Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
File: az921hCBSGU2b6pnz8Za0GnHz8Q.mft (raw, json)
Hash identifier: +lD/kvBcbG6AbGWwqtShYce7LwZmAIVgHd56yhKkk00=
Subject key identifier: BF:EA:71:12:BE:18:1E:40:96:06:26:D2:1E:D1:93:D5:2F:06:FF:4C
Authority key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
Certificate issuer: /CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Certificate serial: 019D9A3E52F9676351F6266754AA60188023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
Manifest number: 0F9F
Signing time: Fri 17 Apr 2026 07:01:08 +0000
Manifest this update: Fri 17 Apr 2026 07:01:08 +0000
Manifest next update: Sat 18 Apr 2026 07:01:08 +0000
Files and hashes: 1: az921hCBSGU2b6pnz8Za0GnHz8Q.crl (hash: KaMli2pQ3VWzvYu3qoel4kecEljJ+P5S+jd3RUs053U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:52:f9:67:63:51:f6:26:67:54:aa:60:18:80:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Validity
Not Before: Apr 17 07:01:08 2026 GMT
Not After : Apr 18 07:01:08 2026 GMT
Subject: CN=bfea7112be181e40960626d21ed193d52f06ff4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:d1:a2:3c:70:02:75:92:6c:96:8e:cb:04:
0e:97:f1:98:d0:e7:f7:d7:a9:dc:3a:7c:47:a5:38:
41:df:62:0a:e6:cf:0e:f3:0c:80:44:cb:28:c8:d5:
6b:b9:57:26:68:48:0e:23:2c:ca:57:c1:f3:2f:1b:
65:0b:8c:50:60:7b:fc:3a:9e:54:dd:c8:78:21:74:
7a:58:d3:16:38:42:05:df:9d:67:e0:87:34:3c:df:
60:3d:87:9f:9b:c5:2d:43:10:25:51:fc:ab:4a:5e:
fc:20:77:5d:c9:c3:d7:f4:ee:da:a8:46:b5:d1:96:
45:e3:08:8d:7a:f1:80:a9:ae:84:57:37:7d:30:be:
d5:0d:50:3c:da:dc:45:b2:63:47:38:fa:de:ca:f6:
ee:19:2a:ba:ca:b5:86:e3:87:f9:2d:02:41:04:b2:
78:0a:6c:a7:dc:61:5d:13:e3:fd:08:6d:46:66:56:
cf:ed:d1:f0:2d:f7:c7:34:50:3c:28:00:88:a5:e0:
18:a4:ab:dd:bf:ac:bc:a1:e5:27:ab:d1:57:0f:dd:
6c:3e:92:8f:39:84:47:d9:5d:a1:48:16:84:f0:14:
af:4e:f5:9f:60:45:ba:b0:95:24:b4:aa:53:16:3f:
80:b3:d5:28:8e:ba:38:e9:93:14:78:1c:40:55:70:
3c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EA:71:12:BE:18:1E:40:96:06:26:D2:1E:D1:93:D5:2F:06:FF:4C
X509v3 Authority Key Identifier:
keyid:6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b1:3f:68:fd:f2:05:c6:29:92:26:71:51:07:8f:ed:32:3f:
e8:f1:d7:2a:50:b9:9b:ab:17:de:cb:31:c7:36:40:13:b1:3c:
2b:e8:4b:33:d9:18:38:6d:03:c7:1b:9e:49:b8:c7:60:c8:31:
39:f3:6d:5d:3b:4b:35:f7:86:f6:47:93:29:22:3b:fe:10:09:
bc:f8:17:99:fa:f8:3a:df:4a:a2:66:2a:b5:b7:08:c2:74:6e:
e2:c3:ad:6a:88:52:78:04:4d:fd:e1:81:ee:61:31:67:bb:49:
4e:2b:66:be:03:3e:0d:09:b7:12:18:fc:ab:20:53:9e:eb:e0:
3c:f2:a4:46:55:74:91:da:74:96:3e:1f:9d:79:c6:d3:ce:db:
1f:ff:fd:61:a9:0d:c3:da:ca:17:d1:59:2a:38:47:bb:c2:56:
7b:cb:1f:3d:d8:fb:50:bc:80:40:b3:7b:0a:a6:19:32:c4:e0:
fb:4d:9b:1c:59:37:5b:a7:48:2d:6b:66:1c:fb:c2:14:e9:59:
dd:45:22:13:ff:1e:ff:2b:3f:69:67:ab:f9:f2:c1:f6:dc:53:
2e:61:13:21:ac:de:96:70:da:01:fb:6f:14:04:9d:43:c3:b3:
0b:34:44:80:2e:7c:97:ca:fb:20:2c:9a:2f:9c:95:d5:ba:22:
cf:f2:44:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPlL5Z2NR9iZnVKpgGIAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiM2Y3NmQ2MTA4MTQ4NjUzNjZmYWE2N2NmYzY1YWQwNjlj
N2NmYzQwHhcNMjYwNDE3MDcwMTA4WhcNMjYwNDE4MDcwMTA4WjAzMTEwLwYDVQQD
EyhiZmVhNzExMmJlMTgxZTQwOTYwNjI2ZDIxZWQxOTNkNTJmMDZmZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmPRojxwAnWSbJaOywQOl/GY0Of3
16ncOnxHpThB32IK5s8O8wyARMsoyNVruVcmaEgOIyzKV8HzLxtlC4xQYHv8Op5U
3ch4IXR6WNMWOEIF351n4Ic0PN9gPYefm8UtQxAlUfyrSl78IHddycPX9O7aqEa1
0ZZF4wiNevGAqa6EVzd9ML7VDVA82txFsmNHOPreyvbuGSq6yrWG44f5LQJBBLJ4
Cmyn3GFdE+P9CG1GZlbP7dHwLffHNFA8KACIpeAYpKvdv6y8oeUnq9FXD91sPpKP
OYRH2V2hSBaE8BSvTvWfYEW6sJUktKpTFj+As9Uojro46ZMUeBxAVXA84wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/qcRK+GB5AlgYm0h7Rk9UvBv9MMB8GA1UdIwQY
MBaAFGs/dtYQgUhlNm+qZ8/GWtBpx8/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZDQ0YTItYTA0Mi00OGIxLThiMDQt
ZjVkMDI4NTRmNTFmLzEvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZDQ0YTItYTA0Mi00OGIxLThiMDQtZjVkMDI4NTRmNTFm
LzEvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7E/aP3y
BcYpkiZxUQeP7TI/6PHXKlC5m6sX3ssxxzZAE7E8K+hLM9kYOG0DxxueSbjHYMgx
OfNtXTtLNfeG9keTKSI7/hAJvPgXmfr4Ot9KomYqtbcIwnRu4sOtaohSeARN/eGB
7mExZ7tJTitmvgM+DQm3Ehj8qyBTnuvgPPKkRlV0kdp0lj4fnXnG087bH//9YakN
w9rKF9FZKjhHu8JWe8sfPdj7ULyAQLN7CqYZMsTg+02bHFk3W6dILWtmHPvCFOlZ
3UUiE/8e/ys/aWer+fLB9txTLmETIazelnDaAftvFASdQ8OzCzREgC58l8r7ICya
L5yV1boiz/JE8w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:25:54 2026 by rpki-client