Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier: sVkRlvQGShUy3FIGCQeT7uzVcW7Ns8HcDPG9nA5afvY=
Subject key identifier: AA:67:49:EB:BC:F6:E2:BA:A9:E9:85:01:06:F4:D7:FB:8E:3D:18:35
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer: /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial: 01A0C9D9633B92AFFC3203FA2785459B1804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number: 11F2
Signing time: Tue 22 Sep 2026 16:01:02 +0000
Manifest this update: Tue 22 Sep 2026 16:01:02 +0000
Manifest next update: Wed 23 Sep 2026 16:01:02 +0000
Files and hashes: 1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: MYrXjlmvhYXMauThvlNjaEK9uLGPDALz+uC7kF4UCXI=)
2: ZHDfzOd0Vs1cFH4Cds3NQzXm5e0.roa (hash: b2Z3qDf5qe3MjesJLnqAMi8pQaoBZLbH5mVHFy7vu6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:63:3b:92:af:fc:32:03:fa:27:85:45:9b:18:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Validity
Not Before: Sep 22 16:01:02 2026 GMT
Not After : Sep 23 16:01:02 2026 GMT
Subject: CN=aa6749ebbcf6e2baa9e9850106f4d7fb8e3d1835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:17:98:9d:22:9e:93:53:d0:4b:4b:e7:9a:
4c:94:72:96:2e:4b:7c:71:ea:ad:92:8a:23:1b:46:
a0:20:04:a8:17:47:b0:c2:bd:8c:83:23:71:6d:29:
52:bf:5f:38:50:58:22:57:48:f2:bd:f7:95:6c:4c:
7f:e1:30:84:71:87:69:6a:72:40:c7:0b:3b:0b:27:
56:71:15:6f:e6:06:e5:02:cc:f3:b2:d5:8d:02:0e:
bb:0f:f6:99:e3:36:3f:50:4d:a1:8f:87:4d:ef:a8:
01:76:a8:7f:5c:66:8c:b5:ba:80:b8:d9:c1:5d:19:
eb:28:1f:87:11:d3:8a:47:75:cb:a8:a8:3f:42:9d:
ec:10:7e:af:55:c6:dd:7f:af:81:50:df:48:b8:9d:
eb:32:f2:a3:31:1e:e4:1c:35:16:04:04:24:23:fd:
37:c8:3f:d4:d7:17:3b:5f:b9:ef:a0:83:7b:6b:0e:
3c:30:ef:5c:26:13:f2:bc:0f:aa:0a:62:83:95:84:
53:3a:8b:75:d4:0a:1f:62:c2:77:12:c2:e1:d6:27:
0a:61:d1:5e:fa:38:f5:50:5f:d9:c2:d1:28:79:48:
cc:7c:a2:d1:20:e6:de:47:5a:98:45:fb:20:03:3d:
1a:43:dd:75:83:c7:49:af:85:98:75:b2:a3:08:29:
cf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:67:49:EB:BC:F6:E2:BA:A9:E9:85:01:06:F4:D7:FB:8E:3D:18:35
X509v3 Authority Key Identifier:
keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c2:0c:e6:8c:4b:73:84:1a:51:a0:43:90:20:64:b9:5e:01:
8f:f0:2a:14:41:ca:b3:e6:f9:c4:fa:ec:dc:d7:29:1c:c4:1f:
a6:bc:83:90:ba:5a:72:1f:70:93:a0:7b:2a:25:db:45:df:3b:
97:bd:9d:43:d9:3a:9c:d1:43:99:34:42:65:64:6e:cb:ec:f1:
f8:c9:92:15:62:b7:04:45:82:7a:0c:01:6d:1d:7a:95:12:3e:
1f:95:1d:51:c9:90:94:e4:3a:0f:9e:c6:26:2a:f2:fb:c3:1a:
71:55:fa:66:9d:9d:75:0f:33:f1:f1:a4:d6:ed:bd:fe:b4:6e:
0e:ec:3d:3b:aa:7f:6d:43:35:b5:dd:ae:5a:a8:4a:d1:57:b5:
ca:33:f0:03:53:c9:95:d9:a9:50:0d:78:b9:a0:85:69:17:70:
75:a2:21:39:07:e0:cd:2d:ce:15:4c:2b:04:3a:39:8e:dc:84:
a1:29:c1:f7:02:fb:b2:ed:a0:66:5b:55:e0:0d:b9:e7:67:30:
50:00:4f:b0:a2:bd:90:94:91:a3:3c:05:dd:40:6f:7b:8d:64:
db:02:2e:b7:30:8c:25:a1:cd:6f:aa:78:21:6e:e6:9c:48:c7:
e7:df:01:a0:d6:77:6a:70:aa:14:c4:b6:49:c9:57:8f:ae:f8:
3b:59:b5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:41:15 2026 by rpki-client