Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
File: AvxcBk9RWcih-kBmyMuP9wFnHdI.mft (raw, json)
Hash identifier: usE849BUP1J/6R4I7eOqI+PzaItMyk27NejAqx3heko=
Subject key identifier: AA:A3:0E:64:01:F1:18:EC:E2:C6:23:F5:0C:C4:EE:2F:AC:7D:81:62
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Certificate issuer: /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial: 019FA8D0941ACFFDB8C2DD2184FEF86D4686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
Manifest number: 0EF4
Signing time: Tue 28 Jul 2026 13:01:09 +0000
Manifest this update: Tue 28 Jul 2026 13:01:09 +0000
Manifest next update: Wed 29 Jul 2026 13:01:09 +0000
Files and hashes: 1: AvxcBk9RWcih-kBmyMuP9wFnHdI.crl (hash: DrxmicdTYAH8Zy269rf85BMso8C1LBO/1gV7NDMHodw=)
2: aieeYAXcHf6iZv5A5jAAy7zNKfU.roa (hash: +Mh/5aHvThjQydJerYwnqxyvk8cU5lJddJlC7wDae6g=)
3: pV8pE_cOHYJYSxBxGWWyjX19c8g.asa (hash: eS3GUrvb75q/7iupe8O+vpHF97RDhum8PqoVzv8QV5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:94:1a:cf:fd:b8:c2:dd:21:84:fe:f8:6d:46:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Validity
Not Before: Jul 28 13:01:09 2026 GMT
Not After : Jul 29 13:01:09 2026 GMT
Subject: CN=aaa30e6401f118ece2c623f50cc4ee2fac7d8162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:9b:bf:0c:71:78:1c:8c:83:35:f4:7d:48:
79:93:b3:aa:b6:a9:3e:68:72:28:60:f8:f3:5f:41:
90:9f:99:5a:21:2b:75:af:42:d5:d2:a0:4a:8d:30:
46:39:08:83:fe:a8:01:9e:b8:e4:3e:6f:f1:53:23:
01:04:f0:f0:48:68:aa:0d:af:ae:92:81:f9:aa:94:
b5:70:ea:c6:af:1f:c6:7d:4b:b9:a4:c2:8f:d8:29:
e8:a1:50:01:eb:69:14:43:7c:ac:dc:1e:2f:66:22:
04:a0:e8:53:8e:f0:c3:54:b3:28:72:c3:10:95:65:
e7:1b:6a:f7:92:aa:e6:76:bc:82:38:fd:d8:f2:08:
0f:40:80:5f:21:f5:74:2a:1e:79:9f:cd:fd:f5:5c:
d1:e7:61:ca:e7:dd:52:85:fc:42:8c:83:2f:5c:4a:
12:1a:f5:cb:6e:ee:84:37:bf:a8:d4:ef:49:fe:b3:
af:b8:6d:fa:d3:50:8e:16:45:e7:03:4f:6c:37:81:
2b:89:02:16:d1:ca:91:98:4b:1e:df:5b:88:cd:f7:
e5:f4:d1:70:8b:ff:c9:dc:9d:a8:89:6c:67:31:35:
2b:a0:b4:57:28:4e:d8:2d:d9:af:3f:ca:56:9f:6d:
09:b8:6a:ab:7c:68:bc:22:4c:07:e7:8b:68:aa:c0:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A3:0E:64:01:F1:18:EC:E2:C6:23:F5:0C:C4:EE:2F:AC:7D:81:62
X509v3 Authority Key Identifier:
keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:be:42:08:26:a8:05:8a:a3:1c:6e:ac:dc:82:a7:a1:ad:36:
9f:94:65:95:31:ed:be:a3:1a:fb:25:6a:d0:73:37:b0:cd:b8:
08:2d:c5:0d:b5:fa:6e:c4:e2:99:39:e1:c8:79:46:1d:b3:1a:
9e:55:14:04:a4:7c:55:eb:ef:97:8c:5c:7c:99:9b:79:64:eb:
fa:d1:67:8a:b3:33:3e:a0:51:82:67:64:9e:63:4a:ee:40:10:
d4:11:4e:75:09:bd:86:4b:9e:bc:4b:b5:a8:3a:5a:d8:57:1f:
fc:97:5f:39:28:e6:91:54:8d:c6:31:d0:4d:ef:e1:08:56:78:
12:18:71:2c:f9:bf:57:2c:11:5c:f1:f6:f8:5f:d8:f9:2d:81:
02:9f:4b:a8:ea:6e:82:07:7a:db:0f:e3:c1:15:b1:47:8a:3e:
ce:8d:a7:87:3d:95:02:b9:bc:58:44:d5:a9:9d:fb:11:0b:ef:
4b:27:ed:8e:a3:72:5d:64:1f:95:9e:fe:1f:56:4c:dd:01:7c:
2b:bf:b4:6e:62:57:7b:0c:85:d0:00:05:e2:5a:28:50:69:b6:
01:75:bb:68:94:aa:89:53:09:cd:c5:6c:dc:17:43:32:82:7f:
32:4f:61:cc:c4:e0:5b:6a:a6:bd:1c:26:06:a1:7f:0e:71:70:
8a:dc:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:50 2026 by rpki-client