Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File: AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier: fdTlpEe4cr5mvKDh3GiTBBK6XZ1bsSz2hBiJ1D13yYg=
Subject key identifier: D6:B1:1D:41:32:B2:8A:15:CA:23:B4:0F:64:CE:23:2E:0E:48:81:97
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer: /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial: 019CABA1E31ABEF9DFDB900FD44A6A421889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:00:38 +0000
Manifest this update: Sun 01 Mar 2026 23:00:38 +0000
Manifest next update: Mon 02 Mar 2026 23:00:38 +0000
Files and hashes: 1: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: O6cUyrKNK3lhcFnLmL/oihEEmCRVA/MBB0tIeY12AFM=)
2: VeD0j8DDk8aNazB8XjlyUYtBGB4.roa (hash: 3r6wr0pUmwD48d+/WPFhEsF0b5taens/OvioZS+8fGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e3:1a:be:f9:df:db:90:0f:d4:4a:6a:42:18:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Validity
Not Before: Mar 1 23:00:38 2026 GMT
Not After : Mar 2 23:00:38 2026 GMT
Subject: CN=d6b11d4132b28a15ca23b40f64ce232e0e488197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a9:78:51:5c:3e:02:82:f2:d9:e7:3a:d0:ba:
2b:13:33:8d:c6:bc:e9:2b:d5:0a:6c:90:d7:d5:ab:
24:88:ac:13:9d:58:a3:84:f5:17:34:96:e0:8f:bf:
57:62:b2:e1:7e:a0:48:03:50:54:28:50:71:bb:bb:
28:8d:10:41:ac:08:bc:d7:9e:3f:50:df:c1:f2:f0:
28:98:47:7c:95:38:6e:6b:24:84:0d:0c:9e:61:40:
f6:a3:14:66:b8:13:e1:de:5c:71:23:2c:e8:e6:f7:
a9:92:ac:aa:c0:ee:8f:53:a8:3c:a8:97:d0:4b:82:
dc:40:b8:71:ab:34:75:f4:6a:b2:89:41:2a:a8:e2:
c4:14:e2:2b:8f:48:3b:91:3b:68:73:f1:6f:92:d0:
34:8d:eb:6f:6e:6e:e8:9f:be:96:5e:95:fb:e4:f5:
5e:0d:e9:fb:2b:1a:8c:8a:9a:27:6d:bb:f0:b8:e7:
53:0c:1c:55:01:74:c4:f4:0e:be:d6:59:db:91:06:
8d:11:13:2d:80:65:9a:8e:33:81:a7:ad:95:c5:ec:
21:45:e9:f0:46:aa:bb:f4:16:2d:fe:9e:14:a8:f6:
fe:dc:36:69:7c:94:af:c0:d4:b2:e5:85:41:9f:71:
62:c1:b1:b2:ac:ae:f9:e4:0c:b1:ac:24:c9:58:e7:
c8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B1:1D:41:32:B2:8A:15:CA:23:B4:0F:64:CE:23:2E:0E:48:81:97
X509v3 Authority Key Identifier:
keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:43:8a:c8:89:25:aa:ff:36:35:ac:e5:a7:92:e1:d8:9b:71:
52:e0:69:37:43:9d:4f:3a:a0:7c:c9:bb:78:a7:09:7e:0f:94:
56:ca:f3:1c:43:f2:c5:3e:64:06:27:8a:8f:1c:ba:5b:7b:a5:
51:dd:ef:5b:08:80:7e:f8:a0:17:c9:9a:c3:20:62:8f:39:cd:
6c:81:51:3e:10:b6:ff:52:c6:fa:e9:c7:30:b9:e5:58:58:c0:
b2:18:26:99:28:4f:c5:49:69:ef:a8:06:50:c9:aa:96:f6:4c:
85:ab:f1:95:30:1b:65:f8:37:04:15:31:ee:db:ae:d6:5f:68:
f3:a8:b5:6e:65:42:f4:20:52:dc:0a:43:df:d6:d2:af:bc:c3:
25:ff:61:12:07:86:a9:4e:25:f9:9f:bb:33:ba:37:61:26:9a:
3a:68:5d:2b:b1:3e:ca:83:bd:8d:48:bd:3a:6e:19:55:2e:11:
6a:4b:07:54:91:c5:e1:e9:86:ed:5f:f2:5b:8a:0d:a2:ba:26:
3d:c0:0b:34:c6:52:1d:d3:5f:2b:39:46:f6:c9:b0:f5:ad:07:
80:83:5d:c4:c6:cb:9d:08:0d:4b:06:ff:fb:87:f4:c7:63:c1:
38:ff:a0:33:33:d5:8d:b3:73:9e:46:68:5b:79:78:76:bd:b9:
b5:74:e7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:25 2026 by rpki-client