Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier: Yb/I887rSzB3W5/1GVCax9TSWT6auPJ5FlmKRa9ad2Y=
Subject key identifier: 8A:2E:52:C1:D8:74:B7:D8:00:8A:C3:47:0C:AB:4A:B7:F1:50:D8:9B
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer: /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial: 019CAB6B1975156186C359547182BE819A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number: 0FD0
Signing time: Sun 01 Mar 2026 22:00:48 +0000
Manifest this update: Sun 01 Mar 2026 22:00:48 +0000
Manifest next update: Mon 02 Mar 2026 22:00:48 +0000
Files and hashes: 1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: 8zFzW9gK7dNLu+kIFKo/kbR+xgALt5aLnornz81UAfI=)
2: ZHDfzOd0Vs1cFH4Cds3NQzXm5e0.roa (hash: b2Z3qDf5qe3MjesJLnqAMi8pQaoBZLbH5mVHFy7vu6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:19:75:15:61:86:c3:59:54:71:82:be:81:9a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Validity
Not Before: Mar 1 22:00:48 2026 GMT
Not After : Mar 2 22:00:48 2026 GMT
Subject: CN=8a2e52c1d874b7d8008ac3470cab4ab7f150d89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:75:21:28:2b:71:30:65:be:24:0c:b2:be:
42:ab:82:26:8b:14:d7:97:2c:6b:e5:2b:c7:62:89:
89:09:ec:93:b4:f2:99:be:b5:e2:3f:c7:7c:bc:45:
6e:b1:8d:ea:45:48:9b:1f:4d:65:de:10:25:02:d9:
3e:b3:21:8f:ee:82:5f:2f:2d:d7:07:7b:24:66:49:
99:6b:11:9f:6b:ff:31:5d:4c:00:88:5b:9f:e8:79:
16:50:41:cd:9f:15:23:b7:62:bb:2f:70:e6:dd:41:
84:1e:ce:de:c1:9d:8f:ef:a2:45:78:7b:49:e4:ba:
47:a1:62:82:ce:52:80:4a:b0:f4:1b:b6:17:09:b8:
e5:34:11:ac:4b:b9:fa:b3:b8:69:8e:47:2a:e7:e6:
1b:7e:72:31:e2:14:bf:c1:22:84:ca:86:a3:c2:af:
d6:19:c2:79:62:2b:9b:59:12:ef:24:a5:f1:6d:05:
dc:81:59:34:64:96:0e:bd:72:ac:ba:fc:30:04:68:
02:dd:72:06:1f:b1:9a:73:79:41:bc:20:7d:71:6c:
58:af:a7:ee:9c:6c:84:87:73:69:3b:c3:eb:f1:29:
e1:62:e1:53:15:a2:da:71:62:7d:f1:fb:00:d7:86:
5e:b9:de:0c:d6:f7:b0:93:97:e0:19:11:be:d7:13:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2E:52:C1:D8:74:B7:D8:00:8A:C3:47:0C:AB:4A:B7:F1:50:D8:9B
X509v3 Authority Key Identifier:
keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ea:3d:5e:f7:30:a4:82:00:54:82:b2:62:4f:d9:ab:ac:93:
0a:86:f6:43:d6:9e:dd:fc:00:eb:04:7e:a5:cb:3b:05:cf:46:
92:45:f3:18:14:9f:d4:76:8b:13:cd:36:82:de:7e:58:4a:69:
eb:66:a7:b3:9a:db:8b:e8:4b:0f:70:44:08:68:02:18:28:d0:
bc:a2:4a:bc:01:dd:d6:fc:8f:03:94:7e:d3:f2:96:e3:f3:d0:
c1:8d:1e:b5:d8:2c:48:d2:76:ec:d4:79:31:55:92:3d:a2:4c:
10:5a:58:20:6f:6d:b2:b9:66:21:96:20:c8:57:2f:33:b3:8e:
23:e9:ec:0c:53:5c:f9:4d:b9:20:32:ce:0a:1b:40:c4:d0:ce:
1c:19:6f:69:b3:9a:4d:4a:f6:fb:b9:5c:0b:9c:b7:a9:3e:94:
e7:29:0e:1a:ec:d5:11:a6:c2:fc:55:c6:89:a7:51:08:a5:28:
a3:55:59:84:b1:14:db:4f:0a:f9:7d:3e:2a:b9:bb:d2:e3:b3:
4d:34:6a:f2:ad:91:22:70:ab:06:1a:76:02:6c:51:03:9b:c6:
ab:4e:e3:04:b9:3c:a6:c0:69:75:4b:c1:10:5a:55:4b:b5:57:
92:f7:b2:e1:80:58:cf:b9:d5:c3:8d:bb:89:7e:b6:f9:ba:83:
c8:ef:84:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyraxl1FWGGw1lUcYK+gZpGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTZhZmM1NGZlNjNlZDE3NDBkNWU4OTZiM2Y1OTFiMTE4
NGY2ZGMwHhcNMjYwMzAxMjIwMDQ4WhcNMjYwMzAyMjIwMDQ4WjAzMTEwLwYDVQQD
Eyg4YTJlNTJjMWQ4NzRiN2Q4MDA4YWMzNDcwY2FiNGFiN2YxNTBkODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCF1ISgrcTBlviQMsr5Cq4ImixTX
lyxr5SvHYomJCeyTtPKZvrXiP8d8vEVusY3qRUibH01l3hAlAtk+syGP7oJfLy3X
B3skZkmZaxGfa/8xXUwAiFuf6HkWUEHNnxUjt2K7L3Dm3UGEHs7ewZ2P76JFeHtJ
5LpHoWKCzlKASrD0G7YXCbjlNBGsS7n6s7hpjkcq5+YbfnIx4hS/wSKEyoajwq/W
GcJ5YiubWRLvJKXxbQXcgVk0ZJYOvXKsuvwwBGgC3XIGH7Gac3lBvCB9cWxYr6fu
nGyEh3NpO8Pr8SnhYuFTFaLacWJ98fsA14Zeud4M1vewk5fgGRG+1xOX3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIouUsHYdLfYAIrDRwyrSrfxUNibMB8GA1UdIwQY
MBaAFNeWr8VP5j7RdA1eiWs/WRsRhPbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2Yt
MGE4NjM1OGU5Yzg0LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2YtMGE4NjM1OGU5Yzg0
LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOo9Xvcw
pIIAVIKyYk/Zq6yTCob2Q9ae3fwA6wR+pcs7Bc9GkkXzGBSf1HaLE802gt5+WEpp
62ans5rbi+hLD3BECGgCGCjQvKJKvAHd1vyPA5R+0/KW4/PQwY0etdgsSNJ27NR5
MVWSPaJMEFpYIG9tsrlmIZYgyFcvM7OOI+nsDFNc+U25IDLOChtAxNDOHBlvabOa
TUr2+7lcC5y3qT6U5ykOGuzVEabC/FXGiadRCKUoo1VZhLEU208K+X0+Krm70uOz
TTRq8q2RInCrBhp2AmxRA5vGq07jBLk8psBpdUvBEFpVS7VXkvey4YBYz7nVw427
iX62+bqDyO+Edg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:23 2026 by rpki-client