Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
File: avL7pFrWUxpj0XNQFPaZgH9H-9w.mft (raw, json)
Hash identifier: fLdWoHiO2h3uila0Ga3ECrpJ+REaghClZYYy7cj01r8=
Subject key identifier: 59:4F:41:0A:DF:67:3E:BC:07:6F:D1:24:BD:62:D9:3F:90:B2:24:A2
Authority key identifier: 6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
Certificate issuer: /CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Certificate serial: 019FA90758C12731D3C22ECBD7A68BAB3806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
Manifest number: 09FD
Signing time: Tue 28 Jul 2026 14:00:58 +0000
Manifest this update: Tue 28 Jul 2026 14:00:58 +0000
Manifest next update: Wed 29 Jul 2026 14:00:58 +0000
Files and hashes: 1: 1LA-pOZoA1tm-AvQur9VCLqaFes.asa (hash: mtqiDgdC7wzQ/w6E+BKecLxFnmJqkZRjGx3+QKxgnv4=)
2: avL7pFrWUxpj0XNQFPaZgH9H-9w.crl (hash: BtbSBzS8Qz5xP8btCzQy1ZNb0oqOTEq/sNRNY8ab3rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:58:c1:27:31:d3:c2:2e:cb:d7:a6:8b:ab:38:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Validity
Not Before: Jul 28 14:00:58 2026 GMT
Not After : Jul 29 14:00:58 2026 GMT
Subject: CN=594f410adf673ebc076fd124bd62d93f90b224a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:59:a7:e0:f8:81:32:d7:fd:9a:ba:1c:34:b1:
f1:72:9b:61:58:5d:5a:10:90:f1:81:2d:4c:99:6a:
3e:d5:ae:cc:1d:1c:20:7a:da:01:c4:34:e2:15:6b:
4a:5b:63:c5:50:f6:70:ca:42:77:1e:a5:46:c8:c6:
69:a7:94:a6:4d:4a:88:51:00:d5:25:27:54:8a:71:
1b:07:59:41:29:12:60:32:49:fe:ef:28:f8:d3:06:
91:68:e4:4b:ca:cc:4b:60:03:d4:c9:d9:56:e6:d7:
32:78:a5:43:94:79:ad:17:1d:72:2e:d0:5d:cf:83:
73:71:b9:33:b5:4e:8d:54:71:a8:29:af:b0:2e:ea:
47:41:9e:a8:3f:43:5d:d5:91:d3:06:cf:00:81:9d:
d8:98:c1:65:60:bd:95:89:70:2d:3f:4f:5d:0e:25:
0f:6c:5d:f8:7c:c4:be:5f:95:c4:27:e6:e6:79:41:
db:8e:6a:b5:8a:67:3e:ca:58:37:e2:b7:75:11:de:
3b:65:d2:50:3a:c5:78:e8:7b:08:71:69:04:be:e5:
1d:05:aa:5f:4c:3e:06:12:2f:60:7d:9c:2b:1b:ed:
66:13:57:ee:c8:42:59:b0:1b:35:26:b6:65:2c:37:
57:26:b8:46:0b:b4:dc:b3:dc:41:e8:19:ff:c3:67:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4F:41:0A:DF:67:3E:BC:07:6F:D1:24:BD:62:D9:3F:90:B2:24:A2
X509v3 Authority Key Identifier:
keyid:6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9b:dd:99:73:c7:e7:d8:23:d2:b3:30:b5:d8:f5:dc:31:f5:
56:83:9a:3c:f9:e3:2d:8d:53:f5:da:10:a0:02:fc:83:24:5f:
f6:e5:c3:f2:b0:dd:74:5a:eb:b0:42:93:3a:d0:ec:3d:cb:19:
2b:ea:3d:5b:a2:c9:cf:c7:85:b1:b5:e1:dd:5c:05:32:80:36:
8b:57:d3:cd:7f:63:4d:eb:0f:14:e8:f1:1e:bf:e6:a8:8a:93:
5d:83:40:ca:2e:b6:5e:b8:fe:64:1c:f1:d3:3d:a2:93:aa:7b:
39:4e:8f:24:d4:09:05:75:b8:78:7b:63:b8:51:2e:21:0b:8e:
e5:d0:c8:a8:13:81:6e:4d:cd:35:87:14:a9:12:b0:67:fc:81:
a9:5f:af:dc:33:60:60:fe:ac:fc:8f:c2:f2:0a:7c:ed:12:49:
97:95:70:93:ab:9b:54:6e:ec:b7:0f:ce:eb:8b:e2:89:31:28:
31:1e:46:1d:c5:cd:2e:ee:13:76:ed:38:81:fc:e1:61:a0:93:
d5:45:67:27:65:b5:2f:c4:f6:03:80:91:5f:21:6d:2e:04:81:
34:4d:4a:d3:2f:bc:11:cb:90:55:44:fa:20:2e:72:0b:20:42:
d9:55:09:ee:e7:36:82:47:f8:57:1a:b2:f7:ef:3e:ac:3b:19:
76:2e:90:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:09:52 2026 by rpki-client