Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
File: AVkheESIrdmgVmH_EXh-x1TmBeU.mft (raw, json)
Hash identifier: whBLii8QEe303Exkgx9RAirHYeSrb1ZGpRg48FTHiDA=
Subject key identifier: 52:46:02:01:3A:E8:BF:29:5B:EF:DB:9E:FD:99:0A:B6:82:FC:20:04
Authority key identifier: 01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
Certificate issuer: /CN=015921784488add9a05661ff11787ec754e605e5
Certificate serial: 019CAB6B28D681204FA60942AC852186C374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:00:52 +0000
Manifest this update: Sun 01 Mar 2026 22:00:52 +0000
Manifest next update: Mon 02 Mar 2026 22:00:52 +0000
Files and hashes: 1: AVkheESIrdmgVmH_EXh-x1TmBeU.crl (hash: QB7dJ41mJoe813V/MQ59rGYI/tyc9eH3aVASopphwGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:28:d6:81:20:4f:a6:09:42:ac:85:21:86:c3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015921784488add9a05661ff11787ec754e605e5
Validity
Not Before: Mar 1 22:00:52 2026 GMT
Not After : Mar 2 22:00:52 2026 GMT
Subject: CN=524602013ae8bf295befdb9efd990ab682fc2004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:ca:5b:3d:a0:6c:cc:37:0a:6f:be:13:38:
50:6d:59:25:b9:c1:cf:d0:fb:e0:63:52:3d:06:2d:
ec:95:df:1a:3a:36:92:72:c7:b9:a6:d3:83:cb:af:
bc:f2:42:62:98:01:cf:48:e8:f7:a5:12:3c:c9:d9:
70:49:8b:b0:81:37:3b:3d:5e:9a:43:7e:c9:58:0e:
df:e1:8a:b9:a5:40:b7:38:1a:1f:6e:10:3f:7c:91:
10:82:ac:95:6e:4c:4c:83:1e:86:96:e1:0c:db:cc:
cc:b9:f4:03:6f:d3:55:0e:74:ec:f8:23:50:0b:95:
cb:cf:c5:3b:29:c1:c7:cf:e3:b3:f3:ce:67:5a:1a:
09:6e:d0:47:68:21:51:0b:22:e8:3f:0b:15:7a:49:
44:fe:c6:89:45:8a:3a:4a:63:51:70:c3:20:35:32:
03:10:83:db:33:75:b7:bf:e0:e6:f9:13:3f:c3:a5:
50:dd:0d:04:b6:9a:3b:31:18:29:62:19:7f:ee:e1:
46:59:10:55:94:ce:7a:9b:bf:b1:55:b6:0c:d8:fe:
d1:54:d7:49:73:97:9d:57:08:26:c6:56:95:7d:b9:
48:bf:6a:b6:0b:e7:59:d3:cc:69:50:21:08:b9:dd:
70:8b:40:1b:41:ed:a6:d4:a3:d8:87:81:06:f7:a9:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:46:02:01:3A:E8:BF:29:5B:EF:DB:9E:FD:99:0A:B6:82:FC:20:04
X509v3 Authority Key Identifier:
keyid:01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:0a:4e:8f:a4:19:7c:03:b3:b8:67:8e:ad:5a:18:fc:d7:42:
00:81:e2:fc:42:1a:f0:ac:8f:05:23:4a:ef:62:ed:62:7f:bc:
d8:96:a2:16:25:fb:d5:f0:8e:41:32:b4:cc:09:56:22:b5:d0:
53:db:1c:49:d6:c3:82:6b:ee:ef:56:67:19:f9:dc:bb:d6:4d:
0e:18:5a:c1:d6:57:df:7f:01:ff:a9:92:7d:30:4b:3d:35:d5:
31:49:24:6c:8d:ec:59:5e:24:db:39:16:48:b2:41:86:a4:1c:
cb:6a:41:80:0a:11:a2:0c:0e:9f:28:09:de:c3:f0:2a:ac:29:
e7:db:b3:e1:de:c0:71:00:b4:1c:a9:bf:ec:a2:0a:5f:ce:43:
f8:f8:ad:a7:20:16:aa:bd:a4:d4:4f:e2:d4:ff:da:fe:d4:29:
42:57:4b:4d:06:b0:3d:d7:f9:8d:61:5a:d8:26:07:cc:c4:9d:
ff:92:44:5c:a6:97:9e:58:2f:07:55:51:e6:5c:0c:d3:44:9e:
d9:b3:7c:03:18:a5:10:fa:b1:70:96:75:0f:9e:51:62:40:a1:
18:2f:84:e9:ed:ae:93:f4:d2:1b:3e:15:80:37:2c:b6:7b:f3:
60:c3:38:77:4d:a8:2c:06:9b:e3:e6:4b:d4:65:8d:dc:dc:1f:
f5:f3:1d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:15 2026 by rpki-client