Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: mxWtohpdFlnOGwUGbevLpzFSj0B3F5KAQYRt0qYS2BM=
Subject key identifier: FE:1A:CE:60:87:48:E1:BD:2D:DD:09:E1:0B:8C:6A:B8:BB:85:98:37
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 019CAAC6E249E359205FB375ADE00314CFB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:26 +0000
Manifest this update: Sun 01 Mar 2026 19:01:26 +0000
Manifest next update: Mon 02 Mar 2026 19:01:26 +0000
Files and hashes: 1: CHly21F90uK3t1PTfGR7rzZwk_E.roa (hash: mWrqsrt9qgm67LUNBZ/tu5yn1dKMTJD4Xe31GCUEOfc=)
2: aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa (hash: Orir7PkRZZnMYBwB3ZGIXihY2LtAAjB+kCKoDM/u5+A=)
3: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: 2yWMb0Zpq2T2CdFfFyLwzf2PN8gOZF55fGkPJhmfEPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:e2:49:e3:59:20:5f:b3:75:ad:e0:03:14:cf:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Mar 1 19:01:26 2026 GMT
Not After : Mar 2 19:01:26 2026 GMT
Subject: CN=fe1ace608748e1bd2ddd09e10b8c6ab8bb859837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b4:42:31:0e:5e:f8:91:7a:72:55:69:cf:62:
fc:35:21:ac:8a:82:47:6b:02:d8:9e:b2:54:3d:7a:
e0:38:7d:bc:1f:10:80:4e:dc:b0:9a:88:d3:2e:ba:
15:b3:02:a0:6f:6c:73:fd:f1:9d:b5:37:a0:a2:df:
31:65:70:b3:d4:9b:d9:2c:b8:d3:7c:bc:a0:7a:e8:
fb:3d:7d:4a:f4:48:d5:fb:ee:3f:ae:c7:c5:f2:32:
f5:6c:77:6b:93:b4:5b:a8:6e:9b:7e:0f:ee:54:7c:
9b:3c:ba:7b:1f:d5:c5:ed:33:3c:ec:61:dc:53:86:
53:f0:e2:32:ab:c2:73:c0:6d:81:ab:f6:d5:5e:5b:
d2:40:a3:46:82:fa:e2:7b:2f:ef:e2:7b:a3:22:fd:
1b:37:23:66:6f:9d:4d:d6:3b:45:ea:08:0d:fb:da:
59:04:6a:00:0c:04:e4:4f:5f:cc:ea:05:35:3c:66:
97:62:1c:3a:96:ad:46:37:f1:49:1e:ac:8c:5d:b2:
ff:1c:dd:bc:54:5c:4e:9c:29:ab:3d:10:e9:27:bd:
7d:32:50:c7:64:35:e7:43:70:57:e1:bb:fb:ae:a4:
7c:a8:ee:21:54:37:de:70:3c:34:60:6d:ea:e6:97:
5a:78:f9:71:d6:6f:53:43:41:20:f2:0b:55:20:45:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1A:CE:60:87:48:E1:BD:2D:DD:09:E1:0B:8C:6A:B8:BB:85:98:37
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:33:ba:93:f1:23:f8:d1:ec:6a:ba:cc:03:65:86:b0:09:9b:
d7:a5:97:61:31:ff:45:b9:9f:e5:8a:ff:48:f4:f6:93:b9:99:
70:f7:e2:c6:58:5f:01:7a:b7:28:25:e2:14:6a:af:eb:e8:a4:
17:a2:69:55:39:44:8a:0f:5c:dd:f8:6d:1a:12:e5:1f:dd:25:
de:35:3e:1a:f5:47:2a:31:96:e7:69:23:5e:ee:d2:7f:b5:3a:
08:bd:40:5e:d1:4a:87:86:aa:4b:f3:a9:38:bd:9a:79:49:67:
08:fa:59:f7:2e:53:08:62:12:7d:ce:90:6b:78:ff:9b:54:f2:
f1:c4:17:ec:7b:33:20:7c:35:57:5a:a7:4b:2b:f8:11:76:c3:
01:10:49:16:c7:ce:df:d9:7c:f9:5b:59:1d:da:7f:38:b4:85:
f0:f6:1f:22:f9:53:4d:65:86:ef:45:2a:f0:2e:0e:55:c4:9c:
df:ff:b4:58:88:e1:25:b6:e6:24:24:25:4d:d9:3d:ad:4b:1a:
81:5a:75:0b:91:6d:96:01:03:91:19:bb:57:d4:ce:73:6e:21:
df:31:d6:fd:7a:22:52:2b:10:bf:d5:e2:87:0b:fe:b2:d3:df:
1e:81:ec:33:e9:24:ab:18:d3:44:4d:a7:fc:56:5a:c9:12:52:
86:10:44:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:37 2026 by rpki-client