Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
File: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft (raw, json)
Hash identifier: UzLIz0zfW0c6mfBsydA7W7uCm0rejZturLpcvbNHi7g=
Subject key identifier: 56:06:F2:E4:FF:C7:BE:2C:93:5F:83:E2:10:A6:71:68:E3:B6:AE:02
Authority key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
Certificate issuer: /CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Certificate serial: 019CAF4887DED111B0423C24CE1D52185A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
Manifest number: 01E9
Signing time: Mon 02 Mar 2026 16:01:32 +0000
Manifest this update: Mon 02 Mar 2026 16:01:32 +0000
Manifest next update: Tue 03 Mar 2026 16:01:32 +0000
Files and hashes: 1: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl (hash: n0Y6Cq1syxlIN3AauZC1zsCbE6xlFO84kNiWDHMhtDA=)
2: zIyAUwF-LJlT9SOUOwU0Pdyt4G4.roa (hash: /Tmx9Ly9zFoq7yV+T0VGCTT8klLFQNZ6UtKDdkPo4ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:87:de:d1:11:b0:42:3c:24:ce:1d:52:18:5a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Validity
Not Before: Mar 2 16:01:32 2026 GMT
Not After : Mar 3 16:01:32 2026 GMT
Subject: CN=5606f2e4ffc7be2c935f83e210a67168e3b6ae02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:41:10:37:20:36:e1:93:a0:80:96:15:78:
d2:e6:e6:cb:5a:40:14:04:c1:34:26:25:ad:b6:02:
00:d6:48:43:0e:23:24:7e:6e:6a:d1:b2:34:45:9d:
c5:e9:09:f3:c3:9f:5f:03:fd:d3:07:77:8a:76:2a:
f6:ef:61:8c:13:c8:f2:e3:3f:a0:a7:6b:c9:18:d6:
17:00:4e:2a:c0:fc:da:c6:e9:40:09:70:d6:e2:46:
d5:a3:d2:50:3a:9f:a4:b6:53:b7:5a:41:20:07:a0:
22:2f:9c:15:fc:9b:18:2e:a0:9c:88:73:a1:14:04:
53:38:5c:23:39:ff:f8:1e:40:25:23:36:ee:11:d0:
45:46:d3:1f:ae:ac:c6:f9:7a:8d:61:30:a0:22:67:
8d:3a:2b:f9:e9:9c:ec:01:b2:3b:de:98:d8:50:45:
d8:01:96:28:55:45:f2:73:d1:5a:59:98:74:49:ab:
7a:32:ac:7e:b8:7d:b9:58:8e:d1:6d:4d:5e:c2:79:
b4:05:25:7d:5c:5b:f8:9e:6e:65:58:b9:ca:ba:7c:
30:52:c3:9a:e0:92:53:bf:d8:26:13:27:ea:38:57:
e7:16:2c:41:35:33:d7:83:53:19:bd:35:72:8e:8d:
e7:1b:a7:a5:f8:d3:fe:61:80:f6:8f:65:39:9e:a3:
7e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:06:F2:E4:FF:C7:BE:2C:93:5F:83:E2:10:A6:71:68:E3:B6:AE:02
X509v3 Authority Key Identifier:
keyid:69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:37:44:66:dc:94:bf:ea:bd:d3:6e:1f:ba:79:02:db:d7:35:
40:ff:69:a1:10:6b:ca:a5:51:04:96:06:f5:cf:e7:a3:5b:7b:
ef:ee:6e:c6:13:3e:a1:62:a8:5c:4e:64:e4:05:30:1d:bd:7c:
2a:ae:5e:6e:7b:6d:ca:c8:ba:8b:3b:a0:b1:16:08:3c:5a:c6:
9e:d5:4d:3c:1b:e2:c5:0c:6d:a7:0e:1a:ce:fe:05:68:19:7d:
e0:e6:36:2a:87:fc:23:ca:ff:9a:39:68:44:f1:b6:25:26:a4:
3a:0b:b7:6a:ce:e8:4a:48:ee:01:8b:04:26:2e:2a:2f:58:0f:
96:79:a9:39:6c:bb:ff:89:57:6c:7d:9b:75:6e:b1:36:e2:6a:
93:6b:b4:47:7f:8c:a3:6c:05:6a:37:3e:51:ce:86:04:f3:78:
a4:a7:2b:3b:cb:20:cd:05:21:53:04:61:95:f8:13:8c:13:ab:
30:b3:c2:62:bf:08:66:4b:26:3f:09:2a:5e:06:f6:85:3a:93:
4e:10:95:8c:1b:c9:f9:78:5c:1d:05:e8:2f:ac:b0:55:c4:5c:
b3:6e:53:e7:a0:e6:aa:73:37:ca:19:f1:09:9f:9f:67:b0:fd:
c8:af:75:2d:38:48:ab:f3:ee:2e:bc:e6:25:83:d2:9d:46:e9:
d9:54:75:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:02 2026 by rpki-client