Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier: dtIFZnKla2nIImhApYGD2B+mIJU8XcwWtAGhRz1VlGg=
Subject key identifier: 01:E9:8A:E7:04:F5:EE:54:AD:2D:AB:F8:60:22:CC:E3:4E:5B:7B:EE
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 019CACEB83653F91DC0680DDD511C4687047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number: 14DF
Signing time: Mon 02 Mar 2026 05:00:41 +0000
Manifest this update: Mon 02 Mar 2026 05:00:41 +0000
Manifest next update: Tue 03 Mar 2026 05:00:41 +0000
Files and hashes: 1: 7Jk5wu_kJc-zPPGcp7O62JhhrJQ.roa (hash: SK08RqLCGeZwklsNV3oFj4q7+ObIhzDMa6BPNd7d8VI=)
2: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: xuGVdJi1nkvL0/1Q+zEQ+2+aCcM0F9ShRArXbdrBEvw=)
3: nFf_xFZifK1O6AxBYllnzUi_i3U.roa (hash: wCPglifyZSCCde6+ZRBNVX/1pM0oJBcsybUWgeFRMfQ=)
4: yQQiLrOw_IC4fSBdg8XdSt3Qv8c.roa (hash: /G23HmdFMWbuOSonlYM0rBeEVBVw1dDwE7uR//SpzMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:83:65:3f:91:dc:06:80:dd:d5:11:c4:68:70:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Mar 2 05:00:41 2026 GMT
Not After : Mar 3 05:00:41 2026 GMT
Subject: CN=01e98ae704f5ee54ad2dabf86022cce34e5b7bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:9c:3c:a7:77:f7:77:5c:d7:e6:49:e2:3d:
02:a2:b7:36:ff:96:00:ed:2f:29:2f:86:27:a9:9c:
bb:ee:b8:d8:a2:f9:00:f1:31:38:f1:9f:f9:85:8d:
87:5d:bb:77:84:f0:68:a8:5f:18:91:3e:93:aa:3d:
13:49:de:cc:2d:df:9e:7f:f2:ae:23:3b:3d:2b:41:
56:e6:c3:8a:92:ba:56:b6:61:14:87:30:ec:bf:e7:
54:aa:e0:66:5a:0e:ae:eb:52:4a:19:e3:f7:1e:1a:
28:ec:31:d9:89:a3:62:96:ff:8d:57:32:87:07:99:
0c:62:39:da:c0:40:1a:f2:19:22:ed:4a:fd:14:41:
e8:89:3b:12:0c:39:e1:ba:01:75:cb:c3:66:f5:a8:
89:21:e5:4f:58:56:47:00:38:11:84:f4:f0:dd:8f:
b4:bc:5e:ec:bf:46:9f:3b:bf:be:5c:e8:84:3c:29:
f5:7b:8d:4b:9a:f7:73:86:df:74:85:c1:90:06:f0:
be:d1:15:f2:b7:23:46:25:48:4a:e1:71:5e:ca:bd:
a3:b6:af:34:0b:c9:45:df:09:84:1f:81:85:a3:86:
e9:66:04:54:de:a8:56:f7:39:57:20:76:87:7e:d6:
43:f8:92:76:68:ef:db:6d:21:ee:41:f7:ae:ee:77:
6c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E9:8A:E7:04:F5:EE:54:AD:2D:AB:F8:60:22:CC:E3:4E:5B:7B:EE
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1b:a9:6e:40:2f:79:2b:66:e6:f8:e2:e0:bd:1c:ef:e5:72:
65:ff:82:9b:07:7a:28:c8:a1:d5:55:7d:69:f7:e2:a3:d9:53:
96:55:61:17:82:5e:52:41:f1:e4:07:ca:9c:62:5a:4e:84:2d:
0e:51:d9:fc:a1:27:d3:0d:77:4f:a1:77:fb:93:82:11:79:53:
a7:8e:0f:06:3f:13:cc:47:49:27:bf:4f:91:b2:af:46:ba:b9:
cb:39:94:53:ed:f4:ce:7b:37:fd:c6:c7:54:c2:c0:de:5e:f6:
b1:04:f3:b6:f5:72:ee:cd:68:f8:f9:3b:6b:8a:cd:1c:24:ea:
85:db:ca:39:cb:66:f7:57:62:05:fe:4a:ff:66:07:94:d9:26:
6f:9e:e3:b0:d5:f0:ba:cc:6f:3f:f7:78:bd:81:a7:55:15:81:
1f:c8:3b:dd:60:f9:8c:71:ae:a5:2a:c8:08:b8:08:cf:c5:14:
97:fe:4f:5f:f9:94:d5:4d:8e:cf:57:09:7a:d2:43:43:7e:04:
88:c2:4e:08:25:8c:29:6c:17:88:06:18:f5:d3:66:5c:c7:ff:
63:50:9f:9f:fc:ed:f4:c9:7c:03:79:d6:ae:46:d2:44:8e:df:
f6:b9:64:5a:8e:27:07:a7:84:e5:d2:ff:27:6b:d4:d9:b9:e7:
76:b5:0f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:04 2026 by rpki-client