Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier: +NW2YtjhxFLMMp12q86Ngk4/UjgKe8PrIWOY3zGZep8=
Subject key identifier: 30:23:9D:5D:2C:C2:DD:63:A2:87:60:DD:7B:FE:6C:CF:F5:C0:37:26
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 01A0C66A0374FDED69547A3C0017EFE307B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number: 16FF
Signing time: Tue 22 Sep 2026 00:00:31 +0000
Manifest this update: Tue 22 Sep 2026 00:00:31 +0000
Manifest next update: Wed 23 Sep 2026 00:00:31 +0000
Files and hashes: 1: 7Jk5wu_kJc-zPPGcp7O62JhhrJQ.roa (hash: SK08RqLCGeZwklsNV3oFj4q7+ObIhzDMa6BPNd7d8VI=)
2: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: zKmT5dBxhA8vkYquoA3h7b+evhApn7yn2GRf+nY0TEw=)
3: nFf_xFZifK1O6AxBYllnzUi_i3U.roa (hash: wCPglifyZSCCde6+ZRBNVX/1pM0oJBcsybUWgeFRMfQ=)
4: yQQiLrOw_IC4fSBdg8XdSt3Qv8c.roa (hash: /G23HmdFMWbuOSonlYM0rBeEVBVw1dDwE7uR//SpzMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:03:74:fd:ed:69:54:7a:3c:00:17:ef:e3:07:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Sep 22 00:00:31 2026 GMT
Not After : Sep 23 00:00:31 2026 GMT
Subject: CN=30239d5d2cc2dd63a28760dd7bfe6ccff5c03726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:91:05:81:12:bc:df:94:aa:97:b8:02:0a:
33:ab:a9:b5:ec:a1:d0:a9:01:0f:d9:4c:51:17:86:
a1:1a:83:dc:22:82:98:a2:ab:21:7e:8c:5c:c6:65:
c6:57:f0:72:aa:ec:9d:4f:72:9b:12:a0:03:d8:ba:
df:55:1e:97:66:fe:25:81:09:ea:32:51:02:3f:96:
6a:ef:60:7f:b0:2a:ac:76:a7:4f:07:26:24:00:b3:
06:88:23:a3:3e:8c:3c:8c:b2:61:11:75:9d:03:5f:
d4:5c:5f:97:9d:bb:6b:3a:6a:13:da:31:3c:15:ac:
09:81:bc:bf:f1:51:40:22:f3:66:e1:59:8f:0c:5c:
0a:33:45:e3:93:f3:22:ad:dc:87:0d:5a:a2:c2:47:
65:2d:95:c9:e1:ef:38:6f:93:1a:5b:e0:d9:0f:58:
00:a7:92:af:77:fd:d3:c5:fa:fa:de:44:6d:e4:7d:
11:14:37:15:74:87:79:da:3f:c3:6e:3f:ee:42:d6:
dd:64:a9:9a:ed:87:60:d2:68:2b:a5:e7:7d:f9:3e:
9f:9c:ee:1a:c7:c6:29:5d:44:b4:39:b2:09:c2:0d:
5f:6a:7b:68:79:19:7f:3c:bf:3e:5f:d3:05:14:8d:
7b:08:78:1a:13:0e:20:2c:12:de:95:f8:df:f1:d5:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:23:9D:5D:2C:C2:DD:63:A2:87:60:DD:7B:FE:6C:CF:F5:C0:37:26
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d4:2c:e3:03:c3:76:f9:a3:37:e5:d9:76:26:65:0a:72:60:
07:51:ec:5c:dc:30:a4:2d:16:ce:96:c6:71:4a:15:70:f9:81:
22:02:85:15:84:b3:b3:e3:cd:6a:39:f5:c9:94:3f:e3:13:da:
d5:c0:ef:8f:bb:ce:3e:68:1a:bf:ac:4b:39:ec:36:b0:7c:c0:
2e:3c:6b:74:27:76:37:1e:bf:e2:e1:59:a3:77:8e:78:de:a2:
e3:eb:26:49:01:78:a5:4d:57:b3:b3:5e:98:59:9c:f6:60:ce:
97:3f:ef:12:80:db:b1:18:67:bb:a3:3c:eb:14:8f:27:c2:8f:
6f:8d:4a:17:2f:04:21:29:82:da:db:ab:92:01:9e:07:82:6e:
e5:90:e8:4a:83:ca:9f:af:29:7b:f0:7a:fc:4c:87:d6:bb:d0:
de:a2:b7:e7:b7:d2:6a:c5:16:c8:36:fc:4e:12:3c:13:95:d3:
3a:9f:1b:fa:50:80:ab:dd:2f:e1:77:2c:90:d8:34:e1:6c:6e:
35:eb:e2:c3:50:b8:07:8b:4a:0c:c3:65:81:cd:a1:80:57:7e:
61:4b:cc:73:6f:72:88:b6:b7:1f:3e:d9:64:4e:d2:45:bd:1b:
16:21:89:99:75:55:be:a2:1f:8f:f1:3f:71:f9:53:1c:ef:21:
8f:1c:01:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:29:29 2026 by rpki-client