Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
File: azZigAPagkZT2aWJdfaf0rwQa3E.mft (raw, json)
Hash identifier: Tk17p6IOKr74W1R3ZS8uFVujFGcdQJ3Tj0nkD8MjRWs=
Subject key identifier: 56:F3:BF:EF:3E:1E:CD:BD:BB:49:EA:AD:C8:CF:F6:60:15:49:D8:5E
Authority key identifier: 6B:36:62:80:03:DA:82:46:53:D9:A5:89:75:F6:9F:D2:BC:10:6B:71
Certificate issuer: /CN=6b36628003da824653d9a58975f69fd2bc106b71
Certificate serial: 01A0BEB0A0CA2771806CA99B2DA02542F09A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:00:41 +0000
Manifest this update: Sun 20 Sep 2026 12:00:41 +0000
Manifest next update: Mon 21 Sep 2026 12:00:41 +0000
Files and hashes: 1: azZigAPagkZT2aWJdfaf0rwQa3E.crl (hash: H2qRpd1mAkKgw3RNHxSXpPUADxhnuWtPQCTxzrHqqwc=)
2: xv_mfH_vDLg1Q5L8BpAH47O17uo.roa (hash: DoTOjlCGKN2DqHejuNWU2055DZZTGt7Dy1dJF/wtwJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:a0:ca:27:71:80:6c:a9:9b:2d:a0:25:42:f0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b36628003da824653d9a58975f69fd2bc106b71
Validity
Not Before: Sep 20 12:00:41 2026 GMT
Not After : Sep 21 12:00:41 2026 GMT
Subject: CN=56f3bfef3e1ecdbdbb49eaadc8cff6601549d85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:24:f0:29:45:81:34:2d:4a:b2:41:8e:ce:
5c:12:48:a7:1b:76:4d:1c:32:7c:5f:7f:25:03:e1:
82:31:9c:c0:04:c3:ed:a7:72:9a:f4:38:1c:bf:0c:
33:ed:83:35:e3:ec:a2:1d:be:c8:0b:d5:50:db:8a:
8c:d1:a5:45:e0:3b:46:0b:24:40:c8:b1:1d:9b:29:
0d:ab:79:fc:70:fb:23:d1:1b:ad:2f:7e:35:38:e5:
91:0f:04:b2:99:44:c4:ed:a0:80:10:88:be:e3:b9:
dd:dd:c8:79:a6:a7:0b:e1:55:b0:d4:ef:5b:c1:31:
b5:07:8a:52:90:a7:c9:6e:42:25:59:1d:6d:62:a7:
03:6e:13:a4:0d:57:f6:cf:c9:6c:b8:9b:48:eb:60:
2e:a7:20:c6:46:3e:22:bd:f9:cf:58:91:bc:f7:55:
47:88:e0:65:d1:8e:ea:90:33:de:7e:b3:a1:f0:a9:
dd:42:16:99:e6:4d:c2:a4:6b:73:26:22:00:c5:19:
fe:79:21:04:b4:1e:e4:24:c8:b2:23:da:fc:4f:b7:
90:b1:cd:ea:d1:a0:d4:c5:6a:ef:ae:bc:1d:17:5c:
01:2e:41:c8:57:7f:f0:0d:45:bb:ca:93:85:6f:3e:
ac:09:f0:43:b5:0a:97:16:62:d0:e0:89:ea:81:59:
5f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F3:BF:EF:3E:1E:CD:BD:BB:49:EA:AD:C8:CF:F6:60:15:49:D8:5E
X509v3 Authority Key Identifier:
keyid:6B:36:62:80:03:DA:82:46:53:D9:A5:89:75:F6:9F:D2:BC:10:6B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:41:95:31:7d:fd:d7:54:14:38:47:f8:5a:8e:88:7c:64:94:
d7:5a:59:51:6d:0c:a4:15:26:e5:18:85:b6:71:1d:a4:d1:52:
fb:12:11:1b:2b:33:50:f1:16:65:01:53:af:27:d2:9d:69:ef:
c4:39:b3:03:d2:b1:d5:ea:04:91:68:6e:53:d3:8e:3f:7f:be:
c0:10:93:fb:a3:df:dd:f9:8a:1f:32:98:94:b9:a7:03:6a:be:
72:3f:25:b1:74:06:97:c4:02:96:1f:a5:01:17:e6:e5:93:9d:
2f:3d:92:3e:8a:52:b2:09:de:21:2a:07:82:1b:43:1f:4e:33:
ca:eb:f4:bb:ad:60:d8:92:eb:63:f7:24:45:b8:08:d3:d3:c5:
24:6b:58:bf:a2:fd:a9:3d:26:45:cc:b3:d9:50:c7:95:fc:ce:
00:e4:85:03:64:4d:05:0a:be:cb:fa:1d:a6:21:57:4a:d0:dd:
ef:f6:50:07:ac:43:22:bb:ac:ae:26:17:44:31:c6:c0:0a:5d:
6e:ba:c1:d8:b5:87:0c:f0:14:97:74:7d:6f:31:23:b5:35:e8:
17:6d:94:b0:f0:56:ad:17:32:56:89:d3:51:a0:92:4f:d5:47:
d8:ec:ec:76:f0:56:8c:c9:6c:16:4f:fe:f4:6c:14:1e:5f:76:
2c:72:09:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:27:55 2026 by rpki-client