Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: aQJPnaQDBwWTGsSXU4MkX90AXhi1T3W/yAz5ZM+d5k8=
Subject key identifier: 85:DE:15:D5:6D:77:C2:79:6C:88:C4:60:B3:7E:E8:F3:29:58:88:20
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 01A12B0D19D603843448000F02D9CC2198FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 09BF
Signing time: Sun 11 Oct 2026 13:00:41 +0000
Manifest this update: Sun 11 Oct 2026 13:00:41 +0000
Manifest next update: Mon 12 Oct 2026 13:00:41 +0000
Files and hashes: 1: ao-j9y2eNyjzBF-56aZku4fCkqU.roa (hash: jH5V+oJ22nO5z/wTNW5PeTwWZKC2MlE64btkDmNQ5Vc=)
2: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: 7yhD6Ljcl1XGkW2QKF8ODNYQLyMDMsf6M1CIzxjL8L8=)
3: sXRIKDkocbyTzm_GTL7N5qzTlQA.roa (hash: Zqly+CyY2Doez5dPu8qN77QPc5JqqNkgXWgjtCg+Bfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:19:d6:03:84:34:48:00:0f:02:d9:cc:21:98:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Oct 11 13:00:41 2026 GMT
Not After : Oct 12 13:00:41 2026 GMT
Subject: CN=85de15d56d77c2796c88c460b37ee8f329588820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:af:3e:a4:d6:ae:65:40:54:6b:b3:7c:12:
3c:c8:83:0e:e3:b3:68:59:74:29:38:b8:06:58:32:
31:93:3a:50:ad:ca:d6:d2:96:0f:c0:81:39:ea:94:
0d:e7:5b:6a:3b:c2:8d:dd:20:5d:f1:ee:dd:d1:39:
02:a0:f5:d1:a4:a0:7d:a4:38:1e:de:20:41:e9:16:
4f:2d:fd:3e:b9:49:ee:07:73:c4:32:6e:b1:7b:f2:
5f:3c:07:18:ea:c1:f9:eb:f5:c4:1c:58:17:92:2f:
3a:50:ed:a0:05:a1:0e:bc:21:2b:c1:19:04:d2:f8:
17:71:b5:ae:35:38:9b:37:04:a3:97:d8:e6:f7:75:
09:59:10:1d:13:79:02:60:22:07:73:5c:42:53:78:
97:ae:82:92:4f:36:75:30:0e:8f:e6:4c:3b:c8:96:
43:9a:87:dc:10:08:a2:11:5f:a2:7c:c7:df:4c:f5:
46:4d:a1:8e:64:24:a3:73:6e:8c:9f:6a:2f:96:3f:
ec:6b:1e:8b:b1:5a:b0:87:6b:64:d9:6a:2f:53:4c:
78:bb:d3:67:56:b9:e4:b4:ca:0a:08:a1:25:bb:2f:
1a:a8:55:06:f7:43:f1:e7:9f:1e:3b:db:9b:1f:e0:
76:f4:0c:7a:42:a3:66:86:c7:d3:ac:a6:09:a2:68:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DE:15:D5:6D:77:C2:79:6C:88:C4:60:B3:7E:E8:F3:29:58:88:20
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:72:a9:8e:b1:05:82:7a:9e:ff:29:c2:d1:da:6a:d3:22:e2:
1f:8a:6a:64:27:8f:c0:d0:aa:b0:21:46:2e:29:c3:e0:7b:e8:
15:60:0b:ee:ff:3e:b3:2d:b2:50:ec:78:1e:6f:70:d4:4f:50:
00:0e:22:c5:d3:73:bc:2d:36:93:e2:ff:64:21:99:14:6f:9c:
f9:0d:3b:ac:86:20:db:20:4f:d9:5e:70:70:0e:53:a1:68:41:
72:9c:db:87:66:87:99:2c:e1:07:d5:a4:04:8b:c2:09:cf:49:
9e:5e:8b:9d:de:a8:30:9f:4c:91:e1:89:1a:94:2e:c5:7c:67:
f6:1d:a2:75:42:82:a2:5c:a2:e1:bb:bd:2b:e2:ab:76:17:15:
5f:e9:d4:6c:44:b7:b7:e3:9e:7e:53:e5:8a:9a:e7:75:c7:87:
bf:3e:cf:3b:87:85:be:5c:18:44:0b:ad:47:02:81:7e:ff:69:
45:32:f4:e7:da:9e:70:bc:b8:b0:16:ef:f4:2a:49:bd:0d:a0:
da:69:8d:6a:89:0f:10:7d:91:0e:0d:84:99:d4:92:18:33:ee:
9b:9c:33:5b:56:81:12:2d:1c:fd:a2:ff:69:19:04:ae:73:97:
80:21:cf:de:08:26:70:64:10:ca:0b:7f:ac:61:fd:53:d6:86:
e0:45:b8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:15:43 2026 by rpki-client