Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
File: AVgEEYI7SHN2g27WavP4qrsgEZw.mft (raw, json)
Hash identifier: q1bmDXXeYCT58mK84xooc0kwWZuP9BuSwhynogAo5G8=
Subject key identifier: E3:26:27:85:55:9F:FD:F4:F7:7E:E6:DE:A6:E9:42:68:8D:2B:67:8A
Authority key identifier: 01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C
Certificate issuer: /CN=01580411823b487376836ed66af3f8aabb20119c
Certificate serial: 01A0C40DEF6D9DC6B5E66B948C705CA0A347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
Manifest number: 1A62
Signing time: Mon 21 Sep 2026 13:00:42 +0000
Manifest this update: Mon 21 Sep 2026 13:00:42 +0000
Manifest next update: Tue 22 Sep 2026 13:00:42 +0000
Files and hashes: 1: AVgEEYI7SHN2g27WavP4qrsgEZw.crl (hash: mztciDPm11N8odyQnWr74q4FpoeMKQsD55SFhW+W+Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:ef:6d:9d:c6:b5:e6:6b:94:8c:70:5c:a0:a3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01580411823b487376836ed66af3f8aabb20119c
Validity
Not Before: Sep 21 13:00:42 2026 GMT
Not After : Sep 22 13:00:42 2026 GMT
Subject: CN=e3262785559ffdf4f77ee6dea6e942688d2b678a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:69:fd:c4:43:43:50:85:12:34:61:8d:6f:
0b:96:16:a7:48:cf:63:0f:ad:4b:33:2a:d2:26:05:
0b:e7:ec:1c:40:dc:7b:1f:f4:86:1d:d5:91:50:71:
3c:cb:b6:20:84:8b:cf:f6:d3:87:90:6d:ec:57:15:
33:db:72:cf:17:62:8c:5d:f0:76:5f:e9:f4:9e:97:
b4:5d:83:3c:26:97:c0:5c:3f:e0:b2:48:75:f1:83:
82:de:45:65:ac:70:0e:1e:fd:7e:94:12:e2:86:a0:
2a:62:49:f3:72:54:ef:13:cb:e0:be:80:3a:c2:11:
9a:c4:25:6d:16:11:c4:73:22:c5:02:4d:05:59:57:
94:ce:47:8f:54:95:96:a8:9e:b7:c7:4f:bc:fa:97:
a6:13:a3:09:91:be:9c:e1:79:ae:3e:3a:2f:c3:9d:
7e:fb:f6:3a:22:47:14:8a:19:b2:83:50:e1:de:91:
03:4d:08:99:de:ec:4b:34:85:c3:0e:b2:23:3f:bc:
fa:43:08:bd:dd:bc:37:3e:23:ca:b2:ed:88:43:8f:
67:bf:4a:0b:79:97:ea:14:eb:69:3c:68:7e:de:33:
d0:61:f8:35:28:d4:29:b1:db:3a:40:64:51:36:68:
cf:84:ba:29:05:40:9d:c7:2b:13:be:68:c1:33:9e:
6c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:26:27:85:55:9F:FD:F4:F7:7E:E6:DE:A6:E9:42:68:8D:2B:67:8A
X509v3 Authority Key Identifier:
keyid:01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cd:17:c7:67:25:c0:e1:8c:81:1f:cc:8b:0c:e1:23:c6:19:
d5:2b:65:0b:a0:d9:4e:54:22:7b:ce:6a:a4:83:dc:eb:42:d2:
75:3b:b1:79:a8:5f:32:1a:3e:de:f4:35:4b:86:ac:52:5d:7d:
6f:96:d0:e2:0b:19:02:bb:6a:f6:ab:41:4a:0e:bc:74:22:fe:
02:e0:f0:90:ab:0a:b7:93:7d:e3:2d:10:14:e6:db:ab:b2:86:
b1:1e:a5:e6:ac:6a:ce:77:ef:0d:4c:f7:e8:2b:a4:a2:3c:b4:
a3:cf:23:a5:3d:7c:a7:5c:e5:53:ee:58:05:d2:79:08:95:a3:
85:36:ce:6f:b6:96:c8:5b:0c:41:b4:63:f8:3e:50:bb:3d:62:
13:90:17:97:25:ee:0f:98:1b:af:61:af:54:df:e7:51:c7:0f:
69:6a:de:35:db:48:fc:c7:87:64:9c:d2:6d:97:52:ae:50:80:
08:42:ad:97:5a:ae:ce:73:5b:f6:51:44:d8:2e:68:84:c0:ce:
63:1f:c3:fa:cd:54:6a:75:0a:41:dd:b2:a5:e3:3a:04:e9:01:
cb:23:39:d1:45:c8:d7:90:85:14:a2:47:19:e2:27:84:c7:e2:
ab:d8:4e:74:0d:a5:ae:7e:c6:81:58:a3:da:49:48:b4:0b:7a:
65:b8:0c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:55:52 2026 by rpki-client