Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: kSLu4jrApSjwGjaXTTgEGDp51FYbX8NiQgjdkxTt2XE=
Subject key identifier: B7:48:A0:E6:D8:50:0F:A2:5B:61:5C:28:7E:3D:9E:DF:E2:2B:77:31
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 019D9A3DFAAB3484EE8DBC2FAF8F544098C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:00:46 +0000
Manifest this update: Fri 17 Apr 2026 07:00:46 +0000
Manifest next update: Sat 18 Apr 2026 07:00:46 +0000
Files and hashes: 1: CHly21F90uK3t1PTfGR7rzZwk_E.roa (hash: mWrqsrt9qgm67LUNBZ/tu5yn1dKMTJD4Xe31GCUEOfc=)
2: aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa (hash: Orir7PkRZZnMYBwB3ZGIXihY2LtAAjB+kCKoDM/u5+A=)
3: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: xkELerE3GWUbCPcZNPYpGUZ3obbLVz/dE0kY1EdI2xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:fa:ab:34:84:ee:8d:bc:2f:af:8f:54:40:98:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Apr 17 07:00:46 2026 GMT
Not After : Apr 18 07:00:46 2026 GMT
Subject: CN=b748a0e6d8500fa25b615c287e3d9edfe22b7731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:6c:48:7a:60:be:7d:ca:5b:34:44:d6:66:
3f:70:5b:0d:72:df:ce:5a:04:30:50:b1:c5:37:31:
bb:38:5f:35:f1:7d:da:bf:bc:d1:27:4c:05:4d:18:
60:81:d0:17:f0:e5:28:60:f5:b0:bb:64:ac:eb:75:
7d:5b:32:44:97:d2:f4:62:bf:25:22:97:89:1c:ac:
7d:19:e5:e2:4f:b1:e5:2d:19:6f:aa:a9:9e:93:89:
d0:31:8c:16:af:50:37:db:5c:17:83:1f:22:9d:d5:
94:36:0a:48:10:be:c6:64:23:d0:d2:0f:a1:b0:e0:
c0:dd:bc:fc:c7:ca:45:ee:67:ff:ab:06:d8:53:3d:
92:2a:59:46:55:a9:6f:c2:0a:69:7d:e4:9d:44:37:
64:5a:f1:ec:37:e8:b4:ba:cc:6e:d2:23:ac:b7:dc:
c1:93:8a:ff:45:b4:4c:17:df:14:81:c4:da:84:3e:
ad:22:1b:be:c9:bf:2f:85:3f:ce:b6:b8:31:1b:07:
cb:ee:14:fe:bd:2c:ac:25:91:40:01:27:27:c0:07:
30:b7:a3:a2:9e:d0:78:9f:f6:e1:cf:4b:5f:ad:dd:
eb:58:7e:b8:f4:47:66:5b:77:9e:48:0c:93:9c:b1:
e4:5b:3a:46:d8:4c:a1:99:47:37:61:16:30:56:66:
50:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:48:A0:E6:D8:50:0F:A2:5B:61:5C:28:7E:3D:9E:DF:E2:2B:77:31
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7e:85:7c:5f:cd:21:67:04:93:30:1e:4e:90:91:0a:25:b1:
df:76:8a:02:8a:c5:9b:13:fc:62:be:ed:58:95:03:29:c3:2c:
92:e9:8f:9f:82:1c:f0:b3:6e:af:bc:b7:07:04:fc:d9:3a:0b:
86:be:18:79:2d:5a:02:33:96:7f:1c:f4:3d:89:8f:bc:49:d0:
39:02:91:90:80:32:b0:5e:63:fd:a6:93:41:0b:da:22:86:92:
9c:e3:7f:0a:d9:28:6a:30:d1:71:0f:db:21:c5:e8:19:6f:f9:
13:41:4e:1f:34:6f:38:87:36:fa:8a:aa:57:0b:5d:10:85:6d:
45:88:d9:7b:08:67:5c:72:ee:41:b9:09:46:98:df:20:a0:be:
26:b1:2c:5a:c8:b0:29:2c:c3:06:a9:67:32:8d:9c:7e:7f:77:
68:9f:38:9e:70:f5:b4:ef:25:0e:0a:3c:47:6a:c4:84:96:08:
f1:60:b7:21:a4:60:98:54:61:87:9f:33:7b:5f:6c:d7:35:87:
26:a5:1a:b5:43:73:8c:e4:51:8c:d1:2e:af:9b:21:ee:32:ca:
13:a5:c8:2f:0f:e3:b9:46:ae:ce:14:51:10:2c:8c:ec:a7:ba:
a7:36:5e:00:02:e6:dc:ec:6b:2b:14:1a:a9:ad:0f:f9:e8:af:
61:07:44:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:43 2026 by rpki-client