Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
File: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft (raw, json)
Hash identifier: CHYyRn8OrXtx89xWfrrWCUu9BW+x4csM3wjglJvyoCc=
Subject key identifier: 5B:5D:FF:CC:7B:FF:C8:64:29:D2:19:7B:8D:9A:98:01:97:E0:B5:55
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 019CAA58530E71A7048C0598B9B70A606E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
Manifest number: 0BAA
Signing time: Sun 01 Mar 2026 17:00:40 +0000
Manifest this update: Sun 01 Mar 2026 17:00:40 +0000
Manifest next update: Mon 02 Mar 2026 17:00:40 +0000
Files and hashes: 1: 1vE6-KH4MdU7N2hv_um52mZD9OU.roa (hash: F9xU+2/qqKu1d965ooJJSZMmafwKTsHI7SAoZJI74E8=)
2: APfc6JNEU6PdULzFR5BxZMOlk6o.roa (hash: Hd78Iessw8olpkO1cT25elJbp1Ay+8DdMA34bYWrxMs=)
3: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl (hash: f3fZYJjBo7MuIouJaKQpiKEhK6n4AjQGbLCecsflUrM=)
4: DELZK5MwczuVxzj3X4of5HLO9Vw.roa (hash: GLmFQqmMgF4LsrUkccEanCYe2QvwLzSjgMEN7Qp7IPs=)
5: L9GldWcZhP-VtwQ-IrVBJjRxbvQ.roa (hash: i/vLhAVFm6Bpc/WiiZN81LZdAjQFDptqMqTGBS6saY4=)
6: MO2X-hKSVMmkU2wdt5M6rkMSJsQ.roa (hash: qgMxb6qJVo4sk1tLNRwm1PF/2ClIOldHiE0/SLkAAbQ=)
7: frbnQVPA6AMYX2oD_gTcyZulwfY.roa (hash: N+i+LJivHuJoPXNh9pH2cdBw0saTiGMUT1bVhtTAkgs=)
8: pttNsriY8yChB9BrtVjJhNIJyPY.roa (hash: tXY2XaK++NV5rGr1J0Fs5zNa7PQ/vWbv79WLgy93nbY=)
9: z_HTT3a31vAkFtPvUQtcTev0iQU.roa (hash: +OTmOuEmOD6LWIpLkfhzeYNBT0QjMtJvvZDBWFxGkTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:53:0e:71:a7:04:8c:05:98:b9:b7:0a:60:6e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Mar 1 17:00:40 2026 GMT
Not After : Mar 2 17:00:40 2026 GMT
Subject: CN=5b5dffcc7bffc86429d2197b8d9a980197e0b555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:7f:83:51:96:90:a0:af:93:29:83:2b:8b:
5f:54:ce:b1:44:cb:8d:a4:1a:a2:38:85:9a:d5:c6:
eb:90:b0:2f:ae:83:cd:3b:b2:32:43:9b:d8:8a:b8:
da:4e:08:05:dc:5a:c5:0e:31:97:4e:2f:13:18:82:
ca:f5:0c:7a:7a:f9:a8:2f:7b:15:3c:cf:22:bb:b0:
d8:73:54:76:70:59:2b:d0:8c:77:22:b4:0c:a9:eb:
ac:1b:20:07:80:74:5b:02:6e:cd:b2:9c:e3:71:2e:
36:97:96:b1:b0:9b:a7:ca:00:3b:a5:08:b0:a9:16:
61:56:57:ad:7e:b6:28:b0:10:bf:b0:40:eb:e7:41:
88:ff:4c:5b:87:bc:32:19:51:b0:88:e5:83:e6:21:
0e:2f:0d:1c:d1:0c:83:70:0a:bc:a2:bf:e8:f1:78:
bd:cb:57:62:45:d7:49:44:ee:9f:99:5e:58:9c:8b:
7e:b2:b5:c2:c4:31:56:00:34:aa:33:1f:ad:ad:48:
80:78:77:c8:af:2c:8a:31:37:b1:2b:80:bd:11:34:
8f:49:f5:b0:db:30:ee:fa:55:ec:07:5a:3e:99:b2:
21:b9:0d:c4:c3:8e:02:87:ae:60:1a:7c:d7:5c:88:
18:23:89:38:5f:49:e9:90:7c:2c:e5:1a:e4:f6:60:
fc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5D:FF:CC:7B:FF:C8:64:29:D2:19:7B:8D:9A:98:01:97:E0:B5:55
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:06:90:3c:65:15:67:43:01:3d:53:b5:d7:b0:71:3b:64:b6:
9f:cc:66:27:f0:60:67:fa:fc:07:f8:61:6a:5b:1b:5c:52:34:
b8:2f:e3:7a:96:95:38:fc:48:44:18:42:ed:fa:68:57:ef:04:
ab:f5:11:03:b1:7a:fd:23:08:4c:ad:c3:00:7e:12:00:9e:f5:
a0:5a:eb:5f:af:f8:07:6f:25:dd:64:00:67:65:62:e7:02:5d:
51:ab:f4:da:e1:44:f4:21:ee:9e:30:70:eb:12:60:77:30:a6:
23:73:b8:c7:57:52:9e:19:9e:9b:cd:7f:67:57:5d:69:dd:10:
e6:26:9a:69:40:6d:20:7f:93:9c:76:9e:3a:bb:b3:76:ff:a9:
e7:0a:30:b5:99:09:69:94:3a:cf:eb:48:81:43:27:7f:a1:49:
37:07:b5:e7:a7:84:21:f5:5b:92:d4:df:a6:e8:9a:f3:e1:f5:
59:0d:a4:7d:1c:87:d7:a8:e0:19:a8:e9:30:a3:b4:99:cb:83:
4b:ec:fe:c2:80:bb:47:95:4e:dc:af:59:f5:72:68:d8:86:3c:
7e:06:e6:da:e1:31:9b:63:61:f5:e8:aa:a5:a1:7c:b3:4b:51:
7b:15:95:5d:54:01:43:17:7f:2b:2e:1c:54:17:6c:9a:ea:ed:
68:17:db:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWFMOcacEjAWYubcKYG44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTU3MjdmMDdiNzU4Zjk4Njg0NzZjMTNjZjk3NzY1NGJm
MzgwZWUwHhcNMjYwMzAxMTcwMDQwWhcNMjYwMzAyMTcwMDQwWjAzMTEwLwYDVQQD
Eyg1YjVkZmZjYzdiZmZjODY0MjlkMjE5N2I4ZDlhOTgwMTk3ZTBiNTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiN/g1GWkKCvkymDK4tfVM6xRMuN
pBqiOIWa1cbrkLAvroPNO7IyQ5vYirjaTggF3FrFDjGXTi8TGILK9Qx6evmoL3sV
PM8iu7DYc1R2cFkr0Ix3IrQMqeusGyAHgHRbAm7NspzjcS42l5axsJunygA7pQiw
qRZhVletfrYosBC/sEDr50GI/0xbh7wyGVGwiOWD5iEOLw0c0QyDcAq8or/o8Xi9
y1diRddJRO6fmV5YnIt+srXCxDFWADSqMx+trUiAeHfIryyKMTexK4C9ETSPSfWw
2zDu+lXsB1o+mbIhuQ3Ew44Ch65gGnzXXIgYI4k4X0npkHws5Rrk9mD8XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtd/8x7/8hkKdIZe42amAGX4LVVMB8GA1UdIwQY
MBaAFAGVcn8Ht1j5hoR2wTz5d2VL84DuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAt
NjQ4MzhkZjM5NzdhLzEvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAtNjQ4MzhkZjM5Nzdh
LzEvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwaQPGUV
Z0MBPVO117BxO2S2n8xmJ/BgZ/r8B/hhalsbXFI0uC/jepaVOPxIRBhC7fpoV+8E
q/URA7F6/SMITK3DAH4SAJ71oFrrX6/4B28l3WQAZ2Vi5wJdUav02uFE9CHunjBw
6xJgdzCmI3O4x1dSnhmem81/Z1ddad0Q5iaaaUBtIH+TnHaeOruzdv+p5wowtZkJ
aZQ6z+tIgUMnf6FJNwe156eEIfVbktTfpuia8+H1WQ2kfRyH16jgGajpMKO0mcuD
S+z+woC7R5VO3K9Z9XJo2IY8fgbm2uExm2Nh9eiqpaF8s0tRexWVXVQBQxd/Ky4c
VBdsmurtaBfb1g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:10 2026 by rpki-client