Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: nfNu9xIae3CuljqbBN5sbPVD/EwimZRcn1juRE6tUug=
Subject key identifier: 7A:D5:0C:AC:D9:F1:F6:6E:39:3F:E9:04:FA:50:76:27:64:2C:AF:48
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 019EBF23FAB20B1B686E46863DF078302D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 087E
Signing time: Sat 13 Jun 2026 04:01:06 +0000
Manifest this update: Sat 13 Jun 2026 04:01:06 +0000
Manifest next update: Sun 14 Jun 2026 04:01:06 +0000
Files and hashes: 1: ao-j9y2eNyjzBF-56aZku4fCkqU.roa (hash: jH5V+oJ22nO5z/wTNW5PeTwWZKC2MlE64btkDmNQ5Vc=)
2: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: 11m1JAMVV7uWWufmkgrB5w9e1djir0cIy+Vor/oFFEc=)
3: sXRIKDkocbyTzm_GTL7N5qzTlQA.roa (hash: Zqly+CyY2Doez5dPu8qN77QPc5JqqNkgXWgjtCg+Bfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:fa:b2:0b:1b:68:6e:46:86:3d:f0:78:30:2d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Jun 13 04:01:06 2026 GMT
Not After : Jun 14 04:01:06 2026 GMT
Subject: CN=7ad50cacd9f1f66e393fe904fa507627642caf48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:d5:35:37:be:e5:69:06:ea:e3:7d:82:ef:
9b:0e:1e:3a:70:b4:55:77:33:cb:b0:59:ee:fa:d3:
e7:9d:c0:32:49:45:4e:90:64:fb:a9:53:5a:96:b8:
4f:59:bf:43:b1:b7:61:b8:2e:84:35:c6:4e:c4:ff:
33:3c:fa:13:a6:1d:c7:c9:b3:49:b5:dd:be:43:3a:
64:de:b0:3c:af:e9:38:12:05:53:3e:96:11:c6:51:
72:fb:f2:3f:cc:7e:62:7b:f2:af:a1:4a:f0:aa:1b:
6b:b3:bc:e7:cd:a4:cd:cb:a2:39:00:8b:71:57:dc:
93:ec:f6:e0:00:58:2c:d4:bd:18:dd:36:85:cb:24:
db:a5:72:d5:31:88:45:90:1e:b0:45:64:63:8e:74:
59:65:64:39:20:c3:f7:74:15:f7:93:35:66:09:dc:
ef:d5:d7:78:93:35:8f:1e:e6:72:a0:49:d6:fe:14:
ee:fa:85:a5:18:ee:b1:0a:61:8c:00:87:67:b1:f5:
09:ff:38:ac:a3:42:ee:bc:25:ba:44:eb:61:98:9a:
73:09:55:d7:7f:61:99:a2:99:cf:78:3a:97:92:95:
33:bf:d3:bc:2e:8b:2c:93:38:c1:2d:78:9e:18:84:
90:72:46:ae:58:eb:94:a2:79:0c:41:c0:94:e6:6b:
d6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D5:0C:AC:D9:F1:F6:6E:39:3F:E9:04:FA:50:76:27:64:2C:AF:48
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:15:73:21:34:82:c9:09:33:8f:f7:6a:99:2c:fd:cc:f4:c8:
30:a5:61:52:46:14:e7:1c:0a:83:e5:9f:ec:f3:53:cb:cf:c7:
5a:50:a4:dd:4a:84:70:5d:83:68:43:2c:1d:7f:34:eb:cf:ee:
56:5e:13:d7:69:f7:5b:42:8f:8c:46:b6:81:43:23:74:32:86:
e0:c0:27:1c:09:18:32:d5:85:6f:8a:b6:74:e4:8f:72:7d:ee:
b5:da:b8:ef:ac:23:8e:64:e7:b0:eb:4c:53:13:1e:2e:0f:3e:
b0:1a:2b:d5:13:0b:ba:a2:a5:da:38:43:78:7d:7a:72:1e:20:
16:5d:9b:10:f3:78:7e:3b:d5:b8:53:ea:a8:2b:3d:69:4d:77:
68:5c:7e:d9:17:a2:94:3a:2f:77:49:25:7b:5b:41:fa:25:b4:
53:54:5c:d3:e4:6c:ae:c1:a4:ed:b6:dd:4c:86:ff:cd:ea:3e:
b5:1a:59:26:08:d6:ae:d9:75:f1:c7:1e:c7:58:d3:8d:a2:ab:
4f:09:77:39:a0:2a:4a:5c:de:65:57:e4:1b:3a:72:ea:8d:36:
f2:df:df:cf:f7:c3:18:41:b0:91:4e:72:ca:61:47:2d:26:22:
db:3a:01:ab:b9:d5:29:04:a5:26:af:a4:e2:df:27:4d:64:f8:
96:2d:d8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:59:54 2026 by rpki-client