Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
File: AvxcBk9RWcih-kBmyMuP9wFnHdI.mft (raw, json)
Hash identifier: PSPno/wtA1pyex3eXF+h6EiGqQVqHOhjSBmSOubaREY=
Subject key identifier: B8:83:21:08:10:A1:9E:6A:AA:C2:18:20:23:E3:08:0A:16:0B:07:05
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Certificate issuer: /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial: 019CA8338450DB388E55A84B518C84A05A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
Manifest number: 0D66
Signing time: Sun 01 Mar 2026 07:01:14 +0000
Manifest this update: Sun 01 Mar 2026 07:01:14 +0000
Manifest next update: Mon 02 Mar 2026 07:01:14 +0000
Files and hashes: 1: AvxcBk9RWcih-kBmyMuP9wFnHdI.crl (hash: 9k/tkvDUnYUtfg/KrmOEbM4D8LhlQ1hduIFM+wOkgk4=)
2: aieeYAXcHf6iZv5A5jAAy7zNKfU.roa (hash: +Mh/5aHvThjQydJerYwnqxyvk8cU5lJddJlC7wDae6g=)
3: pV8pE_cOHYJYSxBxGWWyjX19c8g.asa (hash: eS3GUrvb75q/7iupe8O+vpHF97RDhum8PqoVzv8QV5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:33:84:50:db:38:8e:55:a8:4b:51:8c:84:a0:5a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Validity
Not Before: Mar 1 07:01:14 2026 GMT
Not After : Mar 2 07:01:14 2026 GMT
Subject: CN=b883210810a19e6aaac2182023e3080a160b0705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:23:5a:25:cf:14:4b:a7:0c:09:26:94:81:0c:
10:f0:4b:86:8f:c9:b1:ab:a6:ae:dc:e9:22:49:e2:
00:1a:7b:cd:d8:62:a2:57:d4:f7:0c:ff:ef:dc:ff:
27:ee:eb:34:7b:07:a4:c7:17:e4:77:ad:06:91:23:
6c:12:a3:90:34:b3:31:b0:49:5c:fa:15:3c:9d:20:
5d:bc:c1:5b:28:92:5b:79:08:fb:08:a5:63:60:57:
7d:03:9d:d3:34:4e:62:d5:cb:f0:1d:ae:f0:83:89:
b9:bb:0b:79:d4:a0:e8:5f:3a:b5:25:0d:f1:2c:a6:
3b:90:a7:02:c1:36:60:4c:bd:ec:e1:5b:db:16:96:
b1:c7:77:65:ff:41:b7:2c:06:48:57:fd:a9:70:5d:
17:2e:14:b7:26:63:3e:cb:b4:32:32:db:b8:55:40:
31:a2:e7:9e:97:6b:cc:20:70:99:8c:14:23:9f:a0:
dd:a0:fd:17:f4:8c:25:9c:7d:0a:21:92:dd:54:ab:
03:ed:ee:38:9b:29:92:04:fc:cf:35:db:8b:5e:39:
c1:23:cd:a1:23:3e:78:a7:c4:94:0f:43:1d:28:b5:
ac:eb:5d:25:9f:07:ad:08:95:58:dd:4e:45:2e:36:
28:84:bd:f5:51:1b:73:25:11:4b:83:a2:95:3b:4f:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:83:21:08:10:A1:9E:6A:AA:C2:18:20:23:E3:08:0A:16:0B:07:05
X509v3 Authority Key Identifier:
keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b8:c2:b1:3e:de:f3:c0:5d:36:bd:94:3e:c4:f3:e3:c9:32:
ff:87:b3:26:eb:fa:e8:fc:65:77:c1:e2:d9:3b:63:53:c3:b9:
c3:96:a6:d8:80:91:5f:bc:b3:da:9f:8c:ee:70:5e:f9:c2:1a:
0e:2e:39:63:52:39:be:00:b5:90:e7:5a:c4:a2:f8:f9:99:4f:
8d:9d:b0:f5:90:36:28:97:04:fd:0c:52:4e:be:91:25:a1:7b:
a4:f3:be:44:35:bd:aa:2f:3b:63:38:49:1a:1e:3b:7a:52:66:
22:82:63:c7:8a:ee:b4:f6:58:01:c2:08:69:ce:98:62:12:fb:
03:ff:b6:55:e1:30:a7:68:15:ec:3f:8b:a1:45:f0:9e:41:2a:
c2:c7:0d:a4:7a:bc:86:52:2e:85:2d:71:36:d6:2a:d2:0d:aa:
5d:8c:0a:39:a4:13:4f:c7:54:da:df:02:65:46:fc:d7:37:a0:
d6:7e:59:fc:7d:e3:d5:fd:09:da:05:06:2e:40:a2:2a:99:1e:
fa:1a:e2:61:03:18:6b:2f:67:1e:dd:1a:1a:34:9f:ca:1d:ec:
78:38:b2:ca:f0:99:29:f2:1a:57:5b:dc:35:36:2b:9f:69:8f:
00:b1:da:9f:86:60:5a:af:bf:ac:2f:ef:10:b5:9f:44:09:74:
bf:e7:ab:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyoM4RQ2ziOVahLUYyEoFpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZmM1YzA2NGY1MTU5YzhhMWZhNDA2NmM4Y2I4ZmY3MDE2
NzFkZDIwHhcNMjYwMzAxMDcwMTE0WhcNMjYwMzAyMDcwMTE0WjAzMTEwLwYDVQQD
EyhiODgzMjEwODEwYTE5ZTZhYWFjMjE4MjAyM2UzMDgwYTE2MGIwNzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CNaJc8US6cMCSaUgQwQ8EuGj8mx
q6au3OkiSeIAGnvN2GKiV9T3DP/v3P8n7us0ewekxxfkd60GkSNsEqOQNLMxsElc
+hU8nSBdvMFbKJJbeQj7CKVjYFd9A53TNE5i1cvwHa7wg4m5uwt51KDoXzq1JQ3x
LKY7kKcCwTZgTL3s4VvbFpaxx3dl/0G3LAZIV/2pcF0XLhS3JmM+y7QyMtu4VUAx
oueel2vMIHCZjBQjn6DdoP0X9IwlnH0KIZLdVKsD7e44mymSBPzPNduLXjnBI82h
Iz54p8SUD0MdKLWs610lnwetCJVY3U5FLjYohL31URtzJRFLg6KVO0+bcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiDIQgQoZ5qqsIYICPjCAoWCwcFMB8GA1UdIwQY
MBaAFAL8XAZPUVnIofpAZsjLj/cBZx3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iMTVhN2QtNWFlZS00ZDQwLWJlNWEt
NzkyYTkxYzVjYTJiLzEvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iMTVhN2QtNWFlZS00ZDQwLWJlNWEtNzkyYTkxYzVjYTJi
LzEvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbjCsT7e
88BdNr2UPsTz48ky/4ezJuv66Pxld8Hi2TtjU8O5w5am2ICRX7yz2p+M7nBe+cIa
Di45Y1I5vgC1kOdaxKL4+ZlPjZ2w9ZA2KJcE/QxSTr6RJaF7pPO+RDW9qi87YzhJ
Gh47elJmIoJjx4rutPZYAcIIac6YYhL7A/+2VeEwp2gV7D+LoUXwnkEqwscNpHq8
hlIuhS1xNtYq0g2qXYwKOaQTT8dU2t8CZUb81zeg1n5Z/H3j1f0J2gUGLkCiKpke
+hriYQMYay9nHt0aGjSfyh3seDiyyvCZKfIaV1vcNTYrn2mPALHan4ZgWq+/rC/v
ELWfRAl0v+erwA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:27:09 2026 by rpki-client