Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
File: AZYrnNLlVrWW_HJDVlgHueLchoo.mft (raw, json)
Hash identifier: aB7FmG+/7hx4j+PdFeaMQHFPam0M4m/4BTN9gwV5g0g=
Subject key identifier: B1:73:6D:5C:1C:7C:28:32:B4:46:99:6F:3D:12:8A:E6:52:C2:6B:F6
Authority key identifier: 01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A
Certificate issuer: /CN=01962b9cd2e556b596fc7243565807b9e2dc868a
Certificate serial: 019CAB6B6467C02468E11B0C8C7542BB8D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
Manifest number: 094F
Signing time: Sun 01 Mar 2026 22:01:07 +0000
Manifest this update: Sun 01 Mar 2026 22:01:07 +0000
Manifest next update: Mon 02 Mar 2026 22:01:07 +0000
Files and hashes: 1: AZYrnNLlVrWW_HJDVlgHueLchoo.crl (hash: U7JkRXqir+Wq9XbQiXJkVdlgHVxKCTYucEuREgUDrBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:64:67:c0:24:68:e1:1b:0c:8c:75:42:bb:8d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01962b9cd2e556b596fc7243565807b9e2dc868a
Validity
Not Before: Mar 1 22:01:07 2026 GMT
Not After : Mar 2 22:01:07 2026 GMT
Subject: CN=b1736d5c1c7c2832b446996f3d128ae652c26bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:22:fa:49:bb:10:4d:0b:0a:6f:30:70:2f:
5d:1e:07:86:ee:e6:76:e5:24:28:5f:45:82:63:aa:
4f:d2:3a:b1:ac:7d:5f:9e:c1:35:5a:e8:99:f2:ab:
3d:dd:c4:94:8a:f0:c9:a9:a8:0b:66:0f:40:b3:88:
1b:b1:e5:8e:32:3a:4d:75:45:51:6e:24:e7:d8:3e:
0f:50:b4:6a:0b:3d:4b:01:34:f7:f9:ac:c5:11:4b:
b0:4f:86:30:88:a5:3d:e0:22:42:06:33:1c:95:d8:
23:63:44:8d:4d:d5:5e:bd:06:96:9d:c0:31:65:c0:
ac:2d:c2:53:d5:5a:03:4d:71:9d:c9:4d:2a:a2:32:
e8:81:b5:7d:fb:10:1a:fe:7e:e1:e4:5a:3f:ee:02:
67:0c:9d:a7:21:66:d9:1f:34:3b:d2:4a:e3:7c:c4:
be:3b:01:3b:c8:d9:5d:d7:f1:87:f9:ea:22:a9:26:
ab:7f:83:c4:10:89:4d:d5:8b:e0:cf:44:e6:c2:63:
99:d8:24:2c:5e:41:13:38:2a:20:f3:c4:dd:01:4d:
3f:e4:0a:9b:64:8e:c3:1e:bb:81:36:25:b4:f5:d8:
fe:4c:c8:10:a8:41:6b:7f:b1:9a:70:7f:6e:00:18:
1b:52:dc:f1:df:b8:d6:f0:1b:0a:94:e4:84:33:e1:
53:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:73:6D:5C:1C:7C:28:32:B4:46:99:6F:3D:12:8A:E6:52:C2:6B:F6
X509v3 Authority Key Identifier:
keyid:01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:0d:fa:78:b0:c2:cd:56:ad:c4:6e:fe:d9:ce:17:36:1b:63:
4b:e9:23:55:f6:4a:77:1c:c6:37:1e:88:12:3c:2c:9e:65:4c:
0a:bd:a9:35:3d:b9:1c:5c:da:d8:67:b6:2b:0a:6b:45:7d:f5:
3c:a3:e8:32:56:84:a7:f3:b2:15:4f:81:f6:5e:e6:d2:f8:a5:
94:76:c9:b5:23:2a:1f:3a:fc:dc:d0:6b:be:4e:d3:a6:b3:43:
cb:95:0c:33:83:68:d7:e4:84:31:12:88:5a:23:4e:3d:24:dd:
78:c0:b8:5a:64:43:b0:01:58:29:28:82:b4:72:41:0c:cf:11:
f1:f8:64:62:4b:f2:c1:31:9d:f3:46:d5:f0:be:bc:2d:9f:30:
7c:61:fa:2f:59:1e:22:14:e3:d9:d4:b6:75:4a:93:d4:74:66:
b9:7d:75:eb:d6:ac:9e:63:b5:8b:2d:fa:40:42:31:95:53:20:
fd:f8:fc:c7:02:d9:bc:bd:81:c0:22:07:65:22:15:98:13:74:
dc:6f:19:3a:ee:35:5a:26:7f:45:bc:e7:93:b0:68:a1:5c:9b:
92:6a:ea:f7:5f:50:43:b4:5d:67:b7:ed:d8:d8:71:a0:06:a5:
c3:ef:1d:3b:04:3c:a8:09:64:ed:8e:58:ae:a4:20:b6:de:80:
3b:6f:e6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:58 2026 by rpki-client