Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
File: azZigAPagkZT2aWJdfaf0rwQa3E.mft (raw, json)
Hash identifier: Uk5qHjjds6n6kznF51FDvVVAGbWageMp4D8k2lHPePc=
Subject key identifier: DF:51:33:C4:C1:ED:B9:04:7C:7F:DC:8D:5F:0A:8D:07:67:28:35:CC
Authority key identifier: 6B:36:62:80:03:DA:82:46:53:D9:A5:89:75:F6:9F:D2:BC:10:6B:71
Certificate issuer: /CN=6b36628003da824653d9a58975f69fd2bc106b71
Certificate serial: 019FA89A4576A391D513026F204CC773359F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:50 +0000
Manifest this update: Tue 28 Jul 2026 12:01:50 +0000
Manifest next update: Wed 29 Jul 2026 12:01:50 +0000
Files and hashes: 1: azZigAPagkZT2aWJdfaf0rwQa3E.crl (hash: hj6oVVd3No5am9im4Fow1ao9hU/MpwMjfrPiebNJilU=)
2: xv_mfH_vDLg1Q5L8BpAH47O17uo.roa (hash: DoTOjlCGKN2DqHejuNWU2055DZZTGt7Dy1dJF/wtwJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:45:76:a3:91:d5:13:02:6f:20:4c:c7:73:35:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b36628003da824653d9a58975f69fd2bc106b71
Validity
Not Before: Jul 28 12:01:50 2026 GMT
Not After : Jul 29 12:01:50 2026 GMT
Subject: CN=df5133c4c1edb9047c7fdc8d5f0a8d07672835cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:fa:99:3b:04:7b:51:a2:27:ab:43:85:4f:
0c:63:5f:6a:1b:a8:08:85:03:36:12:ec:64:d6:66:
9e:82:e8:d4:66:f4:e2:0b:9c:06:3f:d2:3e:79:ed:
2c:c9:90:12:35:ba:12:7f:7d:e2:8c:a6:07:b3:a4:
36:69:ce:52:de:96:e5:55:94:59:4b:7a:1c:37:9e:
3b:0d:4b:1c:51:c6:f4:1e:6b:44:72:89:4d:c8:04:
46:55:fd:6a:b5:00:e1:18:e7:b2:38:7a:cd:b4:b6:
f8:9d:7b:d8:12:e9:32:d8:27:c4:79:a9:c9:f5:9a:
29:96:80:71:77:22:dc:d9:e3:e1:b3:a3:41:f8:45:
a1:f7:b6:a1:09:c4:57:47:f8:47:33:69:19:13:97:
b8:2e:0b:cb:17:d7:fd:db:ee:ae:0b:0c:83:e7:3c:
1a:fc:7a:b2:aa:8a:28:85:e8:ad:38:91:9d:75:1a:
19:ec:2f:0f:d5:3b:ec:7f:cc:ab:fd:73:7a:6f:5f:
aa:03:37:a6:9c:fa:c0:c3:9b:34:c1:9b:cd:c3:db:
7f:a7:be:eb:99:7d:06:a6:b1:26:6c:07:51:55:70:
2b:02:db:b6:4a:14:20:08:9f:d2:94:26:3d:9d:81:
45:f6:c6:9d:ba:f5:af:67:93:57:ef:3b:26:37:79:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:51:33:C4:C1:ED:B9:04:7C:7F:DC:8D:5F:0A:8D:07:67:28:35:CC
X509v3 Authority Key Identifier:
keyid:6B:36:62:80:03:DA:82:46:53:D9:A5:89:75:F6:9F:D2:BC:10:6B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6e:d2:94:0b:53:b5:83:30:bd:4e:98:31:3b:1f:1d:62:a8:
f0:d8:6f:72:da:c4:1a:7f:14:0e:c8:ed:2e:b4:48:ed:cb:e5:
ab:d5:bf:1b:18:3a:90:cf:29:51:a1:cc:d0:e2:1a:c6:1c:90:
7b:d7:49:25:e7:85:93:b4:03:02:99:69:9c:af:37:4e:bf:2f:
de:9c:e0:3e:5a:42:67:ac:a6:29:ef:6d:a0:42:90:15:f0:ee:
6c:18:6e:87:95:06:5f:5e:a1:fa:c8:f4:1c:38:a5:57:af:ff:
9b:cc:d4:89:03:e6:42:32:e1:4e:bb:db:35:c0:8e:5c:f7:4b:
be:59:e5:8e:25:ed:73:61:07:ac:20:88:28:15:11:e3:8a:f7:
e6:0d:1c:3a:a2:32:56:a2:f0:e9:fe:33:f3:87:19:f8:0c:71:
dc:51:16:a4:23:7f:ed:f8:32:55:47:40:54:93:b7:32:2e:4b:
73:4c:b3:c1:b0:3e:f5:fb:b8:fd:f6:98:b9:c8:44:c4:04:9d:
c2:df:a9:37:fd:00:fb:94:51:03:3c:53:65:7e:75:8d:a3:d5:
97:33:2e:77:3c:a4:69:20:a9:8a:9f:ce:4a:36:90:9f:82:73:
23:97:46:e5:1f:6a:04:f2:c0:51:3a:2e:76:a6:de:a8:26:2a:
4f:23:10:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:39:48 2026 by rpki-client