Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: guntGr/sdOiAm+lRsiqy3MaKiL0pg8Q7hWLS/OwhEVQ=
Subject key identifier: CB:12:9E:24:7C:1D:D8:9B:D1:BA:72:84:92:83:FE:79:8A:45:C6:95
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 019FAB63E9BCBF6C94DBB765F4A65F015002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 01:01:19 +0000
Manifest this update: Wed 29 Jul 2026 01:01:19 +0000
Manifest next update: Thu 30 Jul 2026 01:01:19 +0000
Files and hashes: 1: CHly21F90uK3t1PTfGR7rzZwk_E.roa (hash: mWrqsrt9qgm67LUNBZ/tu5yn1dKMTJD4Xe31GCUEOfc=)
2: aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa (hash: Orir7PkRZZnMYBwB3ZGIXihY2LtAAjB+kCKoDM/u5+A=)
3: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: AzceGsSktRvAxKkmv2gk5sDRxeMLSRUJeH8XLVXfMik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:e9:bc:bf:6c:94:db:b7:65:f4:a6:5f:01:50:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Jul 29 01:01:19 2026 GMT
Not After : Jul 30 01:01:19 2026 GMT
Subject: CN=cb129e247c1dd89bd1ba72849283fe798a45c695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:a3:3a:a2:66:07:3f:1f:d5:f3:83:45:e4:
b7:1d:ef:61:ec:fc:ed:75:d6:64:4e:15:45:9b:39:
6b:04:69:89:ab:5f:81:da:51:93:02:c5:e4:82:84:
86:9f:e5:80:fa:51:82:5e:72:97:fb:51:33:29:4a:
93:5f:56:07:35:c5:58:70:4c:b3:64:6f:2e:cb:28:
be:b0:39:68:95:01:f2:e7:0e:65:4c:9b:0e:77:ce:
93:40:d4:52:26:c5:95:72:a3:c7:43:ba:35:6d:55:
65:86:60:4d:d7:48:d4:27:20:2b:d0:c3:1d:99:43:
6d:56:49:a4:0f:f3:4e:70:5a:4f:d0:1c:4d:ad:4d:
6f:eb:b1:12:e6:dd:b5:43:85:fa:9e:f7:bb:5f:b5:
2c:d5:a1:99:de:02:df:bc:bc:52:79:8c:50:42:c9:
77:2d:9a:62:d7:0e:03:22:91:05:1f:64:83:a7:54:
db:58:f1:9e:78:f1:83:2f:e1:a0:0e:e8:29:05:8b:
07:9c:60:d0:a3:1e:3e:c3:8b:0e:f2:ae:94:53:0f:
06:27:35:ea:24:66:f8:67:6a:f4:9b:5f:20:4b:34:
c6:8d:3d:2f:b0:44:53:13:a6:81:21:0a:4f:a4:c4:
c5:49:09:bc:51:16:cd:b1:c2:84:ce:a4:62:0a:49:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:12:9E:24:7C:1D:D8:9B:D1:BA:72:84:92:83:FE:79:8A:45:C6:95
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:17:27:89:fd:cb:81:b8:2e:d1:d2:5f:dd:04:6f:97:49:fb:
60:0c:d7:fe:79:59:d0:90:eb:86:fd:2a:81:07:44:17:5d:b6:
fa:5a:b5:04:0f:57:24:1d:3c:cf:e2:df:bc:ac:7a:9c:fe:9f:
83:07:69:4a:14:7a:d7:46:d0:b0:a5:66:08:80:82:da:3a:71:
07:97:ed:bb:b6:ce:22:d1:e5:6a:65:0b:1a:d9:95:66:eb:9e:
7c:ba:ab:fd:8b:4b:a4:02:1f:7b:f0:93:1c:ea:e7:3c:94:73:
c0:b4:e6:b7:37:26:96:e4:68:de:92:c8:95:34:41:11:dd:61:
d2:ac:f7:9d:1a:f8:21:a4:b8:58:15:07:db:cd:df:2e:83:14:
c1:5c:5c:a7:5b:5e:47:0f:9f:71:07:a3:74:2e:3b:f5:b3:af:
17:cd:16:71:f1:43:94:0e:73:d0:02:c9:74:29:51:eb:35:cc:
1c:6f:c2:cf:12:2e:74:13:d0:be:e5:0d:8f:d0:c6:ad:3c:2e:
7f:6a:5b:75:22:7b:d0:cd:09:f2:4c:e5:a2:6f:9f:5f:3c:96:
fd:1a:09:5a:28:67:8c:10:2e:7e:43:42:48:ef:9f:74:2c:f7:
9f:40:58:20:ad:df:cb:ed:21:4f:d5:1d:e3:09:d8:98:27:35:
1d:bb:68:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY+m8v2yU27dl9KZfAVACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMGNkMWEzMzhlYmY1Yzc5NTJlYjlhMWYwMDYwNTQ5Zjkz
NDBhZDYwHhcNMjYwNzI5MDEwMTE5WhcNMjYwNzMwMDEwMTE5WjAzMTEwLwYDVQQD
EyhjYjEyOWUyNDdjMWRkODliZDFiYTcyODQ5MjgzZmU3OThhNDVjNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudSjOqJmBz8f1fODReS3He9h7Pzt
ddZkThVFmzlrBGmJq1+B2lGTAsXkgoSGn+WA+lGCXnKX+1EzKUqTX1YHNcVYcEyz
ZG8uyyi+sDlolQHy5w5lTJsOd86TQNRSJsWVcqPHQ7o1bVVlhmBN10jUJyAr0MMd
mUNtVkmkD/NOcFpP0BxNrU1v67ES5t21Q4X6nve7X7Us1aGZ3gLfvLxSeYxQQsl3
LZpi1w4DIpEFH2SDp1TbWPGeePGDL+GgDugpBYsHnGDQox4+w4sO8q6UUw8GJzXq
JGb4Z2r0m18gSzTGjT0vsERTE6aBIQpPpMTFSQm8URbNscKEzqRiCkkfjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsSniR8Hdib0bpyhJKD/nmKRcaVMB8GA1UdIwQY
MBaAFKwM0aM46/XHlS65ofAGBUn5NArWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQt
YTMzNTE4YmRkOGZlLzEvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQtYTMzNTE4YmRkOGZl
LzEvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxcnif3L
gbgu0dJf3QRvl0n7YAzX/nlZ0JDrhv0qgQdEF122+lq1BA9XJB08z+LfvKx6nP6f
gwdpShR610bQsKVmCICC2jpxB5ftu7bOItHlamULGtmVZuuefLqr/YtLpAIfe/CT
HOrnPJRzwLTmtzcmluRo3pLIlTRBEd1h0qz3nRr4IaS4WBUH283fLoMUwVxcp1te
Rw+fcQejdC479bOvF80WcfFDlA5z0ALJdClR6zXMHG/CzxIudBPQvuUNj9DGrTwu
f2pbdSJ70M0J8kzlom+fXzyW/RoJWihnjBAufkNCSO+fdCz3n0BYIK3fy+0hT9Ud
4wnYmCc1HbtoTg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:22:25 2026 by rpki-client