Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
File: AVkheESIrdmgVmH_EXh-x1TmBeU.mft (raw, json)
Hash identifier: 5C9dGqzgkwaFQ3OoIAzYA2bNxadYNhbwyidg8HDJbjo=
Subject key identifier: 42:A7:0C:7B:96:5D:CC:8E:4A:B0:61:CB:86:DF:D7:05:29:89:75:CA
Authority key identifier: 01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
Certificate issuer: /CN=015921784488add9a05661ff11787ec754e605e5
Certificate serial: 01A0C40DF67BAF56B23BC90462A19F31DB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
Manifest number: 1A62
Signing time: Mon 21 Sep 2026 13:00:44 +0000
Manifest this update: Mon 21 Sep 2026 13:00:44 +0000
Manifest next update: Tue 22 Sep 2026 13:00:44 +0000
Files and hashes: 1: AVkheESIrdmgVmH_EXh-x1TmBeU.crl (hash: 2r+Y9KZ0dKQHWqKHytzuL26FU+NlbtH23/pZ/BdmOl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:f6:7b:af:56:b2:3b:c9:04:62:a1:9f:31:db:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015921784488add9a05661ff11787ec754e605e5
Validity
Not Before: Sep 21 13:00:44 2026 GMT
Not After : Sep 22 13:00:44 2026 GMT
Subject: CN=42a70c7b965dcc8e4ab061cb86dfd705298975ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4b:ae:6b:06:fb:90:8b:17:6c:fa:32:18:5b:
5c:cb:1f:71:a9:5f:6c:d2:2f:57:86:4b:ae:47:6d:
cc:2b:54:5c:90:2c:92:96:ca:39:1b:02:06:5b:89:
d0:e7:4c:55:65:79:55:e3:d6:be:61:de:0c:f2:38:
8e:b9:ab:4b:33:a6:41:b9:e9:8b:ca:f4:05:a4:8c:
04:4c:08:d5:f6:c3:8c:e6:0f:2d:20:76:ba:b7:16:
e5:d0:44:4a:c4:d7:2e:cc:ad:dc:21:d9:9b:c4:07:
1d:ae:f1:b2:14:c9:52:57:e9:eb:53:0a:96:c5:1c:
ef:b1:d1:a8:c4:f7:6c:10:ae:e3:62:3e:31:21:35:
62:08:f2:a3:ca:e4:fd:0d:c6:9e:e0:c1:9d:06:27:
92:b4:9e:4d:08:1a:b9:26:f5:04:e6:5b:51:15:a3:
c4:91:c3:e5:dc:c6:09:33:70:a0:0f:65:5d:77:9c:
0d:f5:94:08:d6:d9:7e:6e:c3:06:3a:96:e4:80:86:
df:80:82:91:be:f1:57:4b:33:2e:7b:60:9c:9c:c3:
61:04:28:3f:03:d1:bc:fa:30:d2:0a:09:ec:0d:43:
9c:4d:ef:31:41:9b:f3:d0:92:9b:c0:68:9f:30:3a:
49:3b:50:be:a6:19:78:4f:9f:fa:85:27:be:33:ef:
b5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A7:0C:7B:96:5D:CC:8E:4A:B0:61:CB:86:DF:D7:05:29:89:75:CA
X509v3 Authority Key Identifier:
keyid:01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bb:dc:15:c0:8c:b1:ee:2e:5d:36:9b:3d:f2:f9:35:13:af:
a4:74:91:e9:ba:33:1f:fd:0a:65:02:72:60:a7:9b:f0:3a:e4:
5c:e7:a1:5e:62:af:6a:98:1a:b1:86:b6:7a:c5:b9:b9:39:1b:
4c:59:54:0a:38:5e:05:0b:53:d9:4d:25:92:85:01:2a:01:6a:
b3:0a:17:5d:74:40:94:18:83:7d:2d:02:1e:71:28:30:4c:74:
9e:bb:15:4b:a7:31:86:98:6d:91:17:21:68:1a:fb:51:0a:e8:
f3:17:80:ab:f1:44:0f:be:e9:2d:89:8a:1a:ea:6f:15:04:58:
f3:62:e4:ca:eb:b6:2f:0e:af:ff:82:60:c1:85:e6:e5:a1:02:
7b:9d:41:4d:6a:55:76:fa:38:00:bc:14:9f:ff:ca:68:5b:bb:
16:9a:ca:a9:f5:e2:d7:5f:8e:a5:81:07:86:32:d1:1d:8d:df:
97:26:68:58:6c:bb:d4:72:8b:45:6d:76:77:1f:15:61:39:90:
28:8c:e5:21:24:ad:b1:01:17:17:7c:60:2b:60:f2:64:b8:ee:
6f:b5:40:3a:48:86:9c:7c:d1:04:ac:8f:96:9c:6a:80:2b:4d:
bf:f5:e5:d7:f4:a7:85:23:29:42:34:21:8d:a3:e1:c1:30:fc:
27:e9:c9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:08:13 2026 by rpki-client