:16:B8:63:CA:76:E3:E0:13:45:4E:DC:4E:50:7E:78:E0:6A:7B
X509v3 Authority Key Identifier:
keyid:01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8c:49:72:1a:e8:18:82:c0:c3:ac:45:a0:a0:f3:5c:85:d8:
1c:d9:ae:5f:9b:01:5d:ac:ee:9c:11:bc:56:eb:2e:c2:70:02:
00:2a:fa:1a:06:ca:ed:0f:40:46:d5:40:88:be:cd:4b:fa:4a:
49:fd:f0:78:03:c8:12:d4:55:dc:47:75:c0:bd:1f:97:6d:24:
a4:24:af:ec:04:90:5b:ee:32:34:ab:35:de:dc:fe:9c:32:c9:
9c:07:5c:7c:61:d5:86:b5:36:3b:19:39:3f:cd:cd:d3:e5:94:
39:c4:60:4e:ed:a1:4c:b0:0f:07:97:df:2e:36:07:35:ac:ec:
5f:f8:8f:f3:7e:51:a6:63:a2:af:6c:79:68:9f:2e:60:a0:03:
96:eb:95:33:c7:cb:2f:3a:5d:ec:39:a4:39:dd:22:03:f4:96:
8a:7d:68:3b:28:05:0c:a9:bc:cb:0c:0d:7c:fb:6d:fb:98:64:
60:10:37:09:b8:2b:dd:06:ad:4d:af:90:01:82:02:1b:e0:f0:
48:97:74:27:4c:fc:61:f4:e6:0d:fc:d1:e9:02:4e:6c:19:a6:
ec:c7:be:96:15:35:f8:1f:d1:d4:bc:47:6a:0b:86:db:07:10:
7e:ca:01:70:16:cc:87:d5:37:da:77:ba:49:19:5a:11:d1:89:
35:c8:ee:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:16 2026 by rpki-client