Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
File: azZigAPagkZT2aWJdfaf0rwQa3E.mft (raw, json)
Hash identifier: /tir70eOq9K7WrzJkrE9v/Gs5ahBDYLhIuRrF5RqbwU=
Subject key identifier: 77:DE:74:40:1B:38:AC:46:93:96:89:30:51:E7:4C:2F:53:BD:A4:01
Authority key identifier: 6B:36:62:80:03:DA:82:46:53:D9:A5:89:75:F6:9F:D2:BC:10:6B:71
Certificate issuer: /CN=6b36628003da824653d9a58975f69fd2bc106b71
Certificate serial: 01A0C09F52B87D3A90F16DB187A8CFB7A8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
Manifest number: DD
Signing time: Sun 20 Sep 2026 21:01:01 +0000
Manifest this update: Sun 20 Sep 2026 21:01:01 +0000
Manifest next update: Mon 21 Sep 2026 21:01:01 +0000
Files and hashes: 1: azZigAPagkZT2aWJdfaf0rwQa3E.crl (hash: Zss+g+Vi0ythYyLKcWKVBG3xMklpV0RRxmwJzKNj2VU=)
2: xv_mfH_vDLg1Q5L8BpAH47O17uo.roa (hash: DoTOjlCGKN2DqHejuNWU2055DZZTGt7Dy1dJF/wtwJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9f:52:b8:7d:3a:90:f1:6d:b1:87:a8:cf:b7:a8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b36628003da824653d9a58975f69fd2bc106b71
Validity
Not Before: Sep 20 21:01:01 2026 GMT
Not After : Sep 21 21:01:01 2026 GMT
Subject: CN=77de74401b38ac469396893051e74c2f53bda401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4b:1a:1e:87:2f:e5:27:87:2c:d6:0f:54:08:
bc:05:20:47:cd:e4:35:96:a5:65:4c:8e:6c:c2:92:
00:06:17:5c:77:e6:77:9e:8d:b8:43:86:f5:0c:e5:
4f:87:b1:cb:c5:82:69:06:ce:b2:77:28:2e:71:19:
5a:ed:c2:03:4d:04:00:cf:f8:de:5e:fb:ea:20:7b:
d3:a5:7d:75:49:7f:bf:cf:81:af:1c:3f:96:0b:e9:
55:c6:20:4a:08:ae:c8:e9:23:8d:fc:fe:92:ee:36:
8a:5c:56:95:24:3f:79:9d:d7:03:4e:20:ab:4b:0f:
da:0f:f2:2f:62:c3:57:d4:52:0f:5f:7f:87:03:d5:
c6:4f:b8:10:94:48:78:38:08:58:b4:fd:b9:d6:87:
7d:d2:d1:da:90:46:ef:06:6c:e3:80:71:99:a2:2a:
2c:91:27:96:11:89:6d:15:38:89:99:f5:4c:3a:1b:
46:ad:ef:68:09:c0:b0:96:0b:28:d8:4e:36:6a:70:
cf:b4:32:de:0d:9a:08:f0:52:ee:b7:bb:44:76:f6:
41:9f:0b:e9:50:c9:ef:90:a6:86:af:3b:83:16:fb:
a1:f3:3a:b8:5a:19:a3:e2:f0:97:60:8d:2e:99:4e:
bd:2c:e5:b0:73:10:d1:65:c0:f4:f3:5d:44:ed:8c:
62:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DE:74:40:1B:38:AC:46:93:96:89:30:51:E7:4C:2F:53:BD:A4:01
X509v3 Authority Key Identifier:
keyid:6B:36:62:80:03:DA:82:46:53:D9:A5:89:75:F6:9F:D2:BC:10:6B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:59:04:90:77:87:1a:f9:41:0b:a3:69:92:3a:f1:cb:d5:d1:
9b:19:51:4a:d7:d3:5d:ec:22:9e:65:d9:f4:dd:01:13:4f:65:
2d:f2:fa:a8:4d:74:da:91:09:fb:4c:92:f7:30:b5:6f:62:5f:
d3:c7:ab:b4:df:e0:b1:36:1b:a6:85:f2:9e:23:7e:d6:a0:de:
a9:6e:37:1f:71:a8:80:aa:8f:80:86:a7:dd:7e:7e:ae:3f:cc:
2c:ee:b5:81:90:65:67:29:31:04:32:52:af:77:d2:5e:00:cc:
b9:57:a4:39:8c:06:80:ae:3e:76:57:aa:07:20:7b:6e:b1:0f:
21:1b:79:97:f0:15:e3:79:cf:7a:53:bc:6b:6d:2b:b5:da:ba:
2c:9c:15:05:d1:1b:25:4d:50:2d:53:e9:20:d9:12:99:cd:a0:
04:c2:61:1d:60:00:d6:50:73:4f:03:88:cc:02:ae:51:f4:fb:
be:22:0b:85:26:ee:62:ff:f3:38:7c:9f:93:c0:87:3d:56:18:
7c:f5:ee:e5:1e:7d:61:fd:e8:b0:05:3f:aa:9a:34:57:4c:b3:
92:35:8a:09:52:2e:f5:f9:92:b2:78:77:e0:9b:53:90:c3:fe:
0e:f7:b1:19:bf:e0:b6:0c:1c:30:2c:d4:52:dd:cf:af:50:5f:
c9:8d:ab:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:39:02 2026 by rpki-client