Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File: AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier: Hk/tjbCwoyY5E8tiYQOZbiXGGwDr+ilVUgAHRJFT1T8=
Subject key identifier: 2F:EC:38:81:45:C0:64:F8:33:D1:CF:54:6E:CD:37:97:9D:8E:22:D8
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer: /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial: 01A0C6333C8009D26D67EB906544DE2F753B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 23:00:41 +0000
Manifest this update: Mon 21 Sep 2026 23:00:41 +0000
Manifest next update: Tue 22 Sep 2026 23:00:41 +0000
Files and hashes: 1: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: XHpXlIX7sJTVtA1sJJ4/mILESN2m4NrStRzKvvaw/ks=)
2: VeD0j8DDk8aNazB8XjlyUYtBGB4.roa (hash: 3r6wr0pUmwD48d+/WPFhEsF0b5taens/OvioZS+8fGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:3c:80:09:d2:6d:67:eb:90:65:44:de:2f:75:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Validity
Not Before: Sep 21 23:00:41 2026 GMT
Not After : Sep 22 23:00:41 2026 GMT
Subject: CN=2fec388145c064f833d1cf546ecd37979d8e22d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:9c:65:56:88:09:e6:c1:cb:28:f3:c6:78:
9e:5a:8b:ff:32:ff:fa:4a:dc:67:d8:49:63:76:57:
9e:44:27:fa:90:42:88:bd:18:64:e8:44:33:b9:d5:
62:79:d1:97:90:ba:5c:0c:32:67:8b:b2:cb:2a:a5:
ff:96:eb:95:38:60:6e:e8:a2:39:58:5a:3b:ae:f4:
64:fe:38:fa:7d:4d:f8:b2:a5:65:67:e8:c9:a6:75:
a6:8c:c2:45:dc:b7:3b:bb:7a:ab:bd:21:db:a1:6c:
e0:e2:b1:bd:36:1e:88:ec:02:bd:4a:08:00:4e:f2:
67:3e:19:df:0e:cd:fc:71:9c:5b:77:d0:18:63:8e:
02:cf:dd:9e:0a:5a:ca:90:d4:3a:d7:bf:fc:a6:43:
d5:bb:40:41:2a:81:90:a2:29:50:2c:94:bf:d9:e6:
82:79:e6:1b:34:7c:22:21:82:f2:54:c1:e6:2b:77:
28:26:ec:91:7c:f1:18:55:aa:fc:93:4d:ce:1c:99:
33:28:f5:ad:95:ac:f0:e5:2f:f3:34:f2:1f:eb:83:
57:5a:ba:47:e6:a9:01:70:8d:d9:8d:4d:97:77:02:
a7:66:80:e3:2e:37:aa:fc:29:71:67:b3:2e:1d:30:
61:08:fd:14:90:a5:fb:65:90:02:8b:44:cf:48:f4:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EC:38:81:45:C0:64:F8:33:D1:CF:54:6E:CD:37:97:9D:8E:22:D8
X509v3 Authority Key Identifier:
keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0f:e6:d3:de:0b:ee:3e:98:12:3c:14:25:37:2e:18:c3:ba:
3d:e2:45:8c:f7:df:b5:4c:3b:77:76:46:3e:5b:12:5d:f1:82:
49:75:b8:41:92:5c:7d:76:17:f2:4b:c4:7c:6e:43:b1:81:b2:
d1:d6:0b:5d:18:aa:9f:1d:66:ee:ef:de:fe:97:d3:a8:24:23:
7c:ac:0d:96:f0:d1:6b:f7:83:36:d2:94:4a:57:84:1f:d4:b4:
e1:5b:c6:3c:24:73:eb:65:fe:ac:77:cc:d9:3c:20:8e:22:31:
89:87:83:5a:f0:2c:f1:c1:fd:98:4d:e3:05:35:eb:73:8e:15:
3d:9d:78:7f:72:f3:3b:8d:be:86:22:cb:75:ba:4e:66:be:fb:
8a:6e:f2:92:33:68:49:94:dc:4d:9e:b9:f3:04:cb:46:f0:bb:
bb:10:74:a3:7d:31:18:5e:b7:3d:a5:e9:1a:95:6b:68:05:4a:
48:78:04:3b:04:dd:51:4a:65:dc:aa:cd:1d:cb:78:46:b4:15:
f1:a4:4c:e0:03:fd:e8:5c:bc:9f:80:25:61:89:fb:69:a1:35:
79:b0:05:ab:1f:c0:d2:98:d7:fd:cc:91:9c:62:c0:58:4e:73:
18:92:86:dc:d1:e6:15:3b:5c:4d:b1:c0:c1:41:e8:f9:b5:55:
c2:d4:b1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:12:23 2026 by rpki-client