Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
File: aZuxClVyF1sDo8fL--k4t7FEGsA.mft (raw, json)
Hash identifier: XfGU/+93aPwPac0UKekQqpR2OaDxL4uo5NFJKos0d7I=
Subject key identifier: 10:54:F2:93:0F:25:31:EB:E1:CE:FE:B9:F7:6B:10:28:93:80:EB:12
Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Certificate serial: 019CAC474FF634522590D20412DDB72C8A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
Manifest number: 09A1
Signing time: Mon 02 Mar 2026 02:01:20 +0000
Manifest this update: Mon 02 Mar 2026 02:01:20 +0000
Manifest next update: Tue 03 Mar 2026 02:01:20 +0000
Files and hashes: 1: 1-Vth4z2v9uFJG-6e6yAh4OoK6zE.roa (hash: c8s0rn9oSVHOm4SDzolaenn55CGT9XGpo6G1tmj95qA=)
2: aZuxClVyF1sDo8fL--k4t7FEGsA.crl (hash: Zu6+wjWnIxNOogTSwN8+jMRpp6U2RSvejJDNri3eWBc=)
3: mTtfV_YCvYk6ujcAUY5ExBi65Ig.roa (hash: 55gorD5hIJrNCpzlN8lg/I0nrXrYfHRLnChQmmITdMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:4f:f6:34:52:25:90:d2:04:12:dd:b7:2c:8a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Validity
Not Before: Mar 2 02:01:20 2026 GMT
Not After : Mar 3 02:01:20 2026 GMT
Subject: CN=1054f2930f2531ebe1cefeb9f76b10289380eb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:be:81:4e:4f:7a:eb:2e:a9:da:5c:43:5f:
f5:e3:07:60:0c:74:7c:7e:7a:bf:fa:f2:2f:2e:c1:
4d:2d:5c:5e:f6:bd:5c:da:cc:4b:84:d9:be:39:ed:
67:b7:3c:4e:cb:ed:32:66:71:d4:d1:fe:11:9e:f9:
e8:2a:23:6e:13:fd:a4:9a:13:26:89:8c:98:c3:eb:
2a:12:c6:89:f1:68:17:c9:d3:7e:8c:8a:bc:d1:79:
51:d2:0a:a1:5a:88:1e:d3:2a:7d:96:92:cd:72:27:
99:66:1b:17:da:b2:f4:be:21:c9:75:f5:3c:63:18:
a2:20:b7:19:bb:08:ea:27:3e:07:02:c4:87:9f:88:
64:8a:e1:cf:80:f6:c0:e1:34:8f:32:23:12:bc:26:
60:02:80:61:83:bc:8d:25:bf:1b:6d:80:b8:df:13:
4e:88:08:2b:76:92:4a:92:bb:10:d7:c9:a7:b1:d8:
58:95:6e:41:ab:8b:fe:73:1b:f4:2c:34:69:75:f0:
8e:40:56:d8:e8:08:ea:a7:a5:29:69:ec:90:fa:c6:
87:e4:ca:73:12:e6:30:25:00:f8:86:22:54:1f:7e:
a8:2a:0b:19:92:64:1e:fa:cd:f5:f0:ff:51:48:c9:
26:4e:1b:6e:ab:ac:ae:1e:f2:d6:f4:2c:d5:36:cd:
f1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:54:F2:93:0F:25:31:EB:E1:CE:FE:B9:F7:6B:10:28:93:80:EB:12
X509v3 Authority Key Identifier:
keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:69:59:f5:84:78:14:e5:1b:1f:93:89:64:5f:88:df:ce:a2:
93:c3:db:39:b6:32:cb:5c:d0:28:29:82:9b:82:7e:b9:30:c4:
1f:b8:ab:fb:1f:98:7b:15:28:52:eb:49:d8:fc:62:d3:da:61:
c0:a4:3c:ac:d0:cb:18:d3:44:03:40:51:3f:75:d7:8c:0a:e4:
90:93:23:1d:10:ee:58:8f:ad:df:f4:0c:a8:ff:e6:b1:a6:2f:
b8:68:29:7a:56:70:ec:5a:46:29:f3:30:8c:27:76:32:e9:ef:
1f:50:dd:77:a6:53:09:3d:ad:0b:49:bb:12:c0:81:6f:a3:42:
5e:b2:58:3b:23:f8:f6:9e:9b:3b:19:3a:17:8b:31:db:dd:d3:
63:12:ab:c7:79:3e:45:2d:11:9a:7b:7f:6b:5c:b1:34:28:15:
58:5f:7d:ed:3a:6a:8d:32:da:6c:ce:d3:6d:6d:54:a3:96:d0:
0b:b5:14:0a:d9:0c:f4:1b:15:91:6e:52:68:2f:88:e3:86:da:
3b:15:1c:84:a8:97:be:57:e2:f3:e4:c8:5c:ab:5e:f6:62:85:
b3:06:24:47:14:1b:bd:14:15:a1:03:0c:2a:52:fd:8c:0b:e1:
72:1e:38:54:01:99:18:f3:70:03:ac:30:d8:cc:bc:ee:f1:73:
db:52:86:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:49:35 2026 by rpki-client