Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
File: avL7pFrWUxpj0XNQFPaZgH9H-9w.mft (raw, json)
Hash identifier: tZ6yG3qlZEi2vbEWj9sFt0dPEdaygQsH7mlXt8Dbrfs=
Subject key identifier: 54:6C:CC:22:63:9E:6A:2F:DE:71:32:B1:25:9F:68:44:6D:62:04:72
Authority key identifier: 6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
Certificate issuer: /CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Certificate serial: 01A1AABA540E3C455508AE588DF92D8754BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
Manifest number: 0B07
Signing time: Thu 05 Nov 2026 08:01:40 +0000
Manifest this update: Thu 05 Nov 2026 08:01:40 +0000
Manifest next update: Fri 06 Nov 2026 08:01:40 +0000
Files and hashes: 1: 1LA-pOZoA1tm-AvQur9VCLqaFes.asa (hash: mtqiDgdC7wzQ/w6E+BKecLxFnmJqkZRjGx3+QKxgnv4=)
2: avL7pFrWUxpj0XNQFPaZgH9H-9w.crl (hash: gDPm03WjRxBOeoDn5hnIby3WZOT7rc59Jj070lCM9J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:ba:54:0e:3c:45:55:08:ae:58:8d:f9:2d:87:54:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Validity
Not Before: Nov 5 08:01:40 2026 GMT
Not After : Nov 6 08:01:40 2026 GMT
Subject: CN=546ccc22639e6a2fde7132b1259f68446d620472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:1d:d2:07:1c:c2:d7:b7:5a:58:5e:be:aa:
cc:0a:29:53:fd:ed:f6:26:d3:cb:7a:9f:1a:d3:a3:
07:c5:d9:bb:35:99:8f:3f:5e:be:99:77:fe:1e:67:
90:09:3d:d8:59:d8:9e:ec:8f:e4:da:61:1c:59:07:
ce:fa:fa:a3:62:97:f5:0f:c3:5c:61:d3:91:63:c7:
a0:c1:c0:88:2e:31:75:01:4b:17:e1:9a:1c:d7:bd:
d0:23:8e:96:09:89:7c:62:02:1f:c8:59:41:82:a3:
86:6c:ff:e7:20:51:31:17:06:02:cf:a8:bb:e6:7d:
23:6e:d0:dc:bc:99:63:76:5e:59:4e:0f:7c:6f:d6:
bd:bb:83:cb:f7:ca:08:e9:22:44:fc:a3:b5:87:8a:
8d:87:eb:a3:e6:45:3b:ab:25:7b:6e:e0:24:84:d6:
5f:14:cd:2b:77:df:e8:db:13:0d:88:48:9b:99:bd:
4c:7f:b4:7b:9a:d6:d3:1c:c9:a8:b5:9b:8e:b4:55:
da:ce:cc:3a:f3:73:86:21:dc:0d:1b:30:ed:e4:08:
5c:67:4e:a8:95:7c:ff:36:95:8e:9f:0f:37:44:d9:
ad:a7:db:e7:67:d7:d7:3d:a8:5c:fe:d1:44:58:ab:
0c:5d:6f:de:62:c4:d5:72:fe:0c:d3:3e:8f:ef:ff:
54:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6C:CC:22:63:9E:6A:2F:DE:71:32:B1:25:9F:68:44:6D:62:04:72
X509v3 Authority Key Identifier:
keyid:6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9c:58:f7:76:d9:5b:bb:f7:aa:49:34:f3:27:67:fc:a7:58:
72:61:8c:06:02:54:52:53:52:f0:68:e1:92:d6:1e:f9:18:49:
12:5e:56:bb:db:93:b3:98:b3:7e:cd:1b:9e:2c:dc:8f:e5:76:
db:9c:35:bb:f8:b5:89:0c:98:69:20:e2:67:92:f3:3d:e9:5a:
05:7d:8b:7c:b6:5b:93:05:e6:93:66:1f:07:41:63:f8:50:2d:
c6:f7:0b:c3:0c:e5:8f:04:da:3f:a6:a5:71:30:68:45:7d:f7:
3a:db:03:2d:35:88:83:27:6d:3e:d7:8d:41:e0:62:ef:43:27:
93:ba:bc:b1:da:43:6d:ed:0e:0e:52:29:89:80:f0:f0:d6:a1:
92:a2:97:3f:94:65:18:ba:19:6a:fe:b8:1a:c4:50:18:d6:b8:
d5:cb:c3:c8:15:1d:a9:d4:98:38:a2:44:43:b6:e1:e3:48:37:
91:45:a5:ac:4a:5a:6f:61:3e:c5:31:92:f6:6c:88:a2:ad:b3:
f4:ac:f5:ff:07:86:ce:cb:a0:62:bb:d4:7a:67:ae:73:96:9e:
b8:ff:51:26:61:5e:de:63:23:33:97:12:ac:fd:43:85:4a:b7:
94:1b:c3:4c:81:36:e4:89:1e:47:41:d2:57:94:03:d5:20:c5:
7a:f9:de:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGqulQOPEVVCK5Yjfkth1S/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZjJmYmE0NWFkNjUzMWE2M2QxNzM1MDE0ZjY5OTgwN2Y0
N2ZiZGMwHhcNMjYxMTA1MDgwMTQwWhcNMjYxMTA2MDgwMTQwWjAzMTEwLwYDVQQD
Eyg1NDZjY2MyMjYzOWU2YTJmZGU3MTMyYjEyNTlmNjg0NDZkNjIwNDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOUd0gccwte3WlhevqrMCilT/e32
JtPLep8a06MHxdm7NZmPP16+mXf+HmeQCT3YWdie7I/k2mEcWQfO+vqjYpf1D8Nc
YdORY8egwcCILjF1AUsX4Zoc173QI46WCYl8YgIfyFlBgqOGbP/nIFExFwYCz6i7
5n0jbtDcvJljdl5ZTg98b9a9u4PL98oI6SJE/KO1h4qNh+uj5kU7qyV7buAkhNZf
FM0rd9/o2xMNiEibmb1Mf7R7mtbTHMmotZuOtFXazsw683OGIdwNGzDt5AhcZ06o
lXz/NpWOnw83RNmtp9vnZ9fXPahc/tFEWKsMXW/eYsTVcv4M0z6P7/9UdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRszCJjnmov3nEysSWfaERtYgRyMB8GA1UdIwQY
MBaAFGry+6Ra1lMaY9FzUBT2mYB/R/vcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZMN3BGcldVeHBqMFhOUUZQYVpnSDlILTl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MjhhNDAtZTBlZS00MzZiLWIxZmIt
MTk3ZWM5YTExNWFhLzEvYXZMN3BGcldVeHBqMFhOUUZQYVpnSDlILTl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83MjhhNDAtZTBlZS00MzZiLWIxZmItMTk3ZWM5YTExNWFh
LzEvYXZMN3BGcldVeHBqMFhOUUZQYVpnSDlILTl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpxY93bZ
W7v3qkk08ydn/KdYcmGMBgJUUlNS8GjhktYe+RhJEl5Wu9uTs5izfs0bnizcj+V2
25w1u/i1iQyYaSDiZ5LzPelaBX2LfLZbkwXmk2YfB0Fj+FAtxvcLwwzljwTaP6al
cTBoRX33OtsDLTWIgydtPteNQeBi70Mnk7q8sdpDbe0ODlIpiYDw8NahkqKXP5Rl
GLoZav64GsRQGNa41cvDyBUdqdSYOKJEQ7bh40g3kUWlrEpab2E+xTGS9myIoq2z
9Kz1/weGzsugYrvUemeuc5aeuP9RJmFe3mMjM5cSrP1DhUq3lBvDTIE25IkeR0HS
V5QD1SDFevneHQ==
-----END CERTIFICATE-----
Generated at Thu Nov 5 12:22:38 2026 by rpki-client