Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: NEi7DhmPNGIP+wBlkWTXRFPVq/t5rQCtIq/lj5n+G0M=
Subject key identifier: 80:1D:CE:E0:12:33:F8:88:6F:22:F4:F4:57:D3:8C:21:A3:BF:34:05
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 01A12EEA50FE50DBA505B721ACB6E1563F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 09C1
Signing time: Mon 12 Oct 2026 07:01:10 +0000
Manifest this update: Mon 12 Oct 2026 07:01:10 +0000
Manifest next update: Tue 13 Oct 2026 07:01:10 +0000
Files and hashes: 1: ao-j9y2eNyjzBF-56aZku4fCkqU.roa (hash: jH5V+oJ22nO5z/wTNW5PeTwWZKC2MlE64btkDmNQ5Vc=)
2: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: 93wu5sRecMoB32H7fUDkb3rrKJVJ7p/km0I4pQkkKxc=)
3: sXRIKDkocbyTzm_GTL7N5qzTlQA.roa (hash: Zqly+CyY2Doez5dPu8qN77QPc5JqqNkgXWgjtCg+Bfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:ea:50:fe:50:db:a5:05:b7:21:ac:b6:e1:56:3f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Oct 12 07:01:10 2026 GMT
Not After : Oct 13 07:01:10 2026 GMT
Subject: CN=801dcee01233f8886f22f4f457d38c21a3bf3405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:e6:4a:6b:f5:1f:08:fd:96:28:82:1f:bd:
42:ac:43:cc:8a:e2:58:dc:66:97:2e:fb:8b:96:13:
da:48:28:e4:ad:20:13:26:fb:a1:4a:2c:88:84:71:
b6:d2:cc:3c:d6:55:20:3f:9d:98:89:54:08:f6:5f:
3d:a0:1f:d8:6c:1c:8c:08:ed:be:09:d2:52:85:e4:
06:60:7b:0d:d8:65:aa:9e:62:9d:ed:27:9f:16:21:
83:41:e5:1b:43:1d:f0:a8:26:29:b4:e9:5d:cd:7e:
43:6b:8f:c9:9d:08:44:15:86:ea:cc:5e:bd:89:44:
a6:b4:8f:be:09:c0:d7:b6:9c:df:10:7e:c9:0d:60:
b9:21:d1:6d:42:bb:f2:3d:71:40:bd:6c:6f:96:6e:
02:d6:d8:61:6d:13:5c:c7:52:22:a1:31:9e:54:e3:
1d:6c:26:bc:e5:67:82:12:96:da:85:fc:a1:d2:51:
20:e6:d4:3f:e5:df:96:6a:85:c6:13:a7:17:dc:3b:
22:65:d4:f4:1d:11:e1:ce:a7:2c:c8:f8:2a:ec:85:
58:53:31:94:6a:a7:e0:63:fc:a4:74:b0:15:ea:28:
90:c2:c9:c4:53:c4:6b:ea:5b:3f:99:79:f6:97:b8:
88:43:e0:a2:58:c3:5d:10:f4:59:c7:76:8b:90:72:
69:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1D:CE:E0:12:33:F8:88:6F:22:F4:F4:57:D3:8C:21:A3:BF:34:05
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ec:e7:2b:c5:40:42:84:e2:46:7a:58:d0:55:31:59:08:4c:
d8:f0:69:e9:e4:c0:1e:8f:0c:33:13:96:88:e5:d6:6b:02:43:
f7:d8:47:39:a6:aa:4b:0f:15:32:d7:42:70:81:b0:a2:7d:41:
bc:c9:a2:57:03:4e:67:01:55:64:ab:30:1a:42:be:e4:4b:cf:
9a:37:bd:53:ba:97:c1:09:97:3e:f0:77:ba:e0:5f:e3:c4:11:
ac:6b:fa:bf:8b:67:46:35:33:75:c8:7a:63:fd:73:5c:da:6a:
32:02:e3:18:d4:5b:94:17:eb:87:62:00:47:bd:a6:d9:94:a2:
4f:a8:a3:aa:68:6f:6d:f2:10:ec:76:3b:b8:23:13:47:00:09:
c4:e6:04:f2:d5:b5:37:43:a5:12:24:59:6a:04:2a:97:45:68:
47:08:b5:d8:c8:2b:a5:c5:3c:3d:c0:d7:82:ba:8e:ec:ab:77:
e2:ff:7a:87:73:b6:a4:51:17:7e:e9:32:fe:12:87:5a:f9:ee:
b0:ae:59:e3:75:50:bd:f6:ab:83:7e:a9:79:57:d5:43:d9:d3:
dc:dc:29:1c:dc:a5:cb:ce:9f:90:54:d4:fe:78:a3:d0:64:aa:
9f:a4:6d:31:1b:5f:fd:16:18:e0:87:8e:9c:b0:80:4b:94:17:
9d:d7:92:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:44:41 2026 by rpki-client