Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
File: AV8u9ttQKZTXsMjknNSnd725NXI.mft (raw, json)
Hash identifier: Zjl1cDXP/QHsdcntW+4BAEhxKe2QOi+CrpKNmv4xl2g=
Subject key identifier: D3:BB:89:6E:3B:F8:9B:E9:8C:D5:E8:AC:6B:6F:B3:A6:23:AA:34:47
Authority key identifier: 01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
Certificate issuer: /CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Certificate serial: 019D9962679F95C29B83B49499A026343E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
Manifest number: 158F
Signing time: Fri 17 Apr 2026 03:00:56 +0000
Manifest this update: Fri 17 Apr 2026 03:00:56 +0000
Manifest next update: Sat 18 Apr 2026 03:00:56 +0000
Files and hashes: 1: AV8u9ttQKZTXsMjknNSnd725NXI.crl (hash: 4ooO0R4km3l5c3HnWUo3eDwopiOp6DBY7i82vOFAKnM=)
2: zO6UKEO2UsX-uJJtYaV0kqdh2lk.roa (hash: BNJ+i4qsWrDUg9fXwYJtm2jlZYe3Zjo1dqX8YeGBA8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:67:9f:95:c2:9b:83:b4:94:99:a0:26:34:3e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Validity
Not Before: Apr 17 03:00:56 2026 GMT
Not After : Apr 18 03:00:56 2026 GMT
Subject: CN=d3bb896e3bf89be98cd5e8ac6b6fb3a623aa3447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f9:69:c4:e4:dd:b5:30:d5:6d:14:4a:1a:5d:
57:8c:7b:7e:af:31:1a:ab:1c:6a:66:3b:93:db:67:
cd:59:fd:a2:61:78:5f:4b:7e:a8:70:7f:e9:da:de:
29:be:4d:e6:9c:2b:0c:08:60:e5:90:10:8d:09:3b:
04:8f:02:60:ad:dc:f9:32:36:59:da:f5:88:ef:8f:
ea:89:9d:88:9c:eb:fd:14:35:6d:f6:95:62:71:ac:
fd:57:e8:07:c2:ab:b2:a6:f4:94:48:a5:57:f0:38:
81:74:f9:68:ab:8f:73:d0:a6:63:ab:26:05:e3:ab:
5a:7b:1a:40:f4:fe:fa:42:09:1f:12:b8:2c:a9:fd:
1d:47:ec:10:fc:bb:c9:0f:65:49:9e:d2:68:c9:29:
e2:b9:bd:36:ad:80:12:f8:04:65:e6:0e:94:d6:52:
34:05:4e:28:eb:c9:3e:69:f2:0b:46:e6:b3:63:b3:
8e:b1:b6:7e:c6:55:25:bd:cb:90:7d:2f:31:9d:61:
00:4d:b5:46:38:68:7f:ce:cc:c4:67:b2:88:0b:20:
00:b3:b7:30:7e:e0:d6:d7:3f:60:ba:d3:d2:4f:04:
b5:7c:c2:12:93:56:ae:79:12:97:c9:2b:14:40:09:
38:f4:ef:9a:4d:14:e1:49:9a:06:da:6b:11:27:20:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BB:89:6E:3B:F8:9B:E9:8C:D5:E8:AC:6B:6F:B3:A6:23:AA:34:47
X509v3 Authority Key Identifier:
keyid:01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bf:b0:19:24:ee:83:93:75:bc:1b:f9:8a:1e:92:9c:e0:97:
0a:a4:8f:a3:02:d1:09:61:27:0a:bd:84:1f:f3:d8:eb:c2:75:
b6:34:54:ff:c3:c2:04:e2:a8:b3:3e:e8:36:ec:da:31:47:ca:
e7:ee:55:b2:50:47:b2:b9:9b:04:91:d7:57:1e:bd:21:0d:bc:
5c:10:58:d9:7c:73:9c:52:59:de:d9:c2:53:69:cf:11:ec:b8:
6f:aa:0a:1a:bf:95:3b:18:c7:ec:dc:bf:5d:2a:5d:67:77:c2:
0e:c8:15:cb:4a:f8:2d:75:56:69:b5:0b:d7:9e:1b:ab:91:8f:
92:95:a8:2b:aa:36:1c:cf:19:4b:b4:fe:dc:13:04:ee:13:ee:
31:2b:4b:99:4d:7a:a6:9a:3e:e2:83:2d:c2:b3:a4:b6:59:37:
9b:5e:29:ed:6d:25:fd:a6:7c:4f:91:b0:ea:b6:5f:60:31:52:
65:cc:bd:80:82:05:ad:ba:de:29:78:f9:1a:e1:2d:dc:df:38:
be:eb:6a:57:85:a8:a4:98:ef:20:9d:7a:04:c8:ac:c1:22:76:
ce:64:5b:97:d0:a7:e3:b7:f3:e3:c8:00:25:ac:30:04:b2:f5:
d0:e6:55:ec:3e:d5:20:ee:99:d2:a5:fa:3e:85:ff:11:be:76:
8c:57:08:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:38 2026 by rpki-client