Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.mft
File: 1-azwLBziBnz6SspNf9HLADf94vI.mft (raw, json)
Hash identifier: W8hLIEWFVQ4RCu04RoNDLQ/9QPBOKkHcidcnKfpOy3M=
Subject key identifier: 89:5A:8D:62:B7:5F:4A:C6:1D:BF:95:7D:0C:D8:F5:FF:6B:E1:C7:72
Authority key identifier: F9:AC:F0:2C:1C:E2:06:7C:FA:4A:CA:4D:7F:D1:CB:00:37:FD:E2:F2
Certificate issuer: /CN=f9acf02c1ce2067cfa4aca4d7fd1cb0037fde2f2
Certificate serial: 01A0CA0FA1FE182BA466F4198CC2ADB3CFDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-azwLBziBnz6SspNf9HLADf94vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.mft
Manifest number: 98
Signing time: Tue 22 Sep 2026 17:00:16 +0000
Manifest this update: Tue 22 Sep 2026 17:00:16 +0000
Manifest next update: Wed 23 Sep 2026 17:00:16 +0000
Files and hashes: 1: 1-azwLBziBnz6SspNf9HLADf94vI.crl (hash: 0Nzuo6GwepemNU0wWO4YL/O5HQzopc05juP9+LpEUvM=)
2: Jszha3pRavrqhLYF9llULjRDVPA.roa (hash: sdO9tDDPhGXLEWym/ewpstRJHKQA4MEXZOgnSWY5UnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-azwLBziBnz6SspNf9HLADf94vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:a1:fe:18:2b:a4:66:f4:19:8c:c2:ad:b3:cf:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9acf02c1ce2067cfa4aca4d7fd1cb0037fde2f2
Validity
Not Before: Sep 22 17:00:16 2026 GMT
Not After : Sep 23 17:00:16 2026 GMT
Subject: CN=895a8d62b75f4ac61dbf957d0cd8f5ff6be1c772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:92:21:54:06:fc:4b:44:41:e7:41:bb:45:
59:48:cc:9f:53:29:41:db:2a:02:71:75:ae:29:13:
cf:6f:ea:a7:2c:55:99:89:4b:3a:b7:6a:06:af:2e:
24:a0:86:18:d1:88:51:3e:88:8a:48:d8:e7:cd:72:
f3:22:4c:91:b8:28:3a:58:aa:c7:4e:53:c7:2f:d1:
23:f4:ce:00:0e:e4:a5:3d:79:9e:58:a6:e4:56:ad:
d2:95:d1:ba:c1:62:8f:d1:a5:50:22:7a:46:af:ba:
bc:f5:15:90:24:44:e9:fa:37:87:2e:7b:74:8f:8f:
08:ec:24:88:3c:03:80:e8:b7:c9:48:26:2c:82:8f:
d8:a8:34:1b:88:0a:15:83:fb:18:bc:43:ba:d8:11:
2c:66:63:00:80:0f:6b:0d:ca:66:7d:18:56:9c:7a:
d0:8a:ab:34:a7:6c:d2:f5:58:73:c2:2f:19:f9:bb:
e7:5b:74:3f:7d:d9:0e:1a:a9:a6:67:7b:6f:62:3c:
9d:88:22:65:a6:d5:88:f4:3b:f1:d7:c0:68:af:4e:
cd:14:c6:2f:ac:4b:89:fc:38:7d:a7:13:c6:2b:89:
cc:39:cc:bb:f2:b4:9b:63:e8:81:a1:11:9f:83:29:
a1:c0:10:6a:96:2d:72:0a:e6:bd:82:9b:7a:4e:db:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5A:8D:62:B7:5F:4A:C6:1D:BF:95:7D:0C:D8:F5:FF:6B:E1:C7:72
X509v3 Authority Key Identifier:
keyid:F9:AC:F0:2C:1C:E2:06:7C:FA:4A:CA:4D:7F:D1:CB:00:37:FD:E2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-azwLBziBnz6SspNf9HLADf94vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:15:bd:22:ba:25:ed:3f:a3:02:c8:01:2a:3c:0d:fc:2c:a7:
45:dc:a6:13:fd:50:ad:d5:9b:38:fa:33:94:af:1e:42:a0:58:
04:fc:ef:6a:bd:7a:eb:d0:3b:fa:1d:62:98:8f:48:60:78:cf:
db:a1:36:cd:c3:2e:ec:f5:2f:58:00:05:1a:d1:0f:5b:ac:66:
20:eb:f3:d9:60:cb:b1:8b:87:7d:90:ca:da:76:a3:5a:14:6e:
db:a4:0b:54:f9:cb:6d:47:51:79:74:d4:04:f6:ae:33:21:6e:
fe:f9:ec:11:76:1b:05:92:d5:17:d5:81:55:a0:ca:a7:c8:43:
5d:4f:ba:66:fc:6c:a3:8a:a3:95:3e:55:73:d6:f5:83:6f:49:
bf:a0:ba:6b:49:92:fd:4a:c6:50:c2:70:2c:f0:85:1d:0f:63:
b2:71:05:90:70:6e:a0:a9:c0:ac:01:94:6f:98:ed:e6:84:6c:
61:3c:51:0a:fa:72:2b:64:e2:9e:9f:b2:26:0d:cc:c1:aa:4d:
c4:1f:b2:50:f3:f6:dc:fa:97:c3:df:c9:8c:39:30:f0:aa:47:
9f:f4:3f:1e:b8:50:c1:db:95:0e:17:c4:1c:48:cd:6d:4b:c5:
b5:89:51:2a:ef:69:3e:b6:9a:24:d0:79:b3:cc:17:2b:7d:e5:
66:73:45:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:13:57 2026 by rpki-client