Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
File: AvxcBk9RWcih-kBmyMuP9wFnHdI.mft (raw, json)
Hash identifier: /9XBkVfhqMIkL7/yT9MmQPOFomn3r12nxmqHyFbhxFo=
Subject key identifier: D6:18:52:92:3A:A1:C9:17:5E:A9:33:5C:0E:5E:44:97:C1:F0:36:02
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Certificate issuer: /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial: 01A0BEE7481B0F10028E399C519DA2066ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
Manifest number: 0F84
Signing time: Sun 20 Sep 2026 13:00:23 +0000
Manifest this update: Sun 20 Sep 2026 13:00:23 +0000
Manifest next update: Mon 21 Sep 2026 13:00:23 +0000
Files and hashes: 1: AvxcBk9RWcih-kBmyMuP9wFnHdI.crl (hash: BFmO8oFsgXvVg1pLj/V9qrJW2nqdMAUuDLISjrhDbsk=)
2: aieeYAXcHf6iZv5A5jAAy7zNKfU.roa (hash: +Mh/5aHvThjQydJerYwnqxyvk8cU5lJddJlC7wDae6g=)
3: pV8pE_cOHYJYSxBxGWWyjX19c8g.asa (hash: eS3GUrvb75q/7iupe8O+vpHF97RDhum8PqoVzv8QV5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:48:1b:0f:10:02:8e:39:9c:51:9d:a2:06:6a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Validity
Not Before: Sep 20 13:00:23 2026 GMT
Not After : Sep 21 13:00:23 2026 GMT
Subject: CN=d61852923aa1c9175ea9335c0e5e4497c1f03602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:d3:6d:81:98:25:3a:9d:2d:16:0f:88:0c:
f6:ad:44:a0:88:6c:01:1f:da:36:40:0f:50:21:c8:
56:9e:08:67:51:98:9e:a1:9a:b9:cc:d3:ae:92:3c:
2c:63:11:f6:01:d4:c3:50:04:ff:cd:88:1f:8f:ac:
37:cc:bd:1c:d1:68:ca:11:39:cb:20:e3:e0:2c:43:
f5:ec:76:0f:b6:ad:fe:b4:71:0a:6f:b3:57:4f:70:
78:fc:72:08:1a:dd:47:2a:cf:9d:c4:76:a0:ba:85:
81:a6:c3:f3:90:93:34:67:2b:4f:89:dd:19:3c:09:
85:6d:61:1b:9b:fb:9d:29:e5:77:dc:97:be:99:2a:
46:1d:15:d1:3f:c0:6f:a7:a8:19:5a:76:2d:69:1f:
73:38:9d:1e:38:cf:9c:b9:d4:cb:0c:d7:5e:58:e4:
91:f8:cb:dd:27:98:46:b0:1c:66:71:26:62:a8:ad:
e4:67:0b:77:e9:6c:24:a9:34:7c:6b:77:f5:c7:93:
4b:80:f5:0f:3d:10:63:a6:ef:47:69:e8:79:44:b2:
12:ae:6f:14:55:6e:ac:c0:0e:bf:b0:e6:5e:30:b6:
05:40:7b:20:a8:e0:48:41:4e:26:1f:4c:db:9b:3c:
fd:ce:1f:68:45:40:d5:48:57:fd:0e:70:bd:5c:52:
be:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:18:52:92:3A:A1:C9:17:5E:A9:33:5C:0E:5E:44:97:C1:F0:36:02
X509v3 Authority Key Identifier:
keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b7:9d:2a:35:f1:4b:fc:43:03:20:41:41:18:7c:fb:e3:36:
8f:d3:83:68:5f:39:9b:08:ad:5f:9f:40:0c:33:a4:c1:7d:6c:
f4:b2:d9:6a:8d:9e:3a:48:87:cb:48:7d:98:5a:41:40:a0:72:
ee:21:4d:f2:9a:18:f5:39:57:c0:71:2b:2f:b0:0e:65:66:10:
f0:b0:72:0b:19:71:a6:1b:5b:e3:af:32:02:c5:9d:cb:8d:b4:
30:bd:eb:86:8e:d5:37:7f:4e:83:70:56:e2:44:ce:11:00:41:
55:73:b4:08:0c:49:df:3c:9e:98:6c:03:62:3a:88:c1:03:fc:
f3:11:33:77:ec:41:18:cc:4e:14:fd:e1:78:b7:67:59:65:68:
69:30:a8:38:af:de:51:e9:57:9e:57:20:d3:59:55:1c:5e:62:
72:8e:65:1a:89:3c:2f:95:7d:b8:50:23:9a:c3:23:65:40:f4:
7f:2e:e2:ef:37:e5:57:ee:ac:56:54:02:a6:5d:cd:d5:51:1a:
ce:80:42:04:f9:a6:6d:d5:86:f3:28:86:e6:b0:b3:d4:f7:dc:
70:c3:8a:ec:b4:ee:5b:ae:3f:a1:fe:6b:1e:f0:7b:00:95:ca:
b9:0a:92:6b:e5:f4:f4:53:b5:1a:62:73:4c:ab:44:2d:e8:85:
f9:3a:e6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:07:18 2026 by rpki-client