Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: gP38LfEc8nJPpD1DXuT3UiVQM25njujwYwIdgg79swM=
Subject key identifier: 2F:AC:11:4C:97:6A:50:7E:3E:C2:D4:D6:4C:77:2B:FB:59:41:FB:6F
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 019EC1B70E65DC583B3C3E26F49C6F12A65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 16:00:59 +0000
Manifest this update: Sat 13 Jun 2026 16:00:59 +0000
Manifest next update: Sun 14 Jun 2026 16:00:59 +0000
Files and hashes: 1: CHly21F90uK3t1PTfGR7rzZwk_E.roa (hash: mWrqsrt9qgm67LUNBZ/tu5yn1dKMTJD4Xe31GCUEOfc=)
2: aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa (hash: Orir7PkRZZnMYBwB3ZGIXihY2LtAAjB+kCKoDM/u5+A=)
3: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: Ny3nyeLybIozvI0W58rsgqALm8GxnRMZG8Edra74yrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:0e:65:dc:58:3b:3c:3e:26:f4:9c:6f:12:a6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Jun 13 16:00:59 2026 GMT
Not After : Jun 14 16:00:59 2026 GMT
Subject: CN=2fac114c976a507e3ec2d4d64c772bfb5941fb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:f2:7a:9d:21:c7:ba:09:f0:41:84:65:91:
f7:de:13:f5:72:b0:45:7e:c4:0e:bb:63:1b:52:2d:
9b:d5:ff:7d:f7:13:d5:f6:5b:8c:7b:1a:36:1c:65:
99:df:ed:78:a1:23:23:c8:ec:d5:ca:4f:e5:7b:df:
1c:01:39:43:24:1f:67:fc:0b:2f:7e:43:6a:a4:93:
b7:39:f6:a6:74:45:39:f6:c6:aa:81:f9:e4:97:93:
04:58:62:b4:62:92:44:89:6b:6b:b8:3e:97:d6:45:
b1:57:63:d9:31:73:7f:b7:35:04:35:f6:79:35:76:
90:5e:a9:78:b9:5c:74:0c:ca:14:3f:c9:d6:d9:b2:
3f:22:0f:ef:73:79:6e:87:e7:cc:3f:19:b2:fd:2a:
77:62:1f:8e:41:27:7b:5a:76:cf:72:f0:ca:5e:e2:
4c:e4:5e:7e:22:d3:74:44:2e:ba:bf:19:76:78:05:
e7:4e:54:63:ed:8f:06:c1:05:fc:06:1c:23:9e:41:
68:b1:d8:68:fb:9d:4c:91:f0:53:79:b1:b2:bd:e8:
a7:31:12:85:30:bd:b6:89:15:5c:e8:ea:96:8a:68:
c0:28:9a:d7:45:ca:b2:f5:c4:b7:38:6d:bd:4e:3a:
fd:60:74:72:ac:a0:08:05:b0:16:80:35:d2:5f:98:
be:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AC:11:4C:97:6A:50:7E:3E:C2:D4:D6:4C:77:2B:FB:59:41:FB:6F
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:37:77:4a:84:32:c4:64:8a:83:0d:76:d1:dc:3d:ae:57:21:
51:ee:33:ba:ce:3f:c4:72:8a:52:1a:30:98:be:c7:bb:2d:20:
d0:aa:d8:bd:d9:5f:67:f3:af:b9:24:38:85:d9:92:15:4a:44:
00:0c:1e:f1:f0:9e:0d:39:c8:2c:ab:e3:93:b4:01:00:da:97:
af:7c:09:25:58:3f:f7:16:f0:1e:9d:04:cb:e3:e4:e7:5f:7a:
34:c8:8b:ed:06:95:6e:9e:33:24:fd:30:14:80:70:dc:99:9e:
18:5d:0b:c3:db:f4:61:e7:d6:56:2f:84:71:8f:4a:e1:86:51:
4c:fe:27:41:32:5f:7c:b3:41:45:40:10:06:d8:08:b1:5d:43:
af:88:91:3a:8a:8a:30:85:da:dc:2f:31:6b:2a:f8:da:0c:b8:
ca:67:eb:e7:31:16:da:ec:8f:fc:76:e1:02:e2:5d:16:4c:14:
d8:01:44:1f:e9:54:30:b6:69:4b:eb:50:2f:57:ae:89:eb:42:
ff:5b:f2:ad:fb:77:7f:6a:b5:67:c8:76:bd:3e:9a:d8:38:27:
1c:c5:fa:34:62:85:5e:57:1e:e7:84:84:77:17:b9:05:11:8a:
3f:56:cf:35:95:04:5f:2a:14:7e:4c:ce:90:f2:1f:94:3c:98:
55:e0:5c:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Btw5l3Fg7PD4m9JxvEqZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMGNkMWEzMzhlYmY1Yzc5NTJlYjlhMWYwMDYwNTQ5Zjkz
NDBhZDYwHhcNMjYwNjEzMTYwMDU5WhcNMjYwNjE0MTYwMDU5WjAzMTEwLwYDVQQD
EygyZmFjMTE0Yzk3NmE1MDdlM2VjMmQ0ZDY0Yzc3MmJmYjU5NDFmYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEryep0hx7oJ8EGEZZH33hP1crBF
fsQOu2MbUi2b1f999xPV9luMexo2HGWZ3+14oSMjyOzVyk/le98cATlDJB9n/Asv
fkNqpJO3OfamdEU59saqgfnkl5MEWGK0YpJEiWtruD6X1kWxV2PZMXN/tzUENfZ5
NXaQXql4uVx0DMoUP8nW2bI/Ig/vc3luh+fMPxmy/Sp3Yh+OQSd7WnbPcvDKXuJM
5F5+ItN0RC66vxl2eAXnTlRj7Y8GwQX8BhwjnkFosdho+51MkfBTebGyveinMRKF
ML22iRVc6OqWimjAKJrXRcqy9cS3OG29Tjr9YHRyrKAIBbAWgDXSX5i+OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+sEUyXalB+PsLU1kx3K/tZQftvMB8GA1UdIwQY
MBaAFKwM0aM46/XHlS65ofAGBUn5NArWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQt
YTMzNTE4YmRkOGZlLzEvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQtYTMzNTE4YmRkOGZl
LzEvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETd3SoQy
xGSKgw120dw9rlchUe4zus4/xHKKUhowmL7Huy0g0KrYvdlfZ/OvuSQ4hdmSFUpE
AAwe8fCeDTnILKvjk7QBANqXr3wJJVg/9xbwHp0Ey+Pk5196NMiL7QaVbp4zJP0w
FIBw3JmeGF0Lw9v0YefWVi+EcY9K4YZRTP4nQTJffLNBRUAQBtgIsV1Dr4iROoqK
MIXa3C8xayr42gy4ymfr5zEW2uyP/HbhAuJdFkwU2AFEH+lUMLZpS+tQL1euietC
/1vyrft3f2q1Z8h2vT6a2DgnHMX6NGKFXlce54SEdxe5BRGKP1bPNZUEXyoUfkzO
kPIflDyYVeBcXQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:24:03 2026 by rpki-client