Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
File: AV8u9ttQKZTXsMjknNSnd725NXI.mft (raw, json)
Hash identifier: IA4MfoYOHuqfV4IR1P/XWgryNs7JECJdycUEKmu99mA=
Subject key identifier: C0:B1:60:A6:B4:9C:D5:89:36:50:9C:6E:87:12:5E:55:F1:98:4E:0E
Authority key identifier: 01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
Certificate issuer: /CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Certificate serial: 019EBEEC4E18C76633EB65032E73DAF08968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
Manifest number: 1627
Signing time: Sat 13 Jun 2026 03:00:17 +0000
Manifest this update: Sat 13 Jun 2026 03:00:17 +0000
Manifest next update: Sun 14 Jun 2026 03:00:17 +0000
Files and hashes: 1: AV8u9ttQKZTXsMjknNSnd725NXI.crl (hash: SLn2v3Ad+IYhTFpqeOhDCS/6zmUrbvykaWlxbydX3Rs=)
2: zO6UKEO2UsX-uJJtYaV0kqdh2lk.roa (hash: BNJ+i4qsWrDUg9fXwYJtm2jlZYe3Zjo1dqX8YeGBA8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:4e:18:c7:66:33:eb:65:03:2e:73:da:f0:89:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Validity
Not Before: Jun 13 03:00:17 2026 GMT
Not After : Jun 14 03:00:17 2026 GMT
Subject: CN=c0b160a6b49cd58936509c6e87125e55f1984e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b4:15:18:05:82:21:7f:d5:92:b9:56:3f:ed:
a0:e3:a3:dc:9a:cf:53:fe:06:a6:b8:20:fd:e0:af:
8a:80:13:e3:84:ce:bd:9c:06:6a:8f:42:57:21:05:
cb:75:39:52:f4:2f:a9:43:2b:82:16:13:0f:50:77:
3d:c8:e7:ce:6a:88:8f:61:04:da:5b:7a:9e:0c:59:
da:95:0c:f3:a9:99:89:5d:3a:4e:33:7c:6b:63:99:
fd:12:26:5a:7c:86:68:50:e5:17:1e:bd:8a:5c:c0:
37:14:9f:71:95:07:f5:90:a0:fc:46:5d:13:39:57:
d1:3a:85:32:61:69:4e:27:4d:68:38:c5:cd:ef:c1:
ef:10:8e:17:2f:b9:1b:ed:30:50:2f:de:27:33:33:
d4:8b:c3:0c:63:4c:aa:98:ea:6b:92:f8:20:e5:34:
c5:e6:ee:67:2e:c1:5d:2d:ed:b2:c6:c6:19:f3:27:
7a:2c:e0:d9:d6:79:cd:8b:7f:84:3d:2a:82:4e:1a:
8b:23:db:01:d3:2e:d5:40:0e:6d:aa:85:60:ff:ff:
94:e3:a6:71:b8:b9:3f:0a:e9:73:59:72:cd:ec:36:
6b:bc:ff:1c:a7:66:e6:35:11:23:12:3b:b8:7f:22:
a9:f0:96:5e:91:10:6a:5c:e0:a7:64:b2:0a:87:b8:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B1:60:A6:B4:9C:D5:89:36:50:9C:6E:87:12:5E:55:F1:98:4E:0E
X509v3 Authority Key Identifier:
keyid:01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:28:35:ca:14:3c:ab:5e:f6:e3:37:f3:9b:56:2a:8e:ae:05:
70:44:15:2e:c4:01:ee:16:cc:e5:93:f8:85:04:50:e0:1a:7a:
9f:c4:2d:f9:d7:c4:dc:e9:2b:6c:2e:0b:42:a7:bf:52:38:bc:
c9:f7:48:47:f5:fe:b5:3e:7a:66:e5:a5:51:16:4a:8d:b5:a7:
b9:f0:b6:2a:20:02:03:ca:fd:73:c1:e0:8f:96:46:dc:29:6b:
a4:a9:00:41:4e:9c:3f:05:ee:ab:19:12:c9:8e:82:88:77:b5:
e6:f8:29:72:66:63:52:09:00:48:85:30:ef:f1:91:d4:42:49:
91:0a:07:f5:3c:5d:bd:ab:1b:e7:c3:26:5c:a8:a0:84:33:7a:
42:0f:49:e2:49:0a:46:fc:27:0e:37:1a:95:c8:db:55:f9:78:
17:ac:ff:0f:1c:d6:04:90:7d:4b:c7:6d:ba:17:56:02:45:99:
2c:1f:36:28:e5:dc:3b:24:2a:e8:31:f0:24:51:9c:bb:15:8f:
22:0f:b3:4f:6c:1b:32:3b:1e:d5:54:5b:7d:de:c2:b0:d9:ff:
12:32:c3:50:2d:e9:c6:0c:32:ea:e7:3e:13:25:24:04:a9:48:
b4:0a:b4:8a:ce:7a:ec:57:bb:63:23:40:97:3d:11:75:62:57:
c4:12:8c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:57:12 2026 by rpki-client