Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier: nRuK/2D6+HwhnmIjW4eOMPbneDSv5bPumkuu6xPUuNM=
Subject key identifier: DA:86:F4:A0:EA:0F:CB:71:AE:2D:48:97:8E:E3:7F:34:F8:A2:7C:4E
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 01A1E0957D4789D16058452AF30463F1F095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number: 14AC
Signing time: Sun 15 Nov 2026 19:00:55 +0000
Manifest this update: Sun 15 Nov 2026 19:00:55 +0000
Manifest next update: Mon 16 Nov 2026 19:00:55 +0000
Files and hashes: 1: 7bTTYk_Oq_ZApCkkIYsewzN1n20.roa (hash: WwMfICexdyPcR8HhkOfl7+rmvQQnanKC9rFr0nbj7UI=)
2: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: 2+P58/8nbpLQp12Hq+nAWqpfNilXVABwzkQnIC1K5kE=)
3: wsRYfWg6DsSzH9Q3tVso7U8el9Q.roa (hash: Xq2nLBLB6mAPwQgJf30OZP4onb0gGELFmiDalFNQA4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:95:7d:47:89:d1:60:58:45:2a:f3:04:63:f1:f0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Nov 15 19:00:55 2026 GMT
Not After : Nov 16 19:00:55 2026 GMT
Subject: CN=da86f4a0ea0fcb71ae2d48978ee37f34f8a27c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:30:69:42:3a:d4:88:1f:d0:f0:03:86:c4:
81:84:cb:8c:3c:10:82:7a:3e:6c:27:ce:8a:33:f6:
16:68:80:65:cc:16:31:d0:86:16:6e:5e:bd:3a:98:
4e:bc:ab:9a:5e:a9:d5:43:7d:9e:01:8a:a2:83:24:
1a:ff:7b:94:e3:4a:ee:9c:0e:cc:5b:44:5e:74:6f:
1f:cd:2c:45:8c:2c:b3:e8:a8:be:b9:3a:e5:c4:ac:
cc:69:62:41:6c:2b:7e:e0:aa:a7:23:86:1f:a2:83:
23:a0:74:76:d6:0e:90:94:ae:60:51:cb:a5:de:7c:
11:c8:18:0b:a2:65:76:50:14:2a:a5:86:bd:96:ba:
da:6e:50:bc:6a:6a:8e:74:48:34:9e:07:0d:e3:a6:
84:ec:be:b2:b0:c0:6b:a0:55:ba:d8:29:48:1d:bd:
a4:b0:2b:6c:ea:e1:a6:38:86:78:bd:ea:d7:32:1d:
c4:47:14:f0:b0:02:17:10:f6:ea:df:91:15:0a:8c:
c3:92:5b:45:a3:12:0e:cf:9c:29:9c:be:92:9f:d4:
19:d8:32:f3:ca:bd:ed:a1:40:6d:dc:d7:20:e8:bc:
6e:1f:ed:88:a7:35:b0:5c:51:46:33:0d:e0:6b:19:
f5:55:31:92:20:77:6d:5c:35:79:9e:1e:8f:5f:24:
6a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:86:F4:A0:EA:0F:CB:71:AE:2D:48:97:8E:E3:7F:34:F8:A2:7C:4E
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:35:58:1d:43:2d:e9:19:5f:a3:e1:d4:a9:cc:d5:7c:4e:6a:
f1:5e:f9:58:69:74:32:db:9c:5e:f5:9a:ff:7e:79:ac:f8:24:
70:e1:a7:2f:82:e4:3c:05:7d:4b:db:9d:f5:3c:e4:0a:6c:79:
41:ab:1b:ce:28:30:85:cd:b0:17:c0:23:44:d7:52:74:f2:b7:
ec:20:6c:66:1f:77:d6:19:12:1b:39:c9:75:e5:3b:a4:3c:7b:
01:7d:68:b8:bc:e8:84:5e:4a:97:ca:72:ed:47:35:44:89:f3:
ab:63:82:36:2a:09:f0:38:57:1a:09:ac:23:75:ab:0b:bc:0a:
3f:53:a6:3c:9d:27:56:9f:c1:c0:0e:9b:9d:89:db:18:40:88:
b6:ef:b8:bf:23:65:89:c9:27:02:83:4e:35:7d:4d:1a:66:a3:
a2:d6:43:9e:e5:a1:7b:80:16:75:f4:51:27:7b:56:5f:c3:56:
e6:6b:52:03:95:dd:2f:2f:a7:f0:a2:a4:b7:72:5e:80:3f:cc:
80:96:cb:d3:29:20:68:a4:ba:d2:50:33:11:f2:c6:19:4e:fc:
4e:fb:9a:b0:30:a4:0d:5f:77:42:2d:8b:f5:af:89:29:f0:90:
ef:c0:a7:91:21:b8:aa:67:70:2a:49:6a:47:df:ea:43:00:49:
03:87:d7:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHglX1HidFgWEUq8wRj8fCVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMzFiODdlOTFlYTI3MTA0NmQzMTk5NWU3YTZjMDM4YmYx
YjE0N2MwHhcNMjYxMTE1MTkwMDU1WhcNMjYxMTE2MTkwMDU1WjAzMTEwLwYDVQQD
EyhkYTg2ZjRhMGVhMGZjYjcxYWUyZDQ4OTc4ZWUzN2YzNGY4YTI3YzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx84waUI61Igf0PADhsSBhMuMPBCC
ej5sJ86KM/YWaIBlzBYx0IYWbl69OphOvKuaXqnVQ32eAYqigyQa/3uU40runA7M
W0RedG8fzSxFjCyz6Ki+uTrlxKzMaWJBbCt+4KqnI4YfooMjoHR21g6QlK5gUcul
3nwRyBgLomV2UBQqpYa9lrrablC8amqOdEg0ngcN46aE7L6ysMBroFW62ClIHb2k
sCts6uGmOIZ4verXMh3ERxTwsAIXEPbq35EVCozDkltFoxIOz5wpnL6Sn9QZ2DLz
yr3toUBt3Ncg6LxuH+2IpzWwXFFGMw3gaxn1VTGSIHdtXDV5nh6PXyRqUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqG9KDqD8txri1Il47jfzT4onxOMB8GA1UdIwQY
MBaAFAMxuH6R6icQRtMZleemwDi/GxR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYTI0ZjYtYzVhMC00MGJmLWFiYjYt
OGRhNTM3M2E2YTZkLzEvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xYTI0ZjYtYzVhMC00MGJmLWFiYjYtOGRhNTM3M2E2YTZk
LzEvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvjVYHUMt
6Rlfo+HUqczVfE5q8V75WGl0MtucXvWa/355rPgkcOGnL4LkPAV9S9ud9TzkCmx5
Qasbzigwhc2wF8AjRNdSdPK37CBsZh931hkSGznJdeU7pDx7AX1ouLzohF5Kl8py
7Uc1RInzq2OCNioJ8DhXGgmsI3WrC7wKP1OmPJ0nVp/BwA6bnYnbGECItu+4vyNl
icknAoNONX1NGmajotZDnuWhe4AWdfRRJ3tWX8NW5mtSA5XdLy+n8KKkt3JegD/M
gJbL0ykgaKS60lAzEfLGGU78TvuasDCkDV93Qi2L9a+JKfCQ78CnkSG4qmdwKklq
R9/qQwBJA4fXyg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:25:46 2026 by rpki-client