Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
File: aVyQxtYzPUdic9L9bIg6oq2o0RU.mft (raw, json)
Hash identifier: NRwbjrZMjMvzCplacP69C5IPKKhNl5a+LeBWhV7SNwE=
Subject key identifier: CE:F2:5D:B0:C2:AA:C2:2D:1C:1B:18:40:D2:BE:EE:D6:F8:50:C4:96
Authority key identifier: 69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
Certificate issuer: /CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Certificate serial: 019CADC813F6DAABCF516C5FB0DCF8BFD24A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
Manifest number: 60
Signing time: Mon 02 Mar 2026 09:01:36 +0000
Manifest this update: Mon 02 Mar 2026 09:01:36 +0000
Manifest next update: Tue 03 Mar 2026 09:01:36 +0000
Files and hashes: 1: 6BKU6BQ0rm_dpv7UW41lofeDVAk.roa (hash: JSPR6ApMOGB4YeRrASVSoxpHimkIGb0YoSuAw+KKkoI=)
2: aVyQxtYzPUdic9L9bIg6oq2o0RU.crl (hash: MXYbfzMmbP+gV7iac9KoFE4kbk5ZE0/NG7LpO5vqRh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:13:f6:da:ab:cf:51:6c:5f:b0:dc:f8:bf:d2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Validity
Not Before: Mar 2 09:01:36 2026 GMT
Not After : Mar 3 09:01:36 2026 GMT
Subject: CN=cef25db0c2aac22d1c1b1840d2beeed6f850c496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:bf:b0:5e:4b:e3:80:bc:8d:76:bd:60:00:
3c:ad:b5:22:96:c5:2e:71:b5:68:81:6f:74:f7:04:
ba:b9:90:ec:b5:79:69:bb:b4:30:30:10:80:b9:77:
69:53:7a:a9:5c:73:b4:e1:75:5e:c0:9e:32:0f:74:
40:11:95:d9:dc:a0:d6:df:53:49:63:4f:9a:ee:fe:
c0:72:4b:34:40:28:bf:58:ce:7b:d6:89:a0:40:59:
b6:57:2f:4d:bd:9b:67:e7:a2:15:9a:b7:84:89:07:
a9:83:a6:c1:03:d6:f0:20:8a:1b:e8:93:fa:e3:9c:
86:1d:66:08:46:87:ec:95:3a:a2:5d:74:30:e0:2d:
c5:09:8f:59:64:00:5f:92:00:4b:cf:79:ce:4b:f8:
17:79:62:83:76:2a:a7:71:25:0c:94:72:46:a9:e6:
c9:43:a3:58:0d:ad:18:99:ca:5b:82:e0:1d:60:09:
24:bb:30:ba:85:a8:92:c0:0e:6d:7e:c5:65:5c:9b:
04:f4:38:01:18:14:8e:01:77:b9:69:84:64:a9:f0:
69:44:32:a6:b5:1b:4d:b1:fb:fe:b9:83:4e:98:3c:
5e:41:f7:9f:f2:df:42:9f:82:48:8d:b3:5c:41:9e:
10:b0:b6:8e:91:8d:52:7a:71:8e:47:23:b3:ae:e0:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F2:5D:B0:C2:AA:C2:2D:1C:1B:18:40:D2:BE:EE:D6:F8:50:C4:96
X509v3 Authority Key Identifier:
keyid:69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f6:2c:80:40:2b:98:c3:f0:d2:c2:24:e8:28:32:15:1f:73:
10:d1:fc:1a:04:58:e7:f3:27:0d:df:a0:01:05:4a:d2:9b:b3:
71:6e:ba:c0:e0:fd:99:51:ab:e5:db:76:96:cc:7e:01:a0:0d:
ef:f2:12:1c:33:39:ea:7d:ee:33:4f:c0:01:19:8e:b5:ce:39:
3f:63:0a:fe:14:ca:ae:de:94:95:5f:06:5c:37:2b:97:ce:88:
af:b0:53:c0:36:0c:f8:1b:5e:a2:5a:8c:33:79:74:34:a8:4a:
cf:6d:57:c4:3a:dd:1a:61:09:68:55:60:d5:60:95:2e:56:f1:
0c:79:ff:5a:40:9b:1c:1c:06:62:fa:73:7a:00:61:79:5b:99:
42:a9:6a:38:25:d8:f2:6f:46:0f:5a:c8:7e:b5:35:11:8f:0c:
69:54:15:5c:33:3d:b3:1f:6a:ed:a9:d9:90:34:78:13:f3:48:
ef:55:fe:20:59:3c:4b:29:ef:5c:37:60:fb:fd:74:f7:f9:3d:
42:dd:6e:1e:73:45:1f:a4:ec:b3:66:00:9f:9e:20:c7:83:11:
33:5a:b9:dc:ae:0d:6b:9d:d8:28:9a:5a:8b:f1:fe:13:41:2c:
03:a2:ba:a0:89:a8:02:c2:e7:55:63:bd:f4:8c:e6:0a:b3:fd:
23:5f:d4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:52:38 2026 by rpki-client