Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
File: AVkheESIrdmgVmH_EXh-x1TmBeU.mft (raw, json)
Hash identifier: zwgyKOZavv+BSOcgz8CzcnN6inwHzH+e+dg3ZcjS3PM=
Subject key identifier: 9E:5D:02:2F:0C:17:FD:72:B0:41:BA:FE:A2:C0:93:85:16:5A:47:29
Authority key identifier: 01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
Certificate issuer: /CN=015921784488add9a05661ff11787ec754e605e5
Certificate serial: 019DA29D155EADCBC862BE2CE30823B37BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
Manifest number: 18C3
Signing time: Sat 18 Apr 2026 22:01:36 +0000
Manifest this update: Sat 18 Apr 2026 22:01:36 +0000
Manifest next update: Sun 19 Apr 2026 22:01:36 +0000
Files and hashes: 1: AVkheESIrdmgVmH_EXh-x1TmBeU.crl (hash: 3pOI+m/sD89nbXan4z1Jyri2ERIZZDiPPZWpu+wXneU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9d:15:5e:ad:cb:c8:62:be:2c:e3:08:23:b3:7b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015921784488add9a05661ff11787ec754e605e5
Validity
Not Before: Apr 18 22:01:36 2026 GMT
Not After : Apr 19 22:01:36 2026 GMT
Subject: CN=9e5d022f0c17fd72b041bafea2c09385165a4729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:21:74:89:a7:8a:31:fd:2a:a5:f6:bc:7c:
52:bd:4c:36:a6:e6:c2:cc:35:a7:24:14:02:30:af:
2b:2b:a2:46:76:cd:d3:10:34:4e:64:88:6c:87:e7:
e3:eb:ba:5a:7c:28:9c:ae:bd:81:79:21:de:9b:38:
c0:95:96:0e:ce:71:dd:52:bc:a1:28:e3:b9:46:59:
7b:33:a0:68:3c:09:e5:30:a0:44:e5:20:53:d1:e8:
17:e3:da:2b:16:59:be:b1:3b:fc:c2:41:6d:c2:50:
68:58:15:3b:0a:8f:4a:46:db:c0:06:b5:b1:4e:b9:
f1:74:d9:62:86:aa:d5:8e:92:a5:7f:86:c7:e0:32:
3c:12:b0:dc:af:ae:e9:29:8c:31:74:94:e7:b7:85:
e1:36:66:84:66:a9:d1:79:7e:4c:35:16:2b:df:e5:
6b:b6:96:64:f0:d9:91:21:7c:60:cf:d8:9f:2e:0f:
9c:76:49:1d:03:ae:a7:b8:40:7d:f5:cf:f1:c9:ae:
c9:4a:61:c9:43:d2:58:15:53:08:3b:da:28:2c:42:
73:d1:5c:05:05:da:74:7c:8b:f8:d4:b9:30:5f:1f:
99:fb:5b:f6:e4:43:c2:02:98:51:0a:13:97:22:98:
30:0e:03:50:0c:d0:ac:a2:e9:53:76:69:9e:8c:40:
f4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5D:02:2F:0C:17:FD:72:B0:41:BA:FE:A2:C0:93:85:16:5A:47:29
X509v3 Authority Key Identifier:
keyid:01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:41:3e:8f:05:50:9f:d8:18:09:40:2d:91:5f:78:eb:3f:5c:
32:54:e7:5c:ff:ed:fa:fd:85:bc:98:df:c5:53:2b:8a:8c:af:
9c:7d:35:f9:06:0c:2b:6f:68:1f:3b:c2:3e:e0:c2:67:94:d9:
c0:12:e2:b1:28:cf:13:a3:01:bd:68:56:fe:be:a6:5e:32:9c:
d0:a4:e4:07:44:86:55:f6:bd:ce:90:b2:3f:49:5f:ec:3b:91:
01:f3:3d:bc:ba:37:96:22:07:43:1c:a9:d2:6d:d4:ad:a7:17:
e5:32:dc:a2:d9:54:be:10:37:1a:c7:94:bf:dc:75:af:df:0a:
a0:bf:1a:1d:15:1f:d4:bf:3f:3e:2f:bf:a3:0c:a3:34:4b:3e:
ef:fd:b8:c4:51:4b:08:dc:af:94:c0:b7:e8:11:c9:3a:30:01:
a8:77:00:40:22:5d:a2:94:f1:aa:bb:53:4e:1e:22:b1:2f:ed:
4c:99:89:b6:37:4c:69:7a:a1:6c:50:90:14:34:f5:c2:b5:ec:
53:c8:df:15:31:0e:ca:af:68:a7:9d:68:9e:67:86:4f:ba:0c:
e7:54:16:2b:b5:32:a0:3f:98:dc:fb:4e:30:4c:a6:69:74:c7:
18:11:22:ee:6f:cb:1f:33:89:ef:c7:b7:e5:e1:2e:d5:6f:01:
99:e1:d2:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2inRVercvIYr4s4wgjs3uzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNTkyMTc4NDQ4OGFkZDlhMDU2NjFmZjExNzg3ZWM3NTRl
NjA1ZTUwHhcNMjYwNDE4MjIwMTM2WhcNMjYwNDE5MjIwMTM2WjAzMTEwLwYDVQQD
Eyg5ZTVkMDIyZjBjMTdmZDcyYjA0MWJhZmVhMmMwOTM4NTE2NWE0NzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypAhdImnijH9KqX2vHxSvUw2pubC
zDWnJBQCMK8rK6JGds3TEDROZIhsh+fj67pafCicrr2BeSHemzjAlZYOznHdUryh
KOO5Rll7M6BoPAnlMKBE5SBT0egX49orFlm+sTv8wkFtwlBoWBU7Co9KRtvABrWx
TrnxdNlihqrVjpKlf4bH4DI8ErDcr67pKYwxdJTnt4XhNmaEZqnReX5MNRYr3+Vr
tpZk8NmRIXxgz9ifLg+cdkkdA66nuEB99c/xya7JSmHJQ9JYFVMIO9ooLEJz0VwF
Bdp0fIv41LkwXx+Z+1v25EPCAphRChOXIpgwDgNQDNCsoulTdmmejED0ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5dAi8MF/1ysEG6/qLAk4UWWkcpMB8GA1UdIwQY
MBaAFAFZIXhEiK3ZoFZh/xF4fsdU5gXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVZraGVFU0lyZG1nVm1IX0VYaC14MVRtQmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xMjlkNjItZDFjOC00ODQyLTk1NDkt
OGE5MTg0MDBmMjYwLzEvQVZraGVFU0lyZG1nVm1IX0VYaC14MVRtQmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8xMjlkNjItZDFjOC00ODQyLTk1NDktOGE5MTg0MDBmMjYw
LzEvQVZraGVFU0lyZG1nVm1IX0VYaC14MVRtQmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0E+jwVQ
n9gYCUAtkV946z9cMlTnXP/t+v2FvJjfxVMrioyvnH01+QYMK29oHzvCPuDCZ5TZ
wBLisSjPE6MBvWhW/r6mXjKc0KTkB0SGVfa9zpCyP0lf7DuRAfM9vLo3liIHQxyp
0m3UracX5TLcotlUvhA3GseUv9x1r98KoL8aHRUf1L8/Pi+/owyjNEs+7/24xFFL
CNyvlMC36BHJOjABqHcAQCJdopTxqrtTTh4isS/tTJmJtjdMaXqhbFCQFDT1wrXs
U8jfFTEOyq9op51onmeGT7oM51QWK7UyoD+Y3PtOMEymaXTHGBEi7m/LHzOJ78e3
5eEu1W8BmeHSkA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:52 2026 by rpki-client