Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
File: aZuxClVyF1sDo8fL--k4t7FEGsA.mft (raw, json)
Hash identifier: zHOnYw5NbS/sykXiKADjvd8z4RhJ2VwfIue9H/4DWrw=
Subject key identifier: F8:AC:C5:03:ED:AC:63:FB:63:5F:D0:00:C0:CE:B7:53:28:E3:22:77
Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Certificate serial: 019D97E2768974EC446DB6A0CC9EB3791688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
Manifest number: 0A1B
Signing time: Thu 16 Apr 2026 20:01:34 +0000
Manifest this update: Thu 16 Apr 2026 20:01:34 +0000
Manifest next update: Fri 17 Apr 2026 20:01:34 +0000
Files and hashes: 1: 1-Vth4z2v9uFJG-6e6yAh4OoK6zE.roa (hash: c8s0rn9oSVHOm4SDzolaenn55CGT9XGpo6G1tmj95qA=)
2: aZuxClVyF1sDo8fL--k4t7FEGsA.crl (hash: yYhklsrfM2oBtENV1HW1jxWzJ0wGsG3U8p6GHBRPs58=)
3: mTtfV_YCvYk6ujcAUY5ExBi65Ig.roa (hash: 55gorD5hIJrNCpzlN8lg/I0nrXrYfHRLnChQmmITdMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:76:89:74:ec:44:6d:b6:a0:cc:9e:b3:79:16:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Validity
Not Before: Apr 16 20:01:34 2026 GMT
Not After : Apr 17 20:01:34 2026 GMT
Subject: CN=f8acc503edac63fb635fd000c0ceb75328e32277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1e:e4:db:29:2f:03:e8:69:f4:0e:09:ef:e4:
8a:a7:2f:12:9d:b4:24:99:a4:0d:3f:b0:b6:de:43:
03:93:35:3d:eb:94:89:2f:d6:c5:46:f0:4f:95:fe:
ac:cc:65:56:cb:ea:20:3a:c6:68:2e:5f:bd:3e:f6:
3b:89:8f:6e:29:92:36:a1:d9:47:23:bb:4c:22:f6:
26:72:0e:5c:88:f4:51:79:99:09:f0:3f:19:1d:22:
86:f3:6b:84:07:23:00:9a:60:a7:5b:3b:c4:59:e4:
c7:4d:89:71:ae:c4:e6:0b:68:c5:a9:b0:f6:7e:ff:
b2:f9:88:80:83:bd:c2:cb:14:88:72:6f:d6:99:ea:
22:3f:40:37:3e:87:5c:fa:95:38:ae:64:30:91:31:
45:e2:18:aa:43:00:5d:e7:27:05:97:16:03:a2:57:
bb:c2:34:f6:d5:a5:e4:e1:0d:68:15:10:2a:05:af:
15:37:d6:5b:19:7b:3e:5f:19:27:f9:a9:fe:da:4c:
58:3c:4e:b6:f5:c7:7f:20:40:48:cc:b8:cf:d1:08:
9b:e9:69:e2:0d:d0:1e:3e:1f:34:2e:af:95:71:ac:
85:12:d8:7f:1f:03:0e:93:61:ba:4c:6b:3e:d9:97:
07:3d:8d:0e:ed:cc:0c:c9:51:36:1b:dc:2c:65:72:
85:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AC:C5:03:ED:AC:63:FB:63:5F:D0:00:C0:CE:B7:53:28:E3:22:77
X509v3 Authority Key Identifier:
keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:4c:03:c4:ed:e2:af:3c:c3:46:70:14:62:d8:02:b9:f9:e6:
2a:94:08:42:f6:c1:69:0a:f4:00:1d:94:dc:d5:e5:79:13:f6:
e7:79:08:67:24:1c:b8:d8:9e:41:53:16:44:37:94:2c:0e:73:
32:43:bc:3e:be:85:52:82:51:dc:9c:9c:02:0d:ab:64:68:1b:
9a:8c:5d:6c:be:6f:4a:55:85:70:83:0e:0d:02:7b:6b:2b:97:
73:41:8b:51:52:f1:38:4e:89:94:2a:dc:e2:a2:17:55:24:53:
de:a6:c5:29:87:8e:3a:4b:f3:e4:39:3f:90:74:78:b5:5c:98:
e1:89:af:d7:47:e4:00:9c:d6:3e:e0:b7:f0:38:a2:fc:fe:ec:
80:a2:dc:e0:61:3f:c9:16:97:fc:c1:c0:ad:ec:fe:ba:db:63:
95:78:5b:7f:4a:d5:92:18:4b:eb:3c:90:bd:ff:df:0d:82:83:
20:fd:50:39:c7:ca:80:80:72:06:70:3f:1b:db:8e:01:62:2d:
3f:62:fa:f5:dc:3b:92:1f:ce:99:c5:61:39:09:97:e2:22:53:
04:ea:45:15:56:d6:ae:c2:2f:d7:95:f6:9f:da:a4:a6:c9:e9:
d3:ad:14:9d:e5:bd:51:5b:32:a7:41:a6:8a:88:a7:ce:63:80:
46:b0:23:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:30:20 2026 by rpki-client