Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier: fBmJ09CXX9MiwJUxAt1asZvT9QtnlEfJIlTAQEiE0gI=
Subject key identifier: 7D:ED:0A:04:65:78:B4:DE:1F:EE:FB:0A:0E:F4:A3:C1:BA:65:77:91
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 019FA8D034EF2603CA160D136F4329944ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number: 1386
Signing time: Tue 28 Jul 2026 13:00:45 +0000
Manifest this update: Tue 28 Jul 2026 13:00:45 +0000
Manifest next update: Wed 29 Jul 2026 13:00:45 +0000
Files and hashes: 1: 7bTTYk_Oq_ZApCkkIYsewzN1n20.roa (hash: WwMfICexdyPcR8HhkOfl7+rmvQQnanKC9rFr0nbj7UI=)
2: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: A9K+8pSEXBCPTFDStLDT/bgVQs7JoZzwbCPzojrgmjY=)
3: wsRYfWg6DsSzH9Q3tVso7U8el9Q.roa (hash: Xq2nLBLB6mAPwQgJf30OZP4onb0gGELFmiDalFNQA4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:34:ef:26:03:ca:16:0d:13:6f:43:29:94:4e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Jul 28 13:00:45 2026 GMT
Not After : Jul 29 13:00:45 2026 GMT
Subject: CN=7ded0a046578b4de1feefb0a0ef4a3c1ba657791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:8e:07:4c:d8:9a:22:e5:8a:86:b2:d0:04:
2c:a9:6a:c5:6d:d6:b1:00:b0:bf:4e:99:f0:1e:91:
d3:76:e8:61:45:53:90:03:c7:bb:a9:e4:6e:d6:e1:
b9:08:15:f7:4f:37:06:60:b8:59:f7:dc:6e:06:f4:
ce:7f:66:f5:ad:0a:dc:00:2d:cb:e4:6a:75:29:13:
18:54:e0:83:8d:82:ed:56:f8:1b:1c:92:a4:62:53:
b1:61:01:62:0a:51:7d:83:84:01:5e:8a:1b:14:71:
12:41:3a:14:a7:dd:92:51:ba:54:9f:47:a6:32:2f:
5c:1c:d0:eb:07:94:5a:80:1c:d4:4a:1d:90:4a:3e:
ca:e4:95:17:43:75:e3:ef:77:e5:cf:8f:9b:fa:8b:
88:22:81:04:cc:40:c2:23:b4:20:63:cc:ff:55:44:
0d:87:46:40:4c:1c:d2:79:5c:80:30:39:09:70:db:
e5:83:38:c1:01:ce:dd:39:e7:6b:d0:ba:33:0d:02:
82:de:e5:31:15:2f:45:26:db:f5:20:f3:cb:a1:c9:
67:75:75:5a:c0:36:b5:7a:37:af:07:e2:ed:b9:d5:
ea:d9:13:fc:e6:ae:c4:c2:66:4f:8c:31:a6:15:15:
a1:51:c4:99:9d:02:ac:6b:56:1e:60:b3:46:77:d4:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:ED:0A:04:65:78:B4:DE:1F:EE:FB:0A:0E:F4:A3:C1:BA:65:77:91
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2e:6a:50:ff:ba:73:b7:ef:42:2e:0c:c8:0c:b4:f9:c9:fd:
1a:e2:26:44:de:b2:56:1b:6b:37:94:c5:8c:7d:8d:81:e1:ed:
8d:b6:8a:7c:11:b2:02:ef:f7:a3:05:a9:d8:ba:16:57:e5:db:
53:4a:ae:e6:87:71:26:d3:d6:e7:57:4b:79:85:15:71:80:e3:
bc:73:3d:c2:68:b8:42:f3:32:41:a4:fa:22:17:aa:de:b4:fb:
f1:ae:3a:13:4c:8b:61:cc:94:0b:e9:17:89:e2:bd:ed:e8:75:
af:45:bf:a4:9b:bf:ef:47:11:6e:ef:3e:7f:ee:20:99:42:c9:
b4:0b:c9:40:06:71:4f:82:9a:20:19:5e:0e:df:9b:e7:1c:8b:
12:a2:77:fc:bc:a7:b6:ba:cf:55:ad:98:37:ab:93:88:1b:28:
7e:79:33:35:16:fc:80:bb:ca:47:87:cc:78:62:1f:cf:3f:75:
ee:8c:a9:37:24:f4:75:4c:e9:0b:0a:fa:12:1b:d2:5e:98:61:
21:6b:c7:38:bd:17:e5:e9:33:f4:38:af:92:04:74:88:f5:e0:
75:4d:43:55:fb:52:9e:4d:c1:90:7c:78:57:92:e7:a7:78:1c:
72:ba:93:1c:14:c5:2c:44:0f:07:bd:45:90:c7:60:20:1a:e9:
39:1f:c4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:47 2026 by rpki-client