Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
File: AZYrnNLlVrWW_HJDVlgHueLchoo.mft (raw, json)
Hash identifier: mm6bIORFwcvGGiftehyWPv5X6pjXWimK81InEsUFr88=
Subject key identifier: EF:AE:D9:1C:C5:11:B1:8B:BE:8B:09:2C:4B:E5:BE:C1:58:DF:54:79
Authority key identifier: 01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A
Certificate issuer: /CN=01962b9cd2e556b596fc7243565807b9e2dc868a
Certificate serial: 019FAA19FCA502491DAD1E44AA5581B09574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
Manifest number: 0ADC
Signing time: Tue 28 Jul 2026 19:00:57 +0000
Manifest this update: Tue 28 Jul 2026 19:00:57 +0000
Manifest next update: Wed 29 Jul 2026 19:00:57 +0000
Files and hashes: 1: AZYrnNLlVrWW_HJDVlgHueLchoo.crl (hash: zy58NDAunGYW/YuAxKP8WF8m0epV0sVxV1ficCG+xkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:fc:a5:02:49:1d:ad:1e:44:aa:55:81:b0:95:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01962b9cd2e556b596fc7243565807b9e2dc868a
Validity
Not Before: Jul 28 19:00:57 2026 GMT
Not After : Jul 29 19:00:57 2026 GMT
Subject: CN=efaed91cc511b18bbe8b092c4be5bec158df5479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d3:17:05:85:80:8c:59:f1:79:4c:87:19:8c:
e6:d2:5c:7a:e7:0a:c5:dd:ee:1b:00:36:eb:63:30:
86:31:b4:34:fb:93:b0:e3:72:08:25:5e:cd:e7:05:
a3:ee:bc:06:a3:50:c6:f4:37:6e:e0:7a:11:1c:16:
23:2d:a7:75:8b:a5:9d:ca:c5:b5:0c:9d:05:4f:32:
8f:2d:87:57:d5:6b:85:26:fa:13:bf:90:a4:da:bd:
cb:3d:de:8c:4a:83:7f:3b:76:f1:08:a6:dd:38:5e:
21:d6:0e:09:97:5d:82:fc:51:52:77:1b:e6:ce:92:
a5:6a:e4:1b:fc:e2:75:c9:39:6a:e6:06:03:86:99:
dc:8d:82:46:57:24:0c:dc:44:24:55:8b:96:8f:9b:
89:4f:85:8e:ca:7a:d3:c8:08:d4:a6:2e:0e:14:14:
6a:d6:6f:43:a9:f7:a1:94:f4:e4:08:40:a7:78:fc:
a6:19:66:a4:4c:8d:72:20:36:9c:d6:24:fa:36:98:
76:7f:78:8c:37:7f:05:1b:7c:84:cd:fc:1e:22:77:
f1:3c:79:68:b9:fa:fa:ee:2e:ac:c5:36:52:58:d4:
b3:6b:09:62:fe:fd:fc:c8:fa:38:fe:f4:0e:16:b4:
9a:8a:ff:a9:da:99:b1:ea:52:a0:c9:44:b8:3a:c8:
64:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AE:D9:1C:C5:11:B1:8B:BE:8B:09:2C:4B:E5:BE:C1:58:DF:54:79
X509v3 Authority Key Identifier:
keyid:01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:26:cb:fb:dd:31:18:0f:e9:75:0c:09:a1:7d:2b:98:6d:8d:
07:8a:91:4b:48:11:e0:a0:6b:38:50:7c:1b:24:5f:de:8e:dc:
d6:8c:6f:48:62:e9:1e:57:a6:36:29:92:1e:a2:2c:55:00:d3:
7a:27:33:a2:fe:0e:eb:c1:02:fb:68:39:f3:c5:24:e4:d8:5e:
e6:f0:12:d8:c0:0a:08:c0:99:4e:42:75:28:ed:94:22:2d:d1:
90:35:5a:19:90:67:7e:38:3e:a4:fa:a6:10:84:c9:05:e5:e0:
b6:4b:a8:c0:62:9b:b7:10:ba:0b:26:9f:35:c3:d7:33:e0:16:
b3:be:52:79:b2:af:cf:0e:13:29:b1:68:1a:07:14:0a:83:53:
88:92:7f:ce:e3:cc:29:58:14:54:e8:8b:04:de:62:31:bb:ca:
8b:60:76:92:2f:66:51:76:06:1d:48:ae:cd:2b:90:b2:9a:a2:
71:f1:59:c8:68:3e:e0:1b:b9:ef:e5:00:2c:09:19:f0:96:4b:
df:35:16:0e:76:d0:8f:92:4a:82:01:d9:bb:7f:db:4a:43:d8:
0a:75:8e:7c:8e:10:37:52:a5:cd:d3:2a:9a:28:8b:c8:85:ee:
e0:24:dc:1f:77:eb:ff:43:e4:fe:31:b4:7d:4d:da:63:2e:75:
a9:e1:84:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:42:04 2026 by rpki-client