Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
File: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft (raw, json)
Hash identifier: 8AidOH9JbuOMvc6oSYcMFAYm7mnuvWYYr0zYNGKTcD4=
Subject key identifier: 3B:2D:3A:38:EE:7F:8F:E2:5B:BC:EF:6B:2D:D3:69:B9:82:92:FB:7B
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 01A0C2FACBA3B23C763EAF4DE0592AE9DDD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
Manifest number: 0DC9
Signing time: Mon 21 Sep 2026 08:00:11 +0000
Manifest this update: Mon 21 Sep 2026 08:00:11 +0000
Manifest next update: Tue 22 Sep 2026 08:00:11 +0000
Files and hashes: 1: 1vE6-KH4MdU7N2hv_um52mZD9OU.roa (hash: F9xU+2/qqKu1d965ooJJSZMmafwKTsHI7SAoZJI74E8=)
2: APfc6JNEU6PdULzFR5BxZMOlk6o.roa (hash: Hd78Iessw8olpkO1cT25elJbp1Ay+8DdMA34bYWrxMs=)
3: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl (hash: f/IqF/PomSA+e6rc/SjoGBPHt7y4EJHI1NhJnu4fwaw=)
4: DELZK5MwczuVxzj3X4of5HLO9Vw.roa (hash: GLmFQqmMgF4LsrUkccEanCYe2QvwLzSjgMEN7Qp7IPs=)
5: L9GldWcZhP-VtwQ-IrVBJjRxbvQ.roa (hash: i/vLhAVFm6Bpc/WiiZN81LZdAjQFDptqMqTGBS6saY4=)
6: MO2X-hKSVMmkU2wdt5M6rkMSJsQ.roa (hash: qgMxb6qJVo4sk1tLNRwm1PF/2ClIOldHiE0/SLkAAbQ=)
7: frbnQVPA6AMYX2oD_gTcyZulwfY.roa (hash: N+i+LJivHuJoPXNh9pH2cdBw0saTiGMUT1bVhtTAkgs=)
8: pttNsriY8yChB9BrtVjJhNIJyPY.roa (hash: tXY2XaK++NV5rGr1J0Fs5zNa7PQ/vWbv79WLgy93nbY=)
9: z_HTT3a31vAkFtPvUQtcTev0iQU.roa (hash: +OTmOuEmOD6LWIpLkfhzeYNBT0QjMtJvvZDBWFxGkTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fa:cb:a3:b2:3c:76:3e:af:4d:e0:59:2a:e9:dd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Sep 21 08:00:11 2026 GMT
Not After : Sep 22 08:00:11 2026 GMT
Subject: CN=3b2d3a38ee7f8fe25bbcef6b2dd369b98292fb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:09:5d:2b:b3:c6:f2:5f:d5:9e:f4:69:b5:7d:
31:02:82:7c:12:52:b9:fa:f0:bf:ff:f0:0f:56:e3:
45:76:1e:3b:9f:c1:1d:27:14:ae:ea:2a:0f:fb:9a:
b0:bd:fd:4c:a5:98:6e:bf:d5:66:77:af:cb:23:d0:
87:fd:7c:6b:d9:ba:db:e1:e0:4f:3d:8e:77:be:f6:
65:b2:2a:c7:91:a7:bd:20:4f:bb:03:e3:74:5a:67:
da:4e:fd:77:a5:68:53:cd:ee:1f:b2:85:e4:ad:bc:
ea:cd:9f:6e:1c:aa:ae:b2:e0:35:27:0b:fc:4c:a5:
1d:56:e4:dd:a8:43:0f:de:50:45:a5:f5:3a:f5:76:
cd:18:30:9c:1a:51:87:8d:a8:ae:01:ea:cb:60:2a:
be:fa:ba:89:41:31:d7:42:2c:81:d7:6a:6f:c7:01:
b0:8d:73:34:84:07:6e:05:ee:bf:9d:fa:78:3f:c0:
14:fb:e1:ec:5f:83:c8:d8:a4:e4:66:4c:ca:3c:62:
2f:c5:ac:93:69:0c:a8:f8:90:cc:05:31:16:cc:00:
91:a9:06:8f:29:ff:2b:71:f5:e5:96:99:77:3a:59:
24:e3:35:c7:a1:7e:6b:8b:4c:49:2d:b6:83:b5:fd:
87:a5:e5:77:74:91:91:b2:83:92:a8:af:28:bc:36:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2D:3A:38:EE:7F:8F:E2:5B:BC:EF:6B:2D:D3:69:B9:82:92:FB:7B
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2b:b5:e8:a9:59:10:f3:2c:64:27:84:33:7f:16:18:0a:03:
d9:51:64:54:34:a2:13:95:09:1d:fc:43:c8:49:82:db:d2:79:
2e:bf:e0:03:44:95:8b:e2:d0:ca:10:28:99:67:97:3d:e0:53:
3e:94:0e:c1:07:bd:51:bb:36:67:c4:c3:b2:57:a9:df:25:6b:
bb:47:a7:80:e9:e3:d1:46:0c:54:e9:c0:f7:9c:5b:fc:4c:46:
3d:c1:a6:df:c2:0b:d4:cf:1c:d9:d2:33:ad:2d:b8:f3:41:0b:
0b:11:55:e4:d8:4d:06:41:22:80:81:d4:f3:55:e1:fe:ed:92:
a9:e9:fb:7a:93:50:84:76:07:16:c0:b4:a1:45:16:64:6a:1f:
4d:d1:6a:8c:ba:76:45:52:d6:25:97:f4:0c:c9:0b:2f:0b:03:
1c:42:a9:61:5f:d6:64:2c:15:fc:9e:28:e5:af:c2:41:5e:e7:
27:84:16:17:ce:78:35:b6:7f:63:fb:24:36:3f:6d:a0:e5:88:
04:c6:bf:90:3c:7c:94:dd:5b:00:33:84:d6:66:f6:ea:d5:54:
fe:d7:40:97:e0:43:e3:ba:a1:24:0e:2c:51:69:74:23:74:4d:
9c:1b:41:53:7a:8b:be:31:15:6e:ad:63:54:ae:76:e0:52:98:
b7:ec:4e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:49:40 2026 by rpki-client