Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
File: AvxcBk9RWcih-kBmyMuP9wFnHdI.mft (raw, json)
Hash identifier: HWROwzrN+dHD22+AHwI7Z+bcerTIhSQiEx7En14vPDQ=
Subject key identifier: 00:EE:59:4E:8C:8E:AC:50:E2:31:DA:36:F5:4A:97:10:BB:5F:69:FC
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Certificate issuer: /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial: 019EBF236FAA7024193EBECEB33A28DBDBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
Manifest number: 0E7B
Signing time: Sat 13 Jun 2026 04:00:30 +0000
Manifest this update: Sat 13 Jun 2026 04:00:30 +0000
Manifest next update: Sun 14 Jun 2026 04:00:30 +0000
Files and hashes: 1: AvxcBk9RWcih-kBmyMuP9wFnHdI.crl (hash: FFXChmI4qK3Trz/gAnlJy+Usy/8e/bbyT84wNYU/CEQ=)
2: aieeYAXcHf6iZv5A5jAAy7zNKfU.roa (hash: +Mh/5aHvThjQydJerYwnqxyvk8cU5lJddJlC7wDae6g=)
3: pV8pE_cOHYJYSxBxGWWyjX19c8g.asa (hash: eS3GUrvb75q/7iupe8O+vpHF97RDhum8PqoVzv8QV5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:6f:aa:70:24:19:3e:be:ce:b3:3a:28:db:db:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Validity
Not Before: Jun 13 04:00:30 2026 GMT
Not After : Jun 14 04:00:30 2026 GMT
Subject: CN=00ee594e8c8eac50e231da36f54a9710bb5f69fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:d3:8c:74:9f:7c:b2:1a:e1:bd:76:e3:cb:
84:50:3d:e8:d0:c4:f5:d5:5b:f0:1c:25:e0:94:2d:
b1:2d:7a:2b:f3:b0:6f:e5:87:57:15:3f:c8:7c:02:
91:21:7b:bd:ec:3e:d7:d7:ec:9c:ac:ec:9d:66:e9:
8e:4d:39:ba:5b:cc:cc:a0:f8:c1:b1:53:04:33:61:
39:bf:d6:c7:40:0e:fc:81:10:d7:7e:5a:32:e6:9f:
3d:37:fa:78:db:96:f3:18:9e:92:d7:54:fb:af:3a:
3a:47:fe:7a:f8:ae:a9:a5:0b:b9:02:ab:72:a3:eb:
95:d0:8e:f9:74:b6:2a:c4:57:ee:13:ef:93:cf:9d:
d1:93:13:45:fb:0f:0e:e3:fb:92:29:e2:bf:d5:f4:
26:80:d3:e5:a7:25:d0:25:aa:3d:82:5c:d2:02:95:
09:51:bc:33:2a:cb:31:b8:32:8c:c8:fd:4c:5d:52:
e8:1f:96:f2:01:2c:ac:ed:86:21:59:6a:82:d7:7c:
45:fc:9f:2a:94:7e:ae:f3:ad:56:ca:42:6f:b6:9b:
d4:1e:10:59:b2:15:bc:5f:a5:86:cd:af:05:22:e9:
a1:f9:83:38:c8:4a:40:22:34:4c:45:70:05:34:e0:
4a:0c:81:32:01:fa:df:01:dd:c5:33:9c:d4:8c:33:
ff:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EE:59:4E:8C:8E:AC:50:E2:31:DA:36:F5:4A:97:10:BB:5F:69:FC
X509v3 Authority Key Identifier:
keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:61:e8:54:e5:03:de:c8:e3:5e:14:60:6b:c7:7a:5d:80:a0:
ac:50:4c:99:54:7b:db:8a:ed:21:45:c5:45:81:d3:3d:87:f9:
81:7b:0c:8d:65:d1:49:4c:74:da:88:48:ed:d6:02:1d:44:e1:
f1:e8:ec:4b:8b:a3:04:d4:66:cc:68:4b:6d:9f:42:cb:0f:f9:
5d:7f:41:18:01:14:45:7a:e0:c5:ba:ab:6f:a5:e7:38:b2:2d:
47:d0:a0:18:03:16:34:50:bd:9e:3f:42:e8:c3:68:b9:bc:7b:
1e:02:1d:73:16:78:39:92:0e:51:e5:1a:9e:75:ae:b1:ac:23:
12:49:24:5a:87:cb:0a:fa:95:8c:c1:02:26:d0:4f:f7:fe:fb:
07:24:7e:87:63:39:7f:4c:d3:77:d9:87:c7:72:95:57:97:72:
01:76:57:e0:b1:1b:ac:f4:8d:72:36:db:c9:88:82:21:27:36:
18:a6:19:7d:55:25:78:7a:bc:53:ee:ad:d4:0b:fb:17:4e:df:
d3:57:dd:08:02:ac:6c:ef:f2:62:a9:6d:ae:94:a4:af:72:97:
01:8e:2a:55:c5:cd:fb:a5:91:93:ec:a8:f5:6a:ca:05:36:0f:
48:79:8d:88:dd:7e:30:74:b1:55:79:87:18:31:1f:7d:37:a9:
eb:62:10:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:15:08 2026 by rpki-client