Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
File: AVgEEYI7SHN2g27WavP4qrsgEZw.mft (raw, json)
Hash identifier: EN1uxNf5omAkW12Pn42U+Q9q64uCHUIZf+LA12CfxKc=
Subject key identifier: 86:01:FB:2A:16:30:CA:27:9F:7F:F1:DA:56:EB:8A:9F:97:95:2A:A3
Authority key identifier: 01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C
Certificate issuer: /CN=01580411823b487376836ed66af3f8aabb20119c
Certificate serial: 019FAA199AB340CFD8ADD43952782F288EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 19:00:32 +0000
Manifest this update: Tue 28 Jul 2026 19:00:32 +0000
Manifest next update: Wed 29 Jul 2026 19:00:32 +0000
Files and hashes: 1: AVgEEYI7SHN2g27WavP4qrsgEZw.crl (hash: wvZWXDiA30+cQSFrOHmIc6Dx/3sOeHHlrUA/uJQLwrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:9a:b3:40:cf:d8:ad:d4:39:52:78:2f:28:8e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01580411823b487376836ed66af3f8aabb20119c
Validity
Not Before: Jul 28 19:00:32 2026 GMT
Not After : Jul 29 19:00:32 2026 GMT
Subject: CN=8601fb2a1630ca279f7ff1da56eb8a9f97952aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:db:3a:e1:dd:88:89:bb:13:ad:1b:5c:4b:6c:
e4:aa:6a:54:84:f4:c1:1b:f6:be:cb:5c:56:42:84:
9f:72:29:e5:9c:aa:23:04:12:a2:68:77:fc:4c:a0:
29:f6:4f:91:a0:8e:86:5d:ab:90:8f:57:6b:ae:9d:
c4:51:04:ec:3c:9a:ae:ba:1f:08:f6:be:37:b3:a2:
79:fd:a1:16:0e:c7:7f:00:f5:ba:89:d1:b8:a9:a4:
af:8c:95:3c:fb:72:b9:e9:57:f5:18:6b:12:2b:0b:
9b:6f:68:8b:4c:31:46:a9:dd:43:fb:22:a3:1d:ed:
29:14:d5:8f:ea:d8:cc:a8:7b:90:0a:8b:cc:45:73:
b5:7a:be:f8:cb:99:de:66:18:ac:b2:e8:3d:93:09:
12:05:85:60:50:7c:79:1e:6c:f0:d4:7e:f4:80:6e:
05:d5:3a:db:ed:00:5b:fd:32:3b:62:d5:14:07:b6:
0d:86:18:95:b7:c7:b5:11:fe:22:ec:18:90:e5:b3:
f6:83:ab:19:ef:cd:52:b8:cc:af:4c:36:29:11:65:
0c:6d:91:2e:5d:01:c0:5a:ad:d0:f2:2b:a7:03:33:
18:57:25:f0:e6:79:de:4a:df:e7:18:42:1b:34:c1:
41:1c:69:3f:aa:d7:74:41:f7:4f:34:e5:bd:75:09:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:01:FB:2A:16:30:CA:27:9F:7F:F1:DA:56:EB:8A:9F:97:95:2A:A3
X509v3 Authority Key Identifier:
keyid:01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9e:2d:d3:50:3b:01:15:72:1c:70:ff:16:54:47:48:04:9e:
e0:89:79:71:68:78:6d:02:21:64:65:74:7e:0b:a2:ef:0f:cb:
04:77:e1:c1:0b:6e:25:83:42:00:13:5d:78:ec:13:5b:42:30:
c9:0d:a9:70:9f:22:fa:46:ea:8b:96:49:21:2a:07:ed:46:71:
72:bb:56:9f:78:31:07:b7:06:03:58:b3:c7:36:d3:2a:1b:3e:
5c:17:40:3a:bb:0c:5d:34:c1:eb:6b:49:ee:0f:13:1d:78:fc:
15:74:ec:34:30:05:83:f8:fa:92:c9:20:ed:a9:53:39:6d:55:
cb:2c:bb:fc:65:a5:b4:a9:2d:80:cd:63:a8:38:d7:9f:22:0a:
62:03:6b:d4:6b:80:5e:a9:c1:62:50:ef:b8:ad:c2:cb:f3:54:
67:f3:fb:f0:1b:0a:fa:89:66:5f:b7:29:09:8d:fc:61:32:73:
7b:af:75:76:ee:9e:c6:57:b9:9b:81:bb:eb:d3:fb:23:d2:af:
fa:3e:c8:02:63:dc:12:e1:70:77:90:f9:10:89:06:c3:b0:1c:
e1:72:f8:a0:3d:e8:33:c5:f7:60:da:29:aa:7a:cc:77:1b:db:
ef:41:af:b7:78:21:b9:76:9b:f0:40:c8:4b:f0:67:21:4a:91:
cf:8d:ba:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:46:34 2026 by rpki-client