Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: Q0RIMKPHyvMAtGyKzcvvKdz3JIPz0xR3mLSmo3g7dHQ=
Subject key identifier: AA:33:30:C8:D6:52:C8:4F:A3:9C:5A:F7:36:61:9F:45:2A:23:CD:BE
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 019D999962EA01607D19B81364C749191DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 07E6
Signing time: Fri 17 Apr 2026 04:00:59 +0000
Manifest this update: Fri 17 Apr 2026 04:00:59 +0000
Manifest next update: Sat 18 Apr 2026 04:00:59 +0000
Files and hashes: 1: ao-j9y2eNyjzBF-56aZku4fCkqU.roa (hash: jH5V+oJ22nO5z/wTNW5PeTwWZKC2MlE64btkDmNQ5Vc=)
2: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: n/lqNoAxQKMnbrwlMVviwH+1GPEJE0inV1pUms8ypNY=)
3: sXRIKDkocbyTzm_GTL7N5qzTlQA.roa (hash: Zqly+CyY2Doez5dPu8qN77QPc5JqqNkgXWgjtCg+Bfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:62:ea:01:60:7d:19:b8:13:64:c7:49:19:1d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Apr 17 04:00:59 2026 GMT
Not After : Apr 18 04:00:59 2026 GMT
Subject: CN=aa3330c8d652c84fa39c5af736619f452a23cdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:bf:49:38:82:c0:b2:95:10:8b:95:5f:44:
d7:c8:52:97:fc:99:75:b1:95:92:00:e6:0d:81:d6:
68:ec:13:a3:2e:87:5f:b8:84:ae:0d:d1:3d:63:fd:
fa:4d:50:97:c3:ee:fa:24:ee:fb:b0:6f:70:18:f8:
a9:32:bc:97:41:a8:44:2b:c3:73:a9:c8:e4:06:4a:
fd:b1:38:59:7a:8d:c7:49:99:7e:30:b3:4e:2f:26:
35:0d:d2:28:ba:a7:9e:fe:af:51:c9:bb:4e:3f:14:
a8:79:ec:37:98:3d:0f:99:21:c3:e8:93:f1:8c:7e:
e2:58:7e:8f:d0:e9:3a:2f:82:42:26:08:18:43:31:
a7:1c:56:94:88:69:30:a5:ef:d7:1a:bb:6c:81:39:
09:13:5c:13:34:b2:1d:d7:93:fd:5f:85:95:f6:39:
e3:ab:40:84:92:f0:82:35:4d:62:cb:cd:88:ed:74:
a5:5c:2f:41:97:1f:59:8c:22:e7:30:6e:cd:ed:41:
99:9a:b6:bd:8b:ca:1a:f6:5c:16:fd:38:f6:c5:e4:
6a:9d:71:b9:03:53:84:ce:bb:44:a5:1e:c6:4e:7f:
12:7b:d8:44:8f:be:2f:40:58:da:96:04:d6:73:32:
71:f6:85:a9:ba:25:f6:e2:3e:8c:0f:60:7a:ce:46:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:33:30:C8:D6:52:C8:4F:A3:9C:5A:F7:36:61:9F:45:2A:23:CD:BE
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0c:0f:a1:d5:f0:a6:22:b6:a4:96:82:e6:98:16:dc:10:99:
52:09:f7:6d:52:65:ec:da:49:e6:e3:17:74:04:d8:bf:ac:39:
28:dc:dd:f1:6b:c8:c7:9a:bb:f3:3f:89:56:d4:c1:7a:1a:bd:
ef:9d:f2:16:6f:42:fa:6e:0e:be:f4:69:8f:a1:f0:94:f8:18:
63:e2:a3:ed:30:af:10:cf:d6:4c:4b:31:25:9e:09:68:b9:2f:
46:e6:f3:34:0a:5d:24:88:ad:a8:6f:0d:66:7b:2e:f8:e7:bb:
3d:b4:5e:bf:65:ae:43:35:6e:ff:38:8b:82:b3:41:5a:3a:38:
82:cd:b2:fc:ad:a3:b0:55:71:ea:bc:c6:ca:f0:49:e4:17:84:
a5:46:b1:52:54:74:a1:95:24:d3:47:df:28:90:9d:14:9b:b3:
7c:dc:fa:1f:43:f2:6f:23:55:9e:df:35:47:51:eb:ef:15:f1:
e7:0b:74:45:5f:a3:ee:b5:2c:b1:7b:9f:25:b1:73:a9:88:06:
02:da:5f:22:4a:a4:7c:a3:f2:32:02:e8:4f:30:cb:9c:3a:21:
4b:b7:39:37:b3:7f:c6:71:b7:b2:7c:0c:2f:7c:8a:23:75:79:
e9:92:f7:70:f8:e9:f0:e6:02:34:ab:71:86:0b:a1:24:a8:26:
43:74:85:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:32 2026 by rpki-client