Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier: O2dJwmaPboZ3+LH1ooPo1bl9uAw0BigN61n545f+8es=
Subject key identifier: 45:C2:70:13:9A:BF:EA:CC:61:F4:DF:E2:38:05:03:DB:29:7E:36:50
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial: 019DA59D0FF6D3D8128EA69B7F694BCE0C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number: 03EC
Signing time: Sun 19 Apr 2026 12:00:26 +0000
Manifest this update: Sun 19 Apr 2026 12:00:26 +0000
Manifest next update: Mon 20 Apr 2026 12:00:26 +0000
Files and hashes: 1: A9rhd59_7voAjZbMragLA3ftrbw.roa (hash: jQKHOIkJndimLRm6Iut1TREkFlVZwkrcXKBUSUJBxdk=)
2: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: +QlHqxviMBYqEpl7aVS6w74nHyjm9nji6OuCNhYLd6Y=)
3: d9Ge2npzpsYZ4-H4VMZTmU7XIWw.roa (hash: gyeML4vxjWokwcPNE5B6qDQbqzNUghx/e5PMeQjFWBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:0f:f6:d3:d8:12:8e:a6:9b:7f:69:4b:ce:0c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Validity
Not Before: Apr 19 12:00:26 2026 GMT
Not After : Apr 20 12:00:26 2026 GMT
Subject: CN=45c270139abfeacc61f4dfe2380503db297e3650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:06:00:87:ee:3c:4a:e1:ca:36:b3:64:ed:
08:b6:fc:35:29:3a:9e:7f:cb:97:47:82:e4:f7:8f:
d5:5f:5b:90:ba:5d:c1:55:cd:84:55:64:42:7e:cb:
62:db:a0:8d:5b:fe:fb:90:14:0c:8a:10:99:f3:26:
8f:21:ac:3d:e8:ad:56:27:4c:b3:d4:e4:fc:24:d5:
d5:fa:9a:e7:9f:89:1f:e1:35:3f:d9:ee:93:8e:43:
d5:23:22:49:43:7a:55:dd:82:3f:cd:b6:95:73:d1:
1c:cd:8c:ca:c3:d0:a7:44:26:dc:10:10:74:02:b8:
db:19:a8:9e:db:c2:5f:f1:9b:ec:89:98:1f:fe:cb:
ab:cf:55:c5:27:a2:aa:58:d4:f0:f9:e8:80:6b:31:
dd:a1:ff:d2:3a:0b:da:b6:d2:4d:dc:00:3c:99:e4:
41:49:85:b5:da:0c:ed:17:65:72:b0:6a:d9:67:45:
05:04:15:35:4e:a3:0d:36:dd:36:8e:c1:b7:ff:80:
74:be:af:a5:ab:2e:5c:fd:e1:f4:dc:ce:2e:4b:a7:
4d:dc:31:17:d4:32:ec:9a:ca:0c:64:d0:90:f3:57:
cd:17:12:ab:31:ea:ec:a9:64:18:e2:bc:f0:40:0e:
f7:6c:b7:86:c4:95:dd:f8:7b:91:e6:7f:22:07:c9:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C2:70:13:9A:BF:EA:CC:61:F4:DF:E2:38:05:03:DB:29:7E:36:50
X509v3 Authority Key Identifier:
keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:32:1a:b7:b8:09:d2:fd:f0:64:57:9a:19:a5:b7:6f:3a:57:
94:bc:c6:9b:7e:95:6f:15:f6:0a:84:98:12:ad:5b:84:9a:72:
c9:24:fc:86:21:72:7c:88:f4:da:0b:f5:2c:4a:47:81:ed:69:
69:01:c3:69:0c:e4:10:a6:bd:1b:b3:41:fc:f5:23:16:e2:1f:
a8:f1:5b:28:21:12:57:0b:fe:b5:2b:40:0e:e2:c1:5d:78:9b:
dd:97:ab:2a:f3:d0:c7:37:12:99:b4:3b:3c:2f:47:fd:d7:06:
30:a4:59:03:4c:31:29:c2:5a:00:7d:19:a5:d3:48:f1:0d:ba:
dc:ee:7c:3d:8b:ce:80:3d:57:70:c7:ac:78:8d:5f:92:5b:94:
45:c5:61:7c:50:70:d4:aa:eb:9d:ca:d8:7c:b3:34:9f:9b:6e:
4b:21:69:1f:f6:1e:d6:e1:4d:e7:67:a1:75:75:16:45:0c:00:
e1:12:9e:a0:ce:e3:f5:85:e5:66:e7:7a:b2:da:ec:7f:0d:6c:
69:40:49:c3:c7:b7:0a:c0:03:aa:2a:2a:f0:c6:17:b6:05:c4:
8d:57:8e:6c:f6:48:4c:57:49:8b:d5:6f:01:0c:ba:4d:72:3b:
78:8c:7d:21:66:aa:c0:f9:81:5d:5e:be:bc:e4:14:ad:70:b9:
92:90:67:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:04 2026 by rpki-client