Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json)
Hash identifier: ecaHPyYkW1BG1q4FTWZ8YySxA52OjrOoX1BNMbVtwRE=
Subject key identifier: 32:A2:B2:48:FD:ED:E1:AC:6D:08:CB:8B:7B:75:64:4F:2B:BA:5C:75
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial: 019D9B87B939BBDEBA204362FA2E320EFE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 13:00:56 +0000
Manifest this update: Fri 17 Apr 2026 13:00:56 +0000
Manifest next update: Sat 18 Apr 2026 13:00:56 +0000
Files and hashes: 1: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: 7oOND5gYu/tgiw/CAGBOEMBtMg6P1S/Limy10dfqdEc=)
2: hBPMfJjzisDLgAAy42OAPWTEtn4.roa (hash: 7+lbylCTdmTyru0tkrcTEDn3h1rEwAZ3WSEJuuLSstI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:b9:39:bb:de:ba:20:43:62:fa:2e:32:0e:fe:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Validity
Not Before: Apr 17 13:00:56 2026 GMT
Not After : Apr 18 13:00:56 2026 GMT
Subject: CN=32a2b248fdede1ac6d08cb8b7b75644f2bba5c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:10:aa:83:da:3d:ac:02:3d:be:bb:54:96:
95:ca:11:fa:7f:bc:67:d1:d7:ff:9a:2c:84:00:e4:
1f:e7:6b:5a:ff:4c:1c:7a:27:e2:4e:7a:b8:a1:ef:
81:75:eb:ed:6f:c5:20:52:4e:6a:84:6c:af:47:bb:
78:1d:c8:9d:ab:fa:9b:d6:51:54:48:d7:08:ad:9c:
a1:97:80:c0:9f:c3:ec:9a:b0:9f:27:7c:b3:78:9c:
d6:6f:88:c4:ec:60:16:6b:4b:f1:9b:34:02:47:49:
c6:78:08:73:74:e5:e4:1c:4a:04:a3:50:d5:ed:ef:
89:a8:30:54:a3:d5:7e:d6:a0:a6:20:2f:64:19:66:
f1:15:da:3d:9a:4a:1f:d5:ca:66:f8:4c:2e:a4:ec:
4a:d6:48:d5:f0:87:20:dd:9e:07:08:1e:8b:05:2c:
48:df:b9:3f:11:67:40:a0:16:b2:38:44:19:3c:4f:
51:18:32:15:72:aa:97:94:22:ec:71:af:1d:49:59:
49:f5:d3:3d:c2:cb:e1:32:6c:be:08:74:68:02:50:
c9:63:a0:28:e4:3a:79:f8:5c:58:6b:74:ee:b6:81:
25:1d:4f:3b:3d:3e:aa:de:6d:e1:8d:d1:e2:3b:ce:
0a:ab:a0:08:2f:b6:9b:8e:65:ae:46:cc:35:53:01:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A2:B2:48:FD:ED:E1:AC:6D:08:CB:8B:7B:75:64:4F:2B:BA:5C:75
X509v3 Authority Key Identifier:
keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:68:8b:91:8c:b1:bc:d5:7c:e2:97:71:42:11:5a:7b:df:93:
2a:ca:65:81:d8:59:75:33:4a:ef:8c:49:0f:86:ec:bd:cc:88:
6e:47:c8:de:71:a4:03:bc:fb:18:bd:20:fa:48:aa:aa:a9:68:
82:d4:0d:bb:d1:fe:25:eb:1b:57:d5:06:a3:c4:88:57:63:16:
7d:03:95:5a:55:c8:a4:91:f2:1e:37:79:7d:1c:8d:7b:34:65:
c6:69:1d:ff:0f:4a:88:e9:4f:ec:c7:55:6c:d8:7f:36:c3:7c:
bf:32:ed:22:e3:82:ff:9e:bb:94:92:50:f4:78:b8:52:a4:a0:
6f:3c:fc:df:d7:b8:33:48:a0:c4:27:f1:79:59:0c:86:0f:75:
d6:1a:ad:12:a2:09:87:c8:0d:a7:d5:e0:d7:41:18:3d:60:3f:
2b:59:82:57:56:bd:73:66:e2:10:07:25:35:39:4c:29:1d:5a:
08:cb:c3:78:ea:73:a1:7d:83:9f:2b:2a:08:67:74:54:c9:75:
54:95:6d:ca:76:38:51:51:92:73:46:3f:1f:07:00:ba:85:36:
1e:ca:6e:d8:df:3b:64:bc:e2:28:f4:7b:e6:ae:63:33:20:5b:
94:f4:8f:22:25:fb:f4:9a:83:90:7b:02:ac:a5:b0:ad:10:3c:
aa:ec:b3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:37 2026 by rpki-client