Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
File: U_azaGcjiqcYvhfm5zzkCpiVeKA.mft (raw, json)
Hash identifier: tdZXOZcHYwXZ4ZCyHIJLv3woMcBiPBov0JH5voeXj7o=
Subject key identifier: BB:4E:82:E4:D7:B5:FA:66:21:CE:81:F2:C1:02:6C:7C:7D:20:C5:BA
Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0
Certificate serial: 019D9BBE2D8A17B4FAB8AC4814532F99F21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
Manifest number: 15D0
Signing time: Fri 17 Apr 2026 14:00:25 +0000
Manifest this update: Fri 17 Apr 2026 14:00:25 +0000
Manifest next update: Sat 18 Apr 2026 14:00:25 +0000
Files and hashes: 1: HqhLC8dqnQNE0kDdL6ayiqhSPGU.roa (hash: bRPK732wUADitLmAxuB4OFABp+AoeaHAzcNtveMQOmo=)
2: U_azaGcjiqcYvhfm5zzkCpiVeKA.crl (hash: Pi58qyb8OizBdlEeeFwoMFrrwJ0Ri1uIr/2IvPVKoTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:2d:8a:17:b4:fa:b8:ac:48:14:53:2f:99:f2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0
Validity
Not Before: Apr 17 14:00:25 2026 GMT
Not After : Apr 18 14:00:25 2026 GMT
Subject: CN=bb4e82e4d7b5fa6621ce81f2c1026c7c7d20c5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:1f:cc:87:39:d9:78:0f:5b:75:58:34:55:
d8:7f:82:5e:b9:a3:94:86:a1:ec:3a:31:05:1f:50:
a3:8c:22:e9:29:52:cc:7b:63:46:24:36:99:61:24:
af:91:50:0d:7d:49:ee:a0:76:dd:e8:77:f8:7f:43:
3e:79:e0:e8:49:ce:04:b7:a6:d1:d7:86:3b:7d:52:
04:da:d3:04:48:d4:8d:ae:07:f7:04:cb:7d:6a:77:
ef:96:c1:93:30:f5:8b:0e:06:21:a0:1c:2d:08:6e:
a2:3e:c0:e0:b8:b7:fa:86:be:c6:03:54:85:c6:e1:
ab:2d:20:72:e5:70:66:67:93:ce:88:8c:4e:7e:03:
0b:38:64:14:56:c9:10:52:74:62:c0:b7:23:c3:97:
4d:18:ff:4c:b9:62:05:25:62:91:5a:cf:51:0c:8e:
6f:ff:3a:b0:06:0f:ff:c0:24:25:6a:99:4e:75:a1:
a6:06:8d:c1:eb:b1:44:4a:f8:77:19:f7:df:87:48:
3f:f3:6e:7d:82:4e:a0:f6:c4:19:95:62:2a:a5:6f:
25:36:88:50:66:cb:02:e4:9e:34:f1:54:98:3a:89:
01:7a:b6:93:cb:f6:ae:4c:7f:87:5f:cc:a0:83:55:
37:1c:44:35:4e:65:9c:ab:17:48:ea:65:f6:ee:78:
7c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4E:82:E4:D7:B5:FA:66:21:CE:81:F2:C1:02:6C:7C:7D:20:C5:BA
X509v3 Authority Key Identifier:
keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:21:2b:cc:e7:ef:9d:90:70:2f:d7:64:04:7d:fe:c7:90:12:
5c:10:1a:20:50:4f:2a:19:e1:02:e0:a3:9d:39:0b:09:6c:93:
17:3b:78:a9:f6:f5:4f:d5:36:1c:71:11:26:ea:d4:14:c3:eb:
a4:d1:e3:a5:be:44:9b:07:a6:42:88:67:22:3c:8d:29:83:65:
6b:ca:73:f5:94:78:4b:1b:ac:62:89:ce:00:6d:7d:be:6a:8d:
98:9d:15:11:85:57:34:ac:63:73:50:6d:e0:8a:af:30:71:6b:
e4:a2:d1:9e:cd:a8:a3:3b:c4:7f:ab:c2:5a:f7:de:d2:71:12:
f0:6c:c9:17:6c:b9:d0:74:f3:d0:2e:fc:aa:29:49:95:5d:7f:
6e:06:2e:fc:33:f6:d8:bb:dc:c3:e2:4a:25:d2:4a:23:18:dc:
00:32:d7:68:f8:8a:87:a2:cb:e8:c8:c4:14:ac:d6:85:72:95:
24:07:11:03:b6:bf:6d:9c:b2:b2:cf:bd:7b:46:a1:41:a4:d1:
1e:8c:63:27:7f:a5:12:c8:ab:32:2e:73:23:5e:13:f1:6d:0f:
d5:15:c0:6a:52:1e:29:f0:b5:ff:f5:41:f9:80:eb:24:20:42:
5b:fd:2d:37:d2:80:1e:9f:ad:ff:52:48:8d:1a:8f:a1:79:18:
25:39:f2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:43 2026 by rpki-client