Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: VU8bdbHPxii22OaXREjTOk/0tPT+RiVFzRLAQGQG5uQ=
Subject key identifier: C6:4D:3D:C0:A5:03:C2:4B:52:2D:B4:43:04:26:3D:5E:BC:32:D9:C0
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 019CADFE918FEBA4A19A7CF9E3C1D2D52E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 076C
Signing time: Mon 02 Mar 2026 10:01:07 +0000
Manifest this update: Mon 02 Mar 2026 10:01:07 +0000
Manifest next update: Tue 03 Mar 2026 10:01:07 +0000
Files and hashes: 1: ao-j9y2eNyjzBF-56aZku4fCkqU.roa (hash: jH5V+oJ22nO5z/wTNW5PeTwWZKC2MlE64btkDmNQ5Vc=)
2: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: f/MLQk+DZc84kV7q9LSozAGGTi5hVMpE7Sx3i6PHQZU=)
3: sXRIKDkocbyTzm_GTL7N5qzTlQA.roa (hash: Zqly+CyY2Doez5dPu8qN77QPc5JqqNkgXWgjtCg+Bfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:91:8f:eb:a4:a1:9a:7c:f9:e3:c1:d2:d5:2e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Mar 2 10:01:07 2026 GMT
Not After : Mar 3 10:01:07 2026 GMT
Subject: CN=c64d3dc0a503c24b522db44304263d5ebc32d9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:a1:c9:6b:ac:47:7b:17:8c:d1:81:77:6e:
32:1c:97:03:f6:2e:d7:d6:d0:39:cc:3e:a5:97:39:
6f:af:28:09:2d:6a:98:17:c4:d3:32:f7:f9:aa:bb:
a9:d9:e8:5e:9c:eb:13:a2:3e:6f:d0:2c:76:0a:0c:
7e:e1:ad:a2:fc:e9:74:45:de:42:86:2a:f6:b8:7e:
e8:b6:ba:d6:1e:bf:1a:30:06:9e:f9:3f:7f:0c:9f:
4f:8c:bf:a7:41:db:55:a6:61:e6:0b:ee:ad:e2:9f:
5d:c3:ef:39:a0:b0:c9:cd:5d:a7:64:aa:bf:3d:57:
8e:34:27:94:b6:f1:b2:21:c1:45:08:32:e3:90:b3:
35:cc:ae:fb:79:8c:bb:ca:2c:c9:90:7c:30:41:80:
7c:d3:c9:77:18:a0:26:f8:66:0d:1b:ff:16:4f:84:
7f:fb:fe:72:3c:11:c1:10:b0:49:04:15:9a:a0:fa:
f8:90:1b:0a:b9:3f:b0:a2:71:43:d6:ad:0b:13:1f:
e1:62:40:cc:af:ff:cb:8a:3b:49:19:d1:88:6c:b3:
5a:23:89:ff:1f:d1:9a:bd:28:4b:41:41:d4:06:f4:
a8:41:a3:57:40:70:02:2e:72:f0:c6:c0:f6:9d:e1:
bf:07:4c:9d:be:d6:79:4d:e8:27:35:dc:db:2b:62:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4D:3D:C0:A5:03:C2:4B:52:2D:B4:43:04:26:3D:5E:BC:32:D9:C0
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:12:97:1f:8b:d9:c1:98:53:0f:9b:1f:22:66:53:d4:3a:a7:
28:94:d4:b1:c6:38:7e:bd:20:d7:c0:7d:bd:d7:49:c6:3a:92:
66:27:09:c3:51:bb:45:e3:0e:07:7a:1e:84:03:06:c0:1f:83:
ac:82:07:58:12:19:0a:c3:6e:93:1e:a0:4a:59:58:fb:11:d2:
d6:d8:ef:1c:1b:77:fb:bd:01:e4:e4:bd:56:f8:fe:4d:6f:54:
49:0d:65:ae:f2:1b:ec:d6:7b:87:bb:b0:d6:fb:ed:a4:22:b2:
25:20:3d:d5:62:a1:73:5c:47:2d:a2:7f:09:5d:d2:c5:66:36:
59:19:0c:5e:d7:eb:bf:8d:be:02:bc:64:f6:22:6e:14:8e:9f:
e0:62:ab:b6:53:c7:9b:cc:92:0c:07:fd:fa:6b:11:f8:45:e7:
72:eb:2a:a4:00:53:4f:22:26:d5:49:28:de:a0:b3:ca:f0:ac:
68:9b:fd:de:fc:4e:f9:8d:28:0f:f9:4a:ca:e5:ac:8f:62:4a:
e0:8f:c5:a7:99:2b:b7:3d:2b:0b:29:d0:a6:3f:1c:a3:4b:07:
39:d1:3e:6a:47:29:0b:0f:fd:3f:7e:6c:29:18:10:eb:8b:eb:
5b:cb:6e:a6:1d:81:d2:1e:93:a6:1b:40:4a:4c:51:a7:3a:d1:
76:ce:30:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:55 2026 by rpki-client