Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json)
Hash identifier: lgMf2Or67TlD/sUaQY2n0fXwly9vQUIGjiFzNhOb+pM=
Subject key identifier: B9:A9:90:7C:09:00:32:C2:B1:9C:FC:43:9B:9B:94:B9:47:B8:D9:2E
Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Certificate serial: 019CAD59EA9753DDE45CC04AB65DF65D1F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 07:01:16 +0000
Manifest this update: Mon 02 Mar 2026 07:01:16 +0000
Manifest next update: Tue 03 Mar 2026 07:01:16 +0000
Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: 582jfXamXqTzFolM3bYHCb0xjiDzmNWUX2qniLQCBs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ea:97:53:dd:e4:5c:c0:4a:b6:5d:f6:5d:1f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Validity
Not Before: Mar 2 07:01:16 2026 GMT
Not After : Mar 3 07:01:16 2026 GMT
Subject: CN=b9a9907c090032c2b19cfc439b9b94b947b8d92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b9:a9:74:66:a9:fe:93:9e:c5:28:13:17:7f:
28:61:6e:e0:7d:0c:c6:2e:ee:d0:e5:6a:20:f9:7d:
fc:d2:b2:7f:69:80:cc:62:b8:69:1c:17:50:85:45:
65:9e:24:eb:18:54:81:7b:93:45:62:b8:51:6a:2c:
16:f2:0e:63:12:82:5c:b3:e6:86:e5:15:42:8e:7c:
01:48:dd:27:eb:6c:63:00:ea:b8:f5:7a:f2:dc:7e:
8b:cd:ad:bd:fa:a8:00:16:d3:6b:8c:a1:44:e4:b1:
48:d5:c0:ef:58:df:c2:69:38:43:db:4b:84:f8:e3:
ab:0f:e5:f9:2c:c0:51:84:bd:0d:3b:a4:8c:d4:bb:
09:b7:b9:10:81:b1:68:af:15:e0:d6:49:5d:d0:3f:
71:e9:e7:33:e7:ff:01:bf:c3:a0:62:86:6a:19:78:
94:7d:42:24:a6:18:18:5c:61:91:5c:27:90:9a:f9:
cd:41:18:85:c0:9a:d6:c8:fc:0c:2c:14:12:4c:61:
dd:c2:67:c3:be:09:c7:1e:b9:af:67:e1:f1:ec:0c:
7f:0b:26:73:98:0a:0b:fc:62:ed:9f:84:bb:c7:78:
20:61:6a:cd:d7:52:be:c9:d8:e9:15:05:31:7b:07:
0e:78:e6:30:b2:23:b1:91:b5:e6:44:bd:8b:80:1a:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A9:90:7C:09:00:32:C2:B1:9C:FC:43:9B:9B:94:B9:47:B8:D9:2E
X509v3 Authority Key Identifier:
keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:08:c7:44:6e:7c:c9:a2:7f:27:cf:b1:b7:e1:1a:86:93:f7:
55:49:2d:8d:84:6e:27:38:26:86:d4:df:93:02:fa:c2:3d:02:
b2:6d:52:28:93:f3:bb:3c:91:f1:65:49:db:23:06:81:f6:b0:
2a:21:be:4b:c4:d5:7d:68:d6:e2:15:bb:82:29:10:5b:4e:f6:
54:5e:df:22:d6:df:76:28:67:1c:a2:8b:64:74:18:76:25:18:
b7:eb:6c:7e:c3:d8:07:d6:12:34:95:c3:82:08:cd:e7:10:f3:
29:2f:00:0b:37:53:33:87:e1:6d:08:d1:a9:cf:89:17:68:f7:
1f:84:6b:35:13:3f:b2:2a:18:b3:82:03:d8:21:c6:0a:7e:74:
80:4e:63:9c:6e:34:28:11:ba:50:2c:29:93:5b:c2:0d:2e:a6:
bb:e5:bc:2a:e6:1b:58:b1:6d:09:2c:b2:1f:9c:38:e1:f3:9b:
3e:24:0a:62:59:e8:43:fb:b8:b8:be:09:68:2d:68:99:25:24:
16:9a:51:ae:bd:c5:47:7b:1b:f2:b1:a7:8c:63:11:9c:01:ca:
a6:46:a3:e7:20:f2:c6:14:96:31:f5:c6:61:31:e6:35:c9:cd:
11:66:81:2e:66:73:71:bc:29:2b:76:72:c6:60:a4:c9:ae:9c:
83:82:ab:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:47:51 2026 by rpki-client