Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json)
Hash identifier: LcCvi/24r+l/FUaSdhjTRlBGTb+G9nDSyXWW46o7a7g=
Subject key identifier: 43:07:F3:BB:3B:D7:18:B6:B7:F5:FC:FE:BC:E1:C2:82:81:F6:5F:CA
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial: 019FAABE5F980E5B9D00340D1C2BE5674B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 22:00:30 +0000
Manifest this update: Tue 28 Jul 2026 22:00:30 +0000
Manifest next update: Wed 29 Jul 2026 22:00:30 +0000
Files and hashes: 1: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: F6xFT/saom317zE+1smTKJpi6n863uaCE3AkoyZDHX4=)
2: hBPMfJjzisDLgAAy42OAPWTEtn4.roa (hash: 7+lbylCTdmTyru0tkrcTEDn3h1rEwAZ3WSEJuuLSstI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:5f:98:0e:5b:9d:00:34:0d:1c:2b:e5:67:4b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Validity
Not Before: Jul 28 22:00:30 2026 GMT
Not After : Jul 29 22:00:30 2026 GMT
Subject: CN=4307f3bb3bd718b6b7f5fcfebce1c28281f65fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:8d:30:6d:87:9e:12:76:22:21:f9:2b:1d:
3b:92:5f:df:74:3f:aa:de:07:4a:37:49:ff:83:4f:
57:a8:33:06:95:22:50:44:9d:10:f0:82:a5:34:97:
d1:b5:70:46:5f:a1:f9:65:1c:4d:74:0a:0f:23:c9:
6d:b3:bd:18:a7:14:80:bb:23:a9:07:87:8b:ab:9d:
9c:ab:98:49:4f:43:4d:d4:27:56:9a:5d:1a:79:a1:
2b:e6:3b:6b:0d:03:0d:7d:0e:85:37:5b:ba:34:35:
72:99:cf:df:d0:05:a1:ff:78:d0:17:ff:87:93:02:
4d:02:98:45:80:08:81:ad:59:ed:32:38:33:c7:75:
23:cb:4f:86:9b:bf:cf:f7:72:80:8c:79:dd:1b:01:
4e:c4:6b:7a:28:ff:2f:ea:58:d5:3a:8d:97:66:34:
32:fe:72:00:7d:d7:d6:86:b5:8b:19:70:e1:af:21:
a7:f9:9c:5c:36:6f:7f:86:c7:6d:3f:58:b9:07:38:
17:d4:47:15:9a:0e:9a:ce:d3:4d:bd:05:82:09:b6:
87:7e:f9:e3:4e:e0:b0:55:5d:e0:f0:d2:4d:11:de:
e5:ca:c6:ac:71:e6:79:3e:83:85:b0:bd:8b:1f:b5:
56:5c:78:65:d0:f4:77:11:73:11:98:99:17:91:f9:
66:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:07:F3:BB:3B:D7:18:B6:B7:F5:FC:FE:BC:E1:C2:82:81:F6:5F:CA
X509v3 Authority Key Identifier:
keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:48:62:95:e2:c7:37:bb:b6:cb:8a:ed:e5:12:c8:40:13:bc:
0b:06:25:bf:40:68:ac:1f:b7:7a:0f:a9:42:fe:1f:bf:4d:3a:
1b:c4:b5:1d:c9:b4:ef:8b:06:b2:73:da:db:af:77:c4:83:97:
c2:61:87:f4:7c:8d:a0:8b:da:cd:05:7d:47:8d:59:c8:5e:26:
ec:0f:e7:81:e6:c5:7b:a9:9e:3d:b0:ca:c2:44:8b:1c:2b:86:
d8:a0:1a:45:76:ef:86:13:d6:82:bb:05:36:9a:d9:06:39:f8:
f4:10:0b:22:70:96:9d:3a:a0:18:78:6a:de:ea:64:61:d0:0c:
68:62:44:02:3b:1f:4a:e6:f1:eb:bd:d6:d8:09:fd:df:ce:80:
50:73:0a:04:b5:51:16:10:62:cb:05:a2:5a:3f:a4:d9:7f:f9:
b2:02:95:38:fc:9e:1e:a3:fb:12:f8:f4:34:c7:81:9d:95:df:
c2:92:ae:94:fb:d3:63:03:94:18:40:8a:a8:d9:fa:ef:8a:5c:
9b:8e:9a:b7:0f:f7:75:a8:44:2d:24:fb:9c:50:99:b1:d0:90:
f8:7b:d9:fa:ed:33:a3:c1:6e:74:4f:b8:78:f7:f8:1c:64:8e:
5d:d1:8c:16:0f:f2:32:f4:1c:bb:da:34:5a:92:90:86:4e:9d:
5e:86:e9:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvl+YDludADQNHCvlZ0ssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZmFiMDkxNjhlN2NjNjZiNjYzYzYxNjJkNWM4ZDQ1NDk2
NWNjZTIwHhcNMjYwNzI4MjIwMDMwWhcNMjYwNzI5MjIwMDMwWjAzMTEwLwYDVQQD
Eyg0MzA3ZjNiYjNiZDcxOGI2YjdmNWZjZmViY2UxYzI4MjgxZjY1ZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaiNMG2HnhJ2IiH5Kx07kl/fdD+q
3gdKN0n/g09XqDMGlSJQRJ0Q8IKlNJfRtXBGX6H5ZRxNdAoPI8lts70YpxSAuyOp
B4eLq52cq5hJT0NN1CdWml0aeaEr5jtrDQMNfQ6FN1u6NDVymc/f0AWh/3jQF/+H
kwJNAphFgAiBrVntMjgzx3Ujy0+Gm7/P93KAjHndGwFOxGt6KP8v6ljVOo2XZjQy
/nIAfdfWhrWLGXDhryGn+ZxcNm9/hsdtP1i5BzgX1EcVmg6aztNNvQWCCbaHfvnj
TuCwVV3g8NJNEd7lysasceZ5PoOFsL2LH7VWXHhl0PR3EXMRmJkXkflm6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMH87s71xi2t/X8/rzhwoKB9l/KMB8GA1UdIwQY
MBaAFGr6sJFo58xmtmPGFi1cjUVJZcziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9hYWZjYjItNDkxZC00YjgwLTkxNjgt
NWYzMzgxYjA3MWRhLzEvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9hYWZjYjItNDkxZC00YjgwLTkxNjgtNWYzMzgxYjA3MWRh
LzEvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuEhileLH
N7u2y4rt5RLIQBO8CwYlv0BorB+3eg+pQv4fv006G8S1Hcm074sGsnPa2693xIOX
wmGH9HyNoIvazQV9R41ZyF4m7A/ngebFe6mePbDKwkSLHCuG2KAaRXbvhhPWgrsF
NprZBjn49BALInCWnTqgGHhq3upkYdAMaGJEAjsfSubx673W2An9386AUHMKBLVR
FhBiywWiWj+k2X/5sgKVOPyeHqP7Evj0NMeBnZXfwpKulPvTYwOUGECKqNn674pc
m46atw/3dahELST7nFCZsdCQ+HvZ+u0zo8FudE+4ePf4HGSOXdGMFg/yMvQcu9o0
WpKQhk6dXobpyw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:16 2026 by rpki-client