Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
File: aVyQxtYzPUdic9L9bIg6oq2o0RU.mft (raw, json)
Hash identifier: GFyVoIipKhcMQyzRIjyBjoPPckHiX+/TaULIa8SnE3Y=
Subject key identifier: 47:72:04:F9:23:7C:61:9B:FB:80:1C:D2:42:85:CF:7A:AB:1D:EA:DA
Authority key identifier: 69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
Certificate issuer: /CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Certificate serial: 019FAA885AB243A7C6E18CF198D1B8A611EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
Manifest number: 01EC
Signing time: Tue 28 Jul 2026 21:01:30 +0000
Manifest this update: Tue 28 Jul 2026 21:01:30 +0000
Manifest next update: Wed 29 Jul 2026 21:01:30 +0000
Files and hashes: 1: 6BKU6BQ0rm_dpv7UW41lofeDVAk.roa (hash: JSPR6ApMOGB4YeRrASVSoxpHimkIGb0YoSuAw+KKkoI=)
2: aVyQxtYzPUdic9L9bIg6oq2o0RU.crl (hash: 3lj4ozEl5JyAU86Vd8m6zk4Dh7b1Acle542cjln6WoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:5a:b2:43:a7:c6:e1:8c:f1:98:d1:b8:a6:11:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Validity
Not Before: Jul 28 21:01:30 2026 GMT
Not After : Jul 29 21:01:30 2026 GMT
Subject: CN=477204f9237c619bfb801cd24285cf7aab1deada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:33:69:0f:97:bc:ab:7d:f4:b3:f2:f3:ca:
14:3d:50:93:3c:ed:d0:49:74:12:5d:64:5e:96:e8:
f3:de:88:c6:06:5f:c8:e0:c4:f6:af:4e:8e:8c:7f:
3e:47:25:19:53:d8:2b:00:7c:de:21:fd:df:69:ed:
e0:1a:36:5b:9e:74:81:ee:da:6c:63:11:9e:fd:25:
f5:86:f1:af:35:fa:ac:71:29:50:6b:fd:a7:61:6f:
75:d7:96:fe:3f:0a:82:5f:90:18:fa:7a:22:9e:a0:
16:43:07:ba:98:87:02:cd:a0:14:54:d5:24:1a:b8:
2e:bf:bd:cd:bf:57:f1:34:ee:24:a7:25:29:0c:73:
93:95:03:a2:95:20:dd:94:5d:f7:f4:69:c0:d7:16:
66:6d:62:fb:7e:f6:f2:35:e7:59:7e:d6:db:8c:77:
be:39:14:fd:44:eb:d3:60:33:8b:e1:c3:7c:24:7f:
2e:c6:6e:67:5a:48:9e:49:74:55:1b:96:38:f5:a3:
9e:5d:f8:33:f0:0c:de:7e:1c:a2:14:73:30:31:d1:
0f:1f:d5:ba:af:60:c3:66:54:be:2f:2d:1e:76:5e:
63:65:e0:11:82:7a:21:99:63:9b:38:23:da:8a:3c:
18:34:59:55:28:68:ce:f7:a6:f7:8e:42:43:7b:31:
7e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:72:04:F9:23:7C:61:9B:FB:80:1C:D2:42:85:CF:7A:AB:1D:EA:DA
X509v3 Authority Key Identifier:
keyid:69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d6:16:1a:78:d5:00:4a:85:83:af:85:b2:e3:d4:79:d8:47:
41:c5:5b:cc:29:07:b0:f6:b7:5b:26:01:85:7c:09:a7:36:11:
46:c6:32:b3:72:2d:e8:8b:2e:99:f6:89:83:ae:49:25:33:6b:
87:fa:49:13:63:06:d8:66:98:af:af:f9:e2:13:8f:09:dc:51:
73:c7:06:12:57:26:2d:f1:22:85:ba:cc:47:d4:11:83:af:98:
8f:f3:db:ac:53:44:94:39:1d:4a:75:47:9c:73:9f:db:17:86:
bd:25:2b:e7:17:62:5f:99:e4:d5:23:57:50:82:d3:03:09:ba:
18:52:a2:dc:bd:14:0d:2a:80:1c:ae:fe:51:5b:75:f8:b6:aa:
75:3b:79:8e:e1:6a:87:ef:a3:67:45:2b:80:a9:73:0d:cc:f6:
a6:03:b9:16:56:18:f0:57:30:ae:63:a8:5c:9c:b7:97:bf:0f:
26:c6:a5:35:57:c6:c6:87:d1:05:1c:df:97:43:2a:6e:83:b4:
5e:3f:4e:58:df:3f:1f:49:e0:1d:27:39:e1:38:5c:7c:52:31:
77:6b:99:7d:27:57:e6:2f:31:39:b6:df:9a:29:cf:9f:b4:7c:
d8:b0:ff:3d:0e:af:9a:37:2b:c8:33:92:28:7a:ae:96:dd:00:
68:7f:db:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:26:00 2026 by rpki-client