Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json)
Hash identifier: +emqO9ldjJ4YXKRdgS/TA/qF6rldUER65C9K8cwTAgY=
Subject key identifier: 79:C0:88:0A:8F:B4:4C:39:C1:DF:DA:26:88:24:A3:19:8F:F4:1A:8D
Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Certificate serial: 019D9AE34DB9C42F9A6F0448E8DCF50DF323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 10:01:20 +0000
Manifest this update: Fri 17 Apr 2026 10:01:20 +0000
Manifest next update: Sat 18 Apr 2026 10:01:20 +0000
Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: 8hEeaPLavTSZEdt6MzDjWVQlueCRQFLWHR4jKZt7i4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:4d:b9:c4:2f:9a:6f:04:48:e8:dc:f5:0d:f3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Validity
Not Before: Apr 17 10:01:20 2026 GMT
Not After : Apr 18 10:01:20 2026 GMT
Subject: CN=79c0880a8fb44c39c1dfda268824a3198ff41a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:f6:e7:94:29:41:4d:ee:08:be:d6:30:e2:
51:8c:aa:d6:4d:28:26:f9:18:d2:37:28:d9:05:ba:
71:43:31:57:d0:78:cf:2b:f5:27:da:fa:7d:61:4a:
40:d6:0e:76:04:3e:96:c4:36:91:d5:0d:a7:42:61:
fa:5a:3d:3a:ca:b1:2a:6e:49:26:64:59:a1:19:70:
a8:92:ea:93:75:04:c1:bf:68:06:b4:46:a6:bf:f7:
f0:eb:51:98:62:69:a2:dd:d3:fc:e0:ea:43:5a:ff:
e5:b6:06:af:be:c4:80:d9:b2:82:8d:4f:89:10:35:
cd:d5:61:20:cf:20:01:9b:a7:9e:a7:8b:88:03:4f:
6c:6e:4c:e3:de:94:69:2f:34:e2:37:b4:cc:44:19:
3e:cc:b0:a4:a7:c1:a2:e8:ad:d5:0e:2f:e9:e8:bb:
0b:74:43:4c:73:55:80:fb:a0:91:c0:8e:b2:48:ea:
bd:07:c2:a8:85:87:73:65:11:23:11:d5:02:ee:d8:
54:bb:2d:f8:a6:8c:02:65:1e:db:07:38:e3:ca:5c:
61:af:7e:cb:2d:78:9e:a4:b6:29:8c:95:43:57:f5:
ea:2b:d5:8e:f6:62:1f:c0:f2:a1:f9:ea:d6:3c:c3:
d6:e3:45:70:04:16:ba:f8:2c:69:16:77:12:d5:4a:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C0:88:0A:8F:B4:4C:39:C1:DF:DA:26:88:24:A3:19:8F:F4:1A:8D
X509v3 Authority Key Identifier:
keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d8:d0:14:6a:1d:0e:67:6d:4b:b4:86:65:6c:43:72:04:bd:
cf:1d:74:59:83:88:fc:a8:43:8d:6d:03:bd:80:4b:53:4b:6e:
2c:32:c3:f1:83:50:1d:5c:c8:80:3d:a0:2c:71:95:2c:87:2a:
70:d5:d3:8e:97:b5:1a:50:63:36:06:55:bd:ad:47:1e:ef:d1:
17:e4:64:9e:67:23:3e:65:59:39:f9:2c:a1:7a:45:37:54:50:
b7:18:a0:cf:f2:85:2d:00:4f:d5:e8:38:05:de:5b:fb:c5:98:
10:16:30:04:4c:ab:84:13:5f:32:55:0a:8f:fe:9f:45:1e:5c:
b2:f8:54:44:8e:d0:66:d1:51:25:49:0d:1d:9e:27:87:c9:e9:
fe:42:b6:dd:2b:10:a3:5a:fd:3d:38:91:4f:f5:25:6a:09:69:
8d:49:ad:8b:83:aa:4f:e5:eb:5e:25:d8:03:bb:87:79:8d:a8:
60:5f:96:b8:a8:3f:fa:5b:fd:85:d5:42:fc:85:3f:0f:cf:ce:
3b:5d:57:78:11:69:e1:f5:24:33:11:f7:a1:bb:36:90:72:f2:
b4:0c:b9:ba:73:a4:dd:3f:12:b3:50:c3:09:4c:7d:4b:64:0b:
4d:c9:b6:6b:17:5d:cc:95:1c:de:a4:22:b8:2d:0e:79:6e:fb:
e5:5e:f2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:11 2026 by rpki-client