Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
File: avL7pFrWUxpj0XNQFPaZgH9H-9w.mft (raw, json)
Hash identifier: yzAT1AjDv5rP0KcQrijZcr4bO4cxlmutusRJ5zR+Oow=
Subject key identifier: 1A:AD:1A:4F:AB:8A:1D:4F:85:F4:7F:18:19:ED:EE:1A:9B:4B:0B:34
Authority key identifier: 6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
Certificate issuer: /CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Certificate serial: 01A0C10D28F733331C12A50FC0282EAA1310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
Manifest number: 0A8E
Signing time: Sun 20 Sep 2026 23:01:00 +0000
Manifest this update: Sun 20 Sep 2026 23:01:00 +0000
Manifest next update: Mon 21 Sep 2026 23:01:00 +0000
Files and hashes: 1: 1LA-pOZoA1tm-AvQur9VCLqaFes.asa (hash: mtqiDgdC7wzQ/w6E+BKecLxFnmJqkZRjGx3+QKxgnv4=)
2: avL7pFrWUxpj0XNQFPaZgH9H-9w.crl (hash: BZ2bvQ14y2E1b97LkYZ7KboB582N4w+y6KUrt/1+Zjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0d:28:f7:33:33:1c:12:a5:0f:c0:28:2e:aa:13:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Validity
Not Before: Sep 20 23:01:00 2026 GMT
Not After : Sep 21 23:01:00 2026 GMT
Subject: CN=1aad1a4fab8a1d4f85f47f1819edee1a9b4b0b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c9:f3:6f:b8:80:f9:4d:c3:be:72:e4:42:66:
9e:ff:7f:32:3b:b4:3b:15:4c:00:05:bb:c0:fc:45:
00:9f:c1:ad:23:bf:4a:ab:ed:da:7a:43:b5:5a:6f:
5f:72:d7:d1:7a:f0:bb:b8:40:2e:7d:dc:34:58:ea:
3c:06:a7:32:16:88:fa:09:e5:c5:bc:78:c5:f4:9e:
07:30:5a:42:45:b5:58:fa:4a:13:55:49:d9:7e:39:
f8:e7:bd:6b:15:da:7d:8b:d9:f4:cc:d3:ba:03:57:
3b:9a:df:44:8b:78:d0:be:78:e3:63:ac:3f:c9:bc:
79:47:ae:72:92:d9:ac:25:cb:81:5a:11:94:ec:44:
3b:71:f9:89:59:bf:af:e8:b0:35:6c:c8:6e:5c:e4:
f3:ac:85:cf:4c:c7:e2:f7:d9:9c:f3:07:71:9c:f9:
ab:e4:50:63:00:4c:17:c9:4c:b4:5b:ab:4d:7a:18:
d5:35:d2:6e:69:6a:65:96:8c:1d:7d:81:4e:8f:e4:
a1:24:f2:91:c3:21:27:99:a1:9b:2c:06:ed:20:e9:
85:aa:09:7e:c3:77:50:c2:de:f6:b6:e3:fb:ec:05:
74:98:74:8b:9d:a3:fc:66:d1:bd:b0:f9:cf:66:f1:
93:ef:cb:0d:51:f6:fc:26:9d:9e:c1:5b:ff:26:c6:
69:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AD:1A:4F:AB:8A:1D:4F:85:F4:7F:18:19:ED:EE:1A:9B:4B:0B:34
X509v3 Authority Key Identifier:
keyid:6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:81:0c:08:32:97:e6:8e:e8:c3:15:9a:9c:a0:c7:db:69:30:
07:0c:b4:a1:73:45:03:ae:d9:de:3c:97:a1:33:b2:95:ab:4c:
da:33:b6:00:90:5a:b1:73:a1:72:9c:3a:0f:db:3e:c6:6e:93:
4e:2e:29:9c:0a:bd:7b:9d:ea:3f:5f:d6:a8:b5:9d:27:bf:e3:
51:f7:c9:ae:47:dd:3e:1b:b6:aa:bd:7a:cf:06:c4:0e:4d:2e:
e9:63:73:be:83:0c:2b:48:90:b7:fa:dc:6f:e4:b7:53:fa:e6:
be:88:c1:30:cc:91:b7:cb:2a:a4:49:bd:7b:99:ae:75:72:52:
b2:08:7e:c1:ce:83:4b:77:b7:a5:20:34:f2:e1:c3:84:bd:95:
57:29:64:b1:ee:f0:c7:b9:4e:f3:16:71:d3:63:ee:3e:23:d2:
54:35:28:6c:e0:b0:5a:cb:71:f8:12:10:6b:56:25:d6:b6:38:
86:f9:6f:21:db:e9:43:17:d7:96:77:8c:0e:bd:70:7b:24:e8:
45:d3:9e:08:30:bd:d7:73:36:01:be:63:95:27:6a:81:5b:09:
17:88:91:69:39:a5:3d:d2:27:93:ea:74:93:3a:bc:3a:ca:29:
ff:ea:a8:49:73:39:71:6a:c8:e0:36:8f:ce:74:50:57:16:b7:
1b:c9:3e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:13:09 2026 by rpki-client