Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
File: AZYrnNLlVrWW_HJDVlgHueLchoo.mft (raw, json)
Hash identifier: wzuposehxGyq08cbYF8ojHrsItq1hLt1ruyaH8whAdE=
Subject key identifier: F3:20:A8:E5:2E:3B:23:FB:CA:6F:6F:B0:34:50:ED:B5:0C:F5:21:8E
Authority key identifier: 01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A
Certificate issuer: /CN=01962b9cd2e556b596fc7243565807b9e2dc868a
Certificate serial: 019D98F520C932104579DD0537AEBED79D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
Manifest number: 09CA
Signing time: Fri 17 Apr 2026 01:01:34 +0000
Manifest this update: Fri 17 Apr 2026 01:01:34 +0000
Manifest next update: Sat 18 Apr 2026 01:01:34 +0000
Files and hashes: 1: AZYrnNLlVrWW_HJDVlgHueLchoo.crl (hash: cnc8QSE81IFxiAz47u5mMHrLw/dLzJA+vP8n5hZykFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:20:c9:32:10:45:79:dd:05:37:ae:be:d7:9d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01962b9cd2e556b596fc7243565807b9e2dc868a
Validity
Not Before: Apr 17 01:01:34 2026 GMT
Not After : Apr 18 01:01:34 2026 GMT
Subject: CN=f320a8e52e3b23fbca6f6fb03450edb50cf5218e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:5f:e8:d5:5a:34:93:da:39:21:e0:3e:9f:
72:a8:fc:a4:27:68:5c:d0:f2:62:1d:21:7a:3b:5f:
e9:c1:3d:38:d8:d7:e2:a4:a3:5f:44:35:ab:21:47:
33:16:53:85:c7:31:eb:5e:48:ae:13:ac:d3:77:4f:
d8:30:db:db:72:ee:fc:25:08:4d:5e:80:b3:48:a0:
b7:43:e9:29:dd:fe:99:be:c8:60:9f:8c:a1:e5:ff:
08:50:1e:96:7c:6d:19:98:49:ec:27:88:ff:af:36:
4d:28:a0:f6:73:97:9a:eb:6f:93:9e:67:14:46:3a:
f2:17:a7:d3:7f:e4:ff:4f:6b:d1:b9:77:5f:c6:77:
1e:60:f1:fd:4d:68:ef:d2:84:37:6d:dc:31:cb:1c:
ad:4b:f3:f2:a1:76:12:10:d5:c4:23:d3:3e:84:f3:
fd:ce:5a:44:4a:e0:60:98:aa:c5:62:cc:a0:a7:36:
27:51:c9:94:78:65:ba:1b:98:d5:99:f4:5b:e5:e0:
cb:b8:b5:29:b5:6f:e9:3c:71:72:aa:a9:9f:86:bf:
b2:0b:88:64:4f:81:df:90:13:72:cc:c1:a8:52:1c:
53:a8:ff:83:cc:0c:9b:91:da:b2:45:99:1b:06:13:
be:fb:e4:5c:ec:0e:66:8e:e0:b3:3b:4f:f0:5e:73:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:20:A8:E5:2E:3B:23:FB:CA:6F:6F:B0:34:50:ED:B5:0C:F5:21:8E
X509v3 Authority Key Identifier:
keyid:01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3e:70:3f:3d:8c:ae:30:db:36:55:b1:0f:da:d9:e9:fb:13:
f9:6d:35:86:5c:08:3d:ae:6d:0d:6f:e5:5c:06:19:9e:7a:2a:
2e:f6:ff:7b:e3:f0:02:85:f7:40:13:e2:97:9d:99:be:ff:b9:
1f:f2:d9:53:21:87:74:12:84:97:ac:cd:a2:e4:c4:a9:c0:39:
18:77:59:e3:24:5d:3f:d0:5d:a2:da:45:b8:91:bb:04:bf:05:
c7:37:8a:45:58:f3:f0:36:6b:54:db:40:93:ed:a5:45:51:1f:
37:c0:f2:f8:f3:e8:b8:1e:dd:9a:3e:4a:a0:87:a6:1d:a4:a6:
ff:f9:93:6a:82:cf:c7:f1:58:b9:44:35:82:8f:aa:42:f6:29:
26:20:f2:f5:04:8d:bc:83:d8:2e:6a:ab:19:e2:49:19:5f:d1:
45:c7:54:80:c1:4e:02:87:73:ca:2c:55:2e:ca:1e:a7:5f:02:
c2:72:51:2a:6a:ae:f8:de:d9:c2:44:64:ee:55:3e:93:af:f4:
79:05:51:78:bd:86:4c:02:19:b4:2e:4e:b5:e8:72:3d:be:8a:
3b:0c:a1:63:bd:ff:f4:97:83:57:da:12:e3:94:2d:6a:7e:27:
cc:b2:63:29:b1:30:13:76:a1:11:45:75:94:5e:79:dd:97:bc:
19:47:be:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:11 2026 by rpki-client