Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier: 3F+RePECL2V2+5oE0SaBJODdIyUR5f0tMIb1peL/I+E=
Subject key identifier: 80:D8:F6:E9:01:58:97:C6:78:E5:8B:6B:28:95:6B:09:47:B4:6D:B0
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 019CACEB587A38435B6B292189D25DDC84D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number: 11FA
Signing time: Mon 02 Mar 2026 05:00:30 +0000
Manifest this update: Mon 02 Mar 2026 05:00:30 +0000
Manifest next update: Tue 03 Mar 2026 05:00:30 +0000
Files and hashes: 1: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: ddxtnB6j45wdLX1l3BfJU8DAlTLKCeXM7ydylbC967s=)
2: wsRYfWg6DsSzH9Q3tVso7U8el9Q.roa (hash: Xq2nLBLB6mAPwQgJf30OZP4onb0gGELFmiDalFNQA4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:58:7a:38:43:5b:6b:29:21:89:d2:5d:dc:84:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Mar 2 05:00:30 2026 GMT
Not After : Mar 3 05:00:30 2026 GMT
Subject: CN=80d8f6e9015897c678e58b6b28956b0947b46db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:69:cb:53:a6:aa:f2:58:37:97:af:0b:50:
a9:89:af:ae:b2:eb:a4:56:b2:a1:8d:47:a6:83:26:
68:4a:72:ef:30:48:4f:a5:56:50:b6:ed:c3:6f:87:
e5:a5:f9:08:16:60:92:1f:98:7d:0c:e7:b2:b5:36:
27:1c:95:c9:c6:d3:1e:1a:4c:10:7c:ac:1d:d4:54:
51:01:49:ed:9a:08:11:f1:24:d0:36:2c:7f:fe:46:
16:76:b6:49:89:13:15:49:ef:2d:e2:8c:53:18:0c:
1a:d7:78:18:e8:83:e2:67:93:bc:14:39:39:82:48:
88:e5:13:f3:51:3e:9b:d9:60:a2:f6:e6:a2:07:30:
75:44:ce:09:49:f2:63:a1:d9:6a:de:7e:0f:7f:6d:
bb:c0:7b:88:4b:24:be:f8:66:e8:a7:1d:89:53:99:
48:de:cb:0b:5a:fe:04:5e:71:f7:2c:ba:c2:44:18:
e3:d1:1b:65:7b:e4:54:d2:f4:0d:81:76:21:f8:f9:
bb:8d:64:67:fb:b1:41:8c:43:e7:1d:91:2e:ce:31:
a4:0e:1a:58:a8:bf:a5:1c:90:37:47:74:f7:49:1c:
88:e6:47:d9:6a:95:73:f2:a4:97:fb:ee:89:25:4c:
93:2b:44:54:63:96:64:b1:0c:73:a1:fe:c5:ee:3c:
67:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D8:F6:E9:01:58:97:C6:78:E5:8B:6B:28:95:6B:09:47:B4:6D:B0
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:76:6a:0b:fd:bb:23:2a:a3:81:b7:a2:cd:05:23:34:ed:ab:
d9:d3:aa:5c:ac:b0:61:11:23:87:d5:ba:74:4d:88:92:1c:84:
6c:41:8c:d2:f0:4b:da:c3:1f:6a:71:ae:a8:c1:88:fa:e5:69:
10:04:6e:94:2c:e3:2b:d8:79:43:f4:41:df:97:19:97:e0:de:
89:3f:bd:09:95:d7:17:07:89:09:8c:f9:09:61:94:92:79:e5:
df:ce:04:08:d1:a6:e0:c9:f8:df:ac:92:1c:24:b6:97:bb:b7:
35:7b:88:fb:cc:74:eb:01:fc:9c:fa:ee:d8:86:9d:fd:31:a0:
df:67:98:e7:c7:e9:26:f1:c8:0a:14:fa:84:d1:f9:0b:fb:98:
56:f8:51:21:30:0f:55:37:ad:96:f0:1b:15:f7:40:77:56:58:
d0:67:22:30:77:03:4f:48:88:0c:d1:da:c0:37:2a:4d:f1:ca:
1d:03:be:64:f3:b0:9a:79:83:3a:b5:2b:5f:40:1d:15:d7:ac:
34:d4:63:66:5f:24:64:21:db:e9:7e:86:00:18:3a:d3:af:13:
18:7d:67:82:fc:d0:82:f4:3e:a3:f8:64:33:c1:38:0b:01:3d:
95:56:f1:70:c3:85:38:8a:25:3a:83:80:41:ef:e6:e8:49:60:
40:25:8c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:21 2026 by rpki-client