Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
File: avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft (raw, json)
Hash identifier: eqz97G/tPzd+h7slN0/wJIR4K3WNo4xqaHkDKNzoomI=
Subject key identifier: FB:4C:67:CF:60:85:50:89:4D:3E:C5:89:4C:4F:1A:2E:A4:13:17:F7
Authority key identifier: 6A:F2:A6:6A:99:71:E4:77:EF:FD:5F:08:87:A2:9A:2F:9A:37:4F:E6
Certificate issuer: /CN=6af2a66a9971e477effd5f0887a29a2f9a374fe6
Certificate serial: 019FA89936992C6505F62D8DB479C8EEF8F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:40 +0000
Manifest this update: Tue 28 Jul 2026 12:00:40 +0000
Manifest next update: Wed 29 Jul 2026 12:00:40 +0000
Files and hashes: 1: 1-J4vNKUg5kTPF6XesrAZ4VjDX98.roa (hash: phX6owyDB4twltvk1dyR8ljZf5zcVZSNNxPOme7Wmno=)
2: avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl (hash: qSnWBaTeLGWlnKLnpz8e+naypWTrAhYPkD9E2QIOzh0=)
3: dGbP3G7L_AfcaaypWrUahXw6VQE.roa (hash: nX44iiUCb4BIYGZwGIjq1mG40V7UM3XbGwpmF2vnsQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:36:99:2c:65:05:f6:2d:8d:b4:79:c8:ee:f8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2a66a9971e477effd5f0887a29a2f9a374fe6
Validity
Not Before: Jul 28 12:00:40 2026 GMT
Not After : Jul 29 12:00:40 2026 GMT
Subject: CN=fb4c67cf608550894d3ec5894c4f1a2ea41317f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:27:13:a0:a4:36:9b:0f:11:88:2c:f0:65:1a:
22:4e:7c:3f:e0:63:df:33:15:bc:d9:34:c6:e6:8b:
b3:ca:95:ba:10:b7:43:d3:fb:8e:51:a7:a8:f2:3f:
ab:5c:b5:89:f9:4b:27:8d:d0:a6:04:2f:7a:a2:51:
a5:a7:41:7f:f3:1f:0a:0f:1d:bd:a1:a4:e0:35:47:
66:22:36:ec:b0:b7:dc:86:96:c0:81:d3:4c:64:71:
34:37:38:5f:ab:25:67:04:9e:1c:83:ba:e6:24:31:
31:ef:88:38:4a:27:18:89:cf:00:83:d2:63:24:14:
99:37:cb:94:4e:1c:f5:10:86:ae:dc:53:bc:a5:e8:
f6:6b:cb:c7:e0:4c:2c:e5:e7:e4:fc:7d:d6:6a:c8:
f4:53:9a:fe:30:ee:07:da:f6:b0:55:c0:48:77:d0:
16:84:f8:b7:3e:6a:4b:25:b1:58:6e:ee:62:f3:87:
56:35:c8:96:03:90:00:18:a5:56:0f:84:e1:66:6f:
78:0a:3f:ca:d0:b4:89:9e:cf:9f:9e:c2:e8:51:f4:
c9:57:26:e0:21:59:ac:a1:1e:ed:66:67:3b:3a:8c:
0c:f6:60:b3:0b:b6:52:ba:3b:d7:34:8c:fe:7e:9e:
6f:cc:b6:cc:bb:4a:2b:37:57:c6:44:b8:e5:b3:d3:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4C:67:CF:60:85:50:89:4D:3E:C5:89:4C:4F:1A:2E:A4:13:17:F7
X509v3 Authority Key Identifier:
keyid:6A:F2:A6:6A:99:71:E4:77:EF:FD:5F:08:87:A2:9A:2F:9A:37:4F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a0:4c:c8:be:7d:b7:cb:ca:ce:a5:8a:c6:e4:84:31:34:18:
25:48:9c:31:e7:0e:9a:cb:98:39:68:f6:9c:f0:60:53:88:06:
92:d3:b4:bb:fa:f1:b6:ba:56:cf:42:b8:50:cc:42:66:ba:90:
5c:90:a3:62:0d:b9:56:ac:2f:b5:03:cf:e3:75:1d:61:63:9f:
b8:5a:12:5d:f2:e1:47:4e:59:20:79:4c:76:51:82:bd:da:f5:
a1:c8:27:74:6e:91:ec:1e:71:cb:7b:4e:8a:7a:db:cd:72:c2:
12:36:35:3d:c1:8f:97:44:5b:f3:e3:84:43:63:3f:f2:ab:3c:
2e:98:99:c5:c5:a3:ab:68:f1:e6:de:d5:87:3b:b3:a9:20:ed:
cc:ec:76:2c:c7:20:f6:1f:43:6e:f5:7b:5e:dc:1b:68:0e:74:
9e:7c:95:12:36:0c:ff:95:b7:23:70:db:a2:a1:5d:81:f5:2f:
17:34:f0:90:bf:a6:9e:38:6a:b0:4c:04:e8:00:86:8a:70:51:
74:a7:2e:f2:d7:cf:4a:a2:1d:24:40:4c:29:08:88:fd:99:7a:
ca:bf:65:59:ad:b8:2e:99:ee:0d:22:84:2c:27:d3:35:b2:09:
41:60:f8:1f:6b:60:ce:34:5c:ce:b3:b9:56:ed:c3:4f:4a:a7:
1f:7a:ca:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:23:45 2026 by rpki-client