Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: JnmcwK8jpVXugbr4d5MBq8jhwLo5ElDMaukTyvKT9Hc=
Subject key identifier: E3:53:A4:05:60:95:3C:F3:35:C3:4D:66:D8:36:3D:D2:AC:C2:3D:61
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 01A0EA093876E770485B8F290FC53B65F954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 1A79
Signing time: Mon 28 Sep 2026 22:01:07 +0000
Manifest this update: Mon 28 Sep 2026 22:01:07 +0000
Manifest next update: Tue 29 Sep 2026 22:01:07 +0000
Files and hashes: 1: CHly21F90uK3t1PTfGR7rzZwk_E.roa (hash: mWrqsrt9qgm67LUNBZ/tu5yn1dKMTJD4Xe31GCUEOfc=)
2: aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa (hash: Orir7PkRZZnMYBwB3ZGIXihY2LtAAjB+kCKoDM/u5+A=)
3: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: a1rJuKTV+IaGzQXx2rlnTuPTO2zmgDny+8j/vOeocIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:38:76:e7:70:48:5b:8f:29:0f:c5:3b:65:f9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Sep 28 22:01:07 2026 GMT
Not After : Sep 29 22:01:07 2026 GMT
Subject: CN=e353a40560953cf335c34d66d8363dd2acc23d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:b8:e8:a5:ec:2b:b1:a3:5c:44:a0:51:25:
e4:95:29:55:98:10:eb:49:31:55:e9:54:5b:e8:7c:
cd:2b:38:9b:66:be:d4:0b:05:3d:16:a5:b3:aa:ac:
3a:6c:e0:65:a5:e0:dd:43:11:d9:7a:71:18:9c:b9:
51:d5:d2:91:25:7b:64:b7:d1:f2:e6:c0:d0:00:21:
6f:74:b6:b2:ab:a9:33:16:f1:60:f6:ac:d8:76:79:
96:5d:d7:a9:56:49:e1:94:c4:95:27:e7:02:ab:80:
29:fd:cb:bc:50:fa:0c:d2:86:3a:c5:fc:3e:0f:db:
10:7a:be:2f:38:7d:11:6d:e7:3c:ce:df:58:74:13:
af:ce:9b:23:f7:6c:d0:fa:ab:41:3c:38:36:ec:f9:
66:1d:b8:ff:33:37:03:5c:83:d0:f5:70:5f:0f:2d:
96:bb:51:aa:7c:a0:d8:54:2b:38:f3:45:11:a9:c8:
03:e0:c0:21:26:43:0f:18:88:32:23:b1:52:57:70:
ab:63:5f:73:b9:69:67:04:02:e9:d6:46:96:9e:eb:
3b:ba:37:de:c2:89:a9:e8:9b:ec:24:99:60:d7:73:
ff:a0:66:32:05:65:ee:9c:ee:ca:58:aa:ba:5a:db:
cb:d4:74:16:be:16:46:10:e4:ec:41:ba:81:3a:ed:
08:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:53:A4:05:60:95:3C:F3:35:C3:4D:66:D8:36:3D:D2:AC:C2:3D:61
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:bd:46:0b:38:3e:04:bd:a7:df:0a:2f:e6:5d:c4:f6:71:24:
0a:77:7d:00:11:49:0a:d0:ed:14:78:88:fa:84:2b:0e:4a:fb:
03:8f:ee:6e:0b:38:f8:57:f7:4d:4e:b8:17:dc:e9:30:0d:9f:
95:fb:af:63:ab:c9:47:91:35:8a:83:12:70:65:a9:50:ce:d3:
e0:80:f2:14:8d:1b:d0:10:57:49:dc:b8:68:f2:e3:f3:5e:7c:
e6:de:0b:e6:ee:44:40:26:71:7b:48:b2:78:b3:84:6c:b3:d7:
26:38:23:3c:86:e1:62:cc:44:11:52:cb:a4:15:cc:09:23:c1:
3b:ce:d7:a5:b4:59:34:70:69:b3:61:56:19:14:28:c6:b3:31:
51:ab:6e:bc:81:47:05:35:dd:b3:65:d0:84:3d:a3:b9:88:d2:
7f:73:ff:4b:f0:76:38:36:a7:c9:ce:05:ad:1f:bf:5b:60:6b:
72:2c:c2:0a:46:76:0b:b9:a4:a5:09:d0:b0:d5:de:ee:bc:f1:
1a:90:d4:38:db:07:1f:b2:c1:18:b2:eb:56:7b:93:6a:6e:0f:
e2:ac:a8:80:ab:a4:6e:ad:45:f5:76:12:93:7a:20:95:27:40:
db:24:28:f9:8b:21:3c:14:5c:41:e1:a2:e5:65:a8:5d:6d:95:
41:d2:a6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:12:16 2026 by rpki-client