Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
File: avL7pFrWUxpj0XNQFPaZgH9H-9w.mft (raw, json)
Hash identifier: o50tjFmImDzvVTXcJMNxwGtuW1KBhwjZ+qJEmKzATV4=
Subject key identifier: 6B:DB:09:A5:3E:D6:E2:34:E1:67:E7:05:42:19:01:F9:89:49:03:92
Authority key identifier: 6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
Certificate issuer: /CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Certificate serial: 019CAA588988A44CD00B6C5FF3973C7AE9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
Manifest number: 086F
Signing time: Sun 01 Mar 2026 17:00:54 +0000
Manifest this update: Sun 01 Mar 2026 17:00:54 +0000
Manifest next update: Mon 02 Mar 2026 17:00:54 +0000
Files and hashes: 1: avL7pFrWUxpj0XNQFPaZgH9H-9w.crl (hash: 2SCqEneoi7XEncCh+V7vro6o3vwcIxjMsjkPfrM0nwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:89:88:a4:4c:d0:0b:6c:5f:f3:97:3c:7a:e9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Validity
Not Before: Mar 1 17:00:54 2026 GMT
Not After : Mar 2 17:00:54 2026 GMT
Subject: CN=6bdb09a53ed6e234e167e705421901f989490392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:f9:2c:73:32:42:75:4a:2d:ab:a8:b2:d7:
50:f2:d3:1e:d2:ee:63:f3:1c:8f:07:40:d1:ba:2a:
ef:43:8a:38:dd:6a:d4:93:03:bb:f2:c6:ad:8d:85:
99:43:c3:d7:e4:0b:5e:cf:1c:69:87:47:a2:e9:2d:
ca:8e:ed:18:4c:dd:cf:88:cc:5b:b5:f3:37:cc:07:
16:08:97:55:26:f8:d6:6a:40:e9:58:39:c9:0f:42:
fb:c2:d0:ca:62:be:3f:84:4a:0f:7d:d6:c7:b4:b8:
2c:c0:49:cc:b4:50:50:02:4b:b1:cd:96:9a:1d:b7:
e4:bf:a0:84:dc:ce:cf:1d:d9:bb:53:a8:ac:af:b6:
e7:d0:38:71:c7:fb:0c:b0:1b:0d:cc:ae:69:11:92:
5f:a7:cc:e4:05:42:cc:f7:01:7a:95:0e:fb:ca:09:
76:b8:43:69:98:43:b2:ef:33:e8:9d:45:17:fa:e5:
c8:c3:1d:43:5a:b5:f6:d9:43:ca:01:90:9a:80:99:
8a:66:cf:7d:4f:10:77:42:0d:29:ac:ef:22:4a:0a:
d2:0c:84:34:70:84:dc:aa:1d:62:ca:43:ee:13:82:
e8:66:02:37:b2:73:ce:0a:67:27:83:6f:a7:59:13:
15:fe:63:38:df:2d:a1:3f:1b:9e:12:f7:bf:ab:11:
5b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DB:09:A5:3E:D6:E2:34:E1:67:E7:05:42:19:01:F9:89:49:03:92
X509v3 Authority Key Identifier:
keyid:6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4f:a2:ed:a2:00:cb:de:81:5c:e7:5a:f0:22:50:1b:eb:44:
11:4a:ae:cc:11:ec:10:0c:76:de:1a:2c:48:a6:a6:f4:76:fa:
43:83:bf:61:aa:48:a3:5a:bb:89:a8:52:16:b6:78:47:56:d5:
5e:32:d6:31:25:56:ee:80:1a:df:36:4c:ed:5d:2a:bf:f5:52:
c5:6c:a7:84:96:27:37:ab:32:5b:52:4d:9c:28:1e:80:84:70:
0c:a8:46:9c:35:8d:ab:0e:a2:d0:03:19:0c:a8:53:b0:d3:6f:
ab:dd:25:5e:09:fd:d8:2d:3d:df:ee:68:08:13:b1:63:1d:4d:
c4:ce:e1:d3:f7:a8:6c:57:9e:74:69:d6:33:d8:4a:98:e8:0e:
bd:68:ce:27:40:f5:76:75:27:88:05:58:94:db:b6:a6:c9:11:
d8:77:7e:a1:aa:99:02:2f:dd:16:74:c6:a5:d4:c4:62:8d:42:
88:f6:8a:85:48:67:a7:2a:6a:e2:fe:f4:77:3e:73:3b:97:79:
fd:f4:5f:0c:80:88:b8:1d:a5:81:26:4f:ff:12:5d:17:88:db:
87:fa:53:f1:21:c1:1e:42:cf:c2:e9:31:26:e8:e8:a4:2d:ec:
a8:6a:ea:2a:f5:20:88:c6:6b:f2:2a:72:92:6b:23:fc:67:bb:
ce:47:55:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:38 2026 by rpki-client