Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: zYgD3cp9V/dAq0hc40wkfFYIXOc5VsOW/Jfpe26N9Mw=
Subject key identifier: C6:3B:84:43:8C:0D:28:14:EA:B4:C1:6E:48:35:25:86:18:AA:94:A7
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 019FA8CFE07DED22B106843277517DAAE599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 08F7
Signing time: Tue 28 Jul 2026 13:00:23 +0000
Manifest this update: Tue 28 Jul 2026 13:00:23 +0000
Manifest next update: Wed 29 Jul 2026 13:00:23 +0000
Files and hashes: 1: ao-j9y2eNyjzBF-56aZku4fCkqU.roa (hash: jH5V+oJ22nO5z/wTNW5PeTwWZKC2MlE64btkDmNQ5Vc=)
2: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: nh1NjBCuuTVZhAJnu1YoV3Jq6jz/Q1CumWDFT8SZWLU=)
3: sXRIKDkocbyTzm_GTL7N5qzTlQA.roa (hash: Zqly+CyY2Doez5dPu8qN77QPc5JqqNkgXWgjtCg+Bfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:e0:7d:ed:22:b1:06:84:32:77:51:7d:aa:e5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Jul 28 13:00:23 2026 GMT
Not After : Jul 29 13:00:23 2026 GMT
Subject: CN=c63b84438c0d2814eab4c16e4835258618aa94a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:c1:38:5d:af:a1:a7:f7:73:ba:42:f4:09:
d6:76:97:9e:fa:26:ae:fa:0f:d6:5f:c1:47:39:4a:
2e:ed:30:21:c4:a0:99:32:67:0a:b5:12:97:a5:df:
24:0e:ca:80:bb:9e:3e:dc:b1:9a:cc:dd:b9:54:c9:
b5:f2:6f:5f:04:24:8c:0b:5e:96:20:75:40:0f:17:
eb:91:01:e5:83:53:fd:8d:b4:cb:ab:c6:7d:a2:0a:
a9:66:79:c1:44:be:be:93:3c:38:4f:2d:a1:43:72:
11:ba:d5:4f:ae:0c:e9:51:ab:a7:97:65:90:b4:8c:
00:c2:27:dd:e1:bf:3f:f8:31:22:d4:0e:1c:43:3a:
d5:e5:bf:ff:82:36:c3:ae:39:25:b9:18:d6:c5:0e:
e2:6f:31:b0:63:e2:ab:a2:4d:1b:4d:50:88:79:95:
97:af:67:0a:62:55:a3:3c:6a:bb:62:c2:90:63:6b:
df:af:36:9c:e4:b4:48:f5:07:0c:d3:87:f9:5c:24:
9f:62:ba:a1:51:61:29:29:1f:ed:3d:bc:d0:8f:6c:
4f:65:c5:9c:63:61:a7:f6:83:19:67:2b:14:0e:84:
91:80:49:a1:97:22:3d:b3:3c:a1:53:22:2d:5c:78:
c1:54:3e:b3:4e:e3:a4:60:20:98:d3:90:ee:5d:dc:
59:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3B:84:43:8C:0D:28:14:EA:B4:C1:6E:48:35:25:86:18:AA:94:A7
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fa:be:2d:08:27:cc:6d:6b:21:77:aa:5f:d7:b0:c6:d6:c4:
ca:05:ff:9f:f8:34:0b:aa:a3:ef:ca:2e:b0:25:73:fc:5f:d2:
af:3b:e8:cd:0f:85:cd:51:94:42:73:db:f4:0c:0b:2d:f8:e5:
05:21:9e:45:0d:ac:96:90:44:a1:59:99:90:6c:59:5e:30:17:
e9:6b:48:b0:89:1c:69:ea:87:99:f8:e7:09:95:d4:72:96:7f:
b2:b3:53:bf:ad:6a:89:b2:29:74:ff:f9:19:bd:4a:52:80:a8:
e5:3d:2c:dc:37:04:4e:c1:ae:f8:0d:70:99:25:56:12:4a:e6:
6e:17:46:d0:bc:5d:3f:a2:9c:eb:b8:cb:28:2c:21:76:01:f9:
6e:ab:3a:d6:f4:37:e2:8e:fc:4d:03:6d:e5:6d:14:1f:94:ff:
e2:cf:b9:4c:89:dd:18:b2:b0:22:87:88:ce:2e:90:8a:05:b2:
e9:d3:47:e6:3d:80:b4:72:21:bf:11:93:b0:4c:f2:44:02:9b:
b9:84:df:23:a1:15:04:4c:1d:e8:27:83:a3:4a:17:b0:81:ea:
c3:8f:46:26:e5:35:12:cd:d9:02:dd:12:9d:92:44:58:fa:6b:
61:d0:f8:66:51:da:a0:41:cd:e0:a6:ca:e3:ec:40:39:c6:89:
3f:4b:c8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:15 2026 by rpki-client