Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
File: avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft (raw, json)
Hash identifier: lRu5eHohVLBX6IFPsVl8Fd8YiDKXrE9hophqwLrxFH4=
Subject key identifier: E6:A7:42:8F:64:E0:85:D0:54:0A:15:5C:6E:C8:93:02:14:78:A4:E8
Authority key identifier: 6A:F2:A6:6A:99:71:E4:77:EF:FD:5F:08:87:A2:9A:2F:9A:37:4F:E6
Certificate issuer: /CN=6af2a66a9971e477effd5f0887a29a2f9a374fe6
Certificate serial: 01A0DD984EC6066920709BC8F547B504F999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:02:21 +0000
Manifest this update: Sat 26 Sep 2026 12:02:21 +0000
Manifest next update: Sun 27 Sep 2026 12:02:21 +0000
Files and hashes: 1: 1-J4vNKUg5kTPF6XesrAZ4VjDX98.roa (hash: phX6owyDB4twltvk1dyR8ljZf5zcVZSNNxPOme7Wmno=)
2: avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl (hash: 8Uekx8QsS/ll+8ymBfpHQPNbsyR0B837K8CU/s0Jwdk=)
3: dGbP3G7L_AfcaaypWrUahXw6VQE.roa (hash: nX44iiUCb4BIYGZwGIjq1mG40V7UM3XbGwpmF2vnsQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:4e:c6:06:69:20:70:9b:c8:f5:47:b5:04:f9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2a66a9971e477effd5f0887a29a2f9a374fe6
Validity
Not Before: Sep 26 12:02:21 2026 GMT
Not After : Sep 27 12:02:21 2026 GMT
Subject: CN=e6a7428f64e085d0540a155c6ec893021478a4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:2d:bc:e8:e8:fb:3f:69:29:d5:84:40:97:
f5:6f:83:41:da:f4:ae:8b:31:3c:63:cc:31:f2:6f:
fe:20:98:2e:5e:df:91:63:5e:0a:20:da:eb:5f:31:
df:3b:db:df:76:d9:87:f2:43:01:d0:58:07:c4:f8:
a9:0a:d3:7d:8d:10:46:b8:14:f8:d6:57:72:8d:ec:
a7:d4:9a:cc:51:66:ca:83:a1:69:a7:fb:dd:01:74:
15:5c:53:09:50:5a:10:8b:4c:3a:35:fd:0f:e2:d6:
13:db:11:e2:f5:56:ac:44:94:79:89:31:2f:ec:dc:
8b:73:84:a1:2e:ff:2f:ea:8f:7e:3d:d7:1f:5b:eb:
f5:61:3f:1e:3f:af:c6:59:da:17:bd:53:ad:75:3b:
91:a7:b4:17:12:c5:ff:9c:b5:64:1b:d7:27:e7:af:
28:5d:82:90:5b:d0:32:af:99:54:74:ce:70:7a:49:
b5:79:ac:8c:d8:e2:a6:87:1d:3d:6d:fd:18:2f:95:
70:53:0e:61:2c:d0:71:24:f9:db:c6:18:8b:50:57:
08:1c:48:30:85:09:5d:5c:80:28:9a:1a:c1:10:a0:
18:9f:e4:51:68:9a:32:ab:a4:c6:1e:ca:76:a7:24:
fa:dc:25:dd:bf:4f:8b:85:09:d1:52:d2:28:8e:b8:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A7:42:8F:64:E0:85:D0:54:0A:15:5C:6E:C8:93:02:14:78:A4:E8
X509v3 Authority Key Identifier:
keyid:6A:F2:A6:6A:99:71:E4:77:EF:FD:5F:08:87:A2:9A:2F:9A:37:4F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:46:5b:42:a8:ea:00:81:ed:e3:54:04:53:1a:4d:41:bd:a8:
2c:4d:bd:eb:aa:25:47:71:39:7a:6c:f2:33:b6:a3:ff:9d:5f:
f5:49:10:15:bc:69:70:e9:25:df:4a:cc:18:8b:bd:ce:02:b8:
85:55:13:10:45:46:fa:1f:7e:31:21:ee:ad:9a:6a:28:89:50:
75:02:f6:11:1a:90:f4:54:29:66:bd:87:a0:08:90:71:29:0b:
f9:7d:3a:ee:b3:e5:03:1e:cc:06:bd:00:f1:20:4f:cb:2a:c7:
0e:b1:cc:b0:4f:62:b2:dc:ce:b3:70:f8:23:29:f0:54:31:3b:
e2:25:78:59:d7:a0:19:08:f2:26:f9:95:dc:53:bb:75:0a:3d:
a7:89:15:64:c9:a0:06:c4:5a:0b:da:6e:3b:c3:04:a4:7b:4c:
9e:1f:71:21:f0:95:30:f0:c8:43:34:e3:7a:36:dd:a3:56:1c:
0e:82:50:aa:e0:02:9f:ac:76:54:fb:9e:c9:e6:8e:66:71:fc:
32:05:0e:4b:51:4a:16:ed:c0:88:73:ef:b3:c1:a8:d0:48:70:
a8:fd:51:1f:6d:37:32:7a:f4:f6:fe:cf:07:2e:94:0c:5e:cc:
4a:51:99:37:c7:db:ed:3d:43:a0:d5:44:75:b9:2e:f2:78:ee:
18:6e:31:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:25:15 2026 by rpki-client