Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier: 4IdL3NZYGcYeb78kNebtwysHGVzWozrKYDo1MOdp4iE=
Subject key identifier: CD:7D:69:2C:A8:EE:75:0F:28:4B:FF:D5:68:5A:FB:B2:9F:C5:11:20
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 019CAAFD6CFCBE8E5DE56B8F67B8AD540588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number: 14DE
Signing time: Sun 01 Mar 2026 20:01:00 +0000
Manifest this update: Sun 01 Mar 2026 20:01:00 +0000
Manifest next update: Mon 02 Mar 2026 20:01:00 +0000
Files and hashes: 1: 7Jk5wu_kJc-zPPGcp7O62JhhrJQ.roa (hash: SK08RqLCGeZwklsNV3oFj4q7+ObIhzDMa6BPNd7d8VI=)
2: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: WnB+Jq/SHpBH4lEoALBznMtw4TYskXiweue1p3VoHgk=)
3: nFf_xFZifK1O6AxBYllnzUi_i3U.roa (hash: wCPglifyZSCCde6+ZRBNVX/1pM0oJBcsybUWgeFRMfQ=)
4: yQQiLrOw_IC4fSBdg8XdSt3Qv8c.roa (hash: /G23HmdFMWbuOSonlYM0rBeEVBVw1dDwE7uR//SpzMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:6c:fc:be:8e:5d:e5:6b:8f:67:b8:ad:54:05:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Mar 1 20:01:00 2026 GMT
Not After : Mar 2 20:01:00 2026 GMT
Subject: CN=cd7d692ca8ee750f284bffd5685afbb29fc51120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:8a:b2:11:3c:8a:8a:4a:d6:10:14:0f:62:
e5:4c:79:45:b7:26:f0:c6:cf:8b:ac:ee:5a:63:db:
66:3c:58:31:99:ef:2b:ba:3c:46:e6:58:d1:31:89:
64:fa:75:53:3a:a3:7c:86:23:94:32:aa:03:17:d3:
a0:ac:6c:d6:e9:64:34:9f:a8:03:0a:a5:d3:2b:f0:
6b:07:7f:20:64:e9:16:9d:0f:fe:80:fd:fd:49:df:
cb:89:11:5b:7b:44:25:4c:3b:51:66:08:ca:39:c3:
0d:a6:d6:d5:75:32:05:33:78:46:a0:ff:9f:ee:12:
94:c7:ea:69:fe:85:e4:51:9f:e3:c6:7b:56:19:7b:
45:38:96:34:ac:e2:0c:3f:d7:7c:6c:e0:38:ab:3e:
2e:94:02:c0:a7:fd:61:24:37:f0:60:70:fb:c5:3e:
d2:9f:02:6a:9f:d8:f6:2c:ba:8c:d5:9d:7e:7c:7b:
a1:28:c8:69:14:e7:69:e0:1f:32:40:fa:54:be:ff:
d5:a2:72:3a:48:d0:3a:ac:39:c5:a1:c1:99:f1:60:
f4:0a:68:6b:2c:41:63:2b:25:ac:85:cf:be:03:f1:
c5:ce:31:0d:12:c2:d9:8a:0d:e1:22:0d:29:ce:e5:
fe:df:fe:e5:9e:d6:5d:0c:e0:ff:87:bf:c5:56:99:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7D:69:2C:A8:EE:75:0F:28:4B:FF:D5:68:5A:FB:B2:9F:C5:11:20
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0d:6b:eb:fe:9c:e0:35:e4:05:9b:c3:5f:34:84:bf:06:82:
1a:63:64:e5:e7:b6:35:ac:19:61:eb:2f:47:f3:a3:ea:76:e5:
60:5b:3f:df:3f:00:62:09:3b:96:71:15:a9:08:18:ba:a2:67:
9a:20:a8:ef:0e:92:f8:69:70:8f:e0:d0:e5:54:5d:b4:fb:46:
7b:37:0b:3f:bf:0f:52:60:f2:47:4b:58:ec:e9:fc:17:98:67:
f7:66:f7:96:c1:59:86:b6:2f:25:d4:3b:af:c8:08:8e:bf:77:
9a:be:d6:be:66:30:0d:83:10:40:ea:86:31:87:6b:35:28:29:
2e:92:54:0f:95:c1:58:f5:21:d0:72:bb:ab:fc:6e:7f:3c:00:
5c:44:9e:fb:26:dc:7e:84:6e:32:f2:11:7c:d5:b0:d5:c8:77:
35:63:4c:5f:b2:01:37:65:8a:3b:6c:71:74:b1:36:0b:1b:04:
9c:c4:ff:89:65:5a:82:2b:ae:ea:a7:2c:45:ce:dc:ad:49:68:
b6:4f:c4:22:29:ab:1a:8c:4c:7a:4a:46:af:73:f5:f8:c6:77:
c8:44:91:b6:cc:a2:61:aa:94:0e:77:b6:56:99:f8:35:1a:23:
a4:0c:a6:a2:4d:03:69:fa:11:7f:7b:90:bc:5a:df:84:cc:3c:
f9:39:c1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:18:12 2026 by rpki-client