Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
File: AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft (raw, json)
Hash identifier: zNv6yBuiKBRi7sOLfhf9Z5eas4yW2BShzUaNPbFqq58=
Subject key identifier: C1:38:B6:AF:06:48:26:C9:F8:E1:89:C1:CF:6A:F7:C5:7E:F8:01:49
Authority key identifier: 03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
Certificate issuer: /CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Certificate serial: 019D9AAC59DE5DF3B1C2CE2889756803F536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
Manifest number: 15D0
Signing time: Fri 17 Apr 2026 09:01:19 +0000
Manifest this update: Fri 17 Apr 2026 09:01:19 +0000
Manifest next update: Sat 18 Apr 2026 09:01:19 +0000
Files and hashes: 1: AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl (hash: sg5bBUP2nmq0Z5jWWC0qz9n4lO8SydvEOi9NhMKTykA=)
2: gaiwvOzwGssGcUjJBpcvV87z0fc.roa (hash: EOZcdS1ssPA9VVKtbtDUZt9s5YRREorJf+iX12uBL2A=)
3: gnudez_bNU8zFn_PhQuJZ7Kk7ZI.asa (hash: yRjHxgLUV/5Q32Nspr0sxDttJcUcfnlqnq+9X75wxOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:59:de:5d:f3:b1:c2:ce:28:89:75:68:03:f5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Validity
Not Before: Apr 17 09:01:19 2026 GMT
Not After : Apr 18 09:01:19 2026 GMT
Subject: CN=c138b6af064826c9f8e189c1cf6af7c57ef80149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:ed:1e:ce:9a:b0:99:5a:aa:32:5b:6e:63:
da:c3:0c:e6:b9:95:45:7b:02:ab:1a:5f:9d:d5:cc:
5a:54:ff:e9:58:d7:4f:4f:8a:f5:70:0f:55:33:d0:
2c:d6:8e:8a:ff:c7:31:cf:25:c2:c1:9b:72:7a:0c:
b8:01:77:66:07:fa:e0:6d:5e:4c:cd:5f:22:59:0e:
a6:d7:49:14:ec:ef:d5:f0:db:11:30:3f:49:fc:67:
63:a0:65:ef:5b:10:fc:07:4d:1d:dd:f2:08:3b:ab:
0e:5b:33:7d:9a:46:53:11:18:6b:a6:ea:29:87:00:
63:3d:c9:68:ab:b6:4e:fd:d7:e6:49:5a:d5:83:21:
bc:54:f8:af:9b:d0:da:a7:ff:cb:5a:66:bd:77:12:
8c:3a:44:99:04:98:5c:f8:17:9f:4d:3c:d8:1b:77:
45:77:13:87:44:58:43:02:59:c5:ef:b0:53:87:3c:
16:8f:a0:fa:7f:71:8e:bc:34:b1:54:3b:42:fa:39:
d0:d2:57:be:26:79:ad:0f:0d:8f:5f:c1:f2:47:3d:
ce:ee:ca:65:24:0b:b7:30:45:5c:ec:6b:b4:37:97:
b4:38:86:f2:76:46:28:66:18:9b:78:08:39:a6:85:
4b:18:3c:c5:eb:2b:76:b4:0c:16:af:84:0e:e3:d7:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:38:B6:AF:06:48:26:C9:F8:E1:89:C1:CF:6A:F7:C5:7E:F8:01:49
X509v3 Authority Key Identifier:
keyid:03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:69:1a:80:df:fb:25:fd:d2:a2:6f:da:ef:bf:ee:af:3d:c0:
05:61:5e:fa:ce:f8:fb:85:33:7a:b7:9f:b6:23:db:0a:fe:b9:
47:3d:8f:11:9a:4e:ca:37:a6:01:02:4d:25:03:79:bf:d5:47:
8d:80:d3:b4:0f:50:67:00:93:88:0f:ef:29:82:83:b9:1f:8e:
95:b3:d0:84:04:9b:73:4f:0a:3e:88:dd:e8:62:57:2f:db:59:
d8:ad:fc:30:79:34:6e:4b:b7:d4:59:f3:d3:20:e5:8d:7a:2d:
6e:8f:c9:f6:b4:53:2b:a9:b7:69:5d:d6:e9:19:f2:2c:5d:9c:
19:f0:1f:ca:b7:8f:57:e1:9f:67:7a:53:2d:5d:00:4d:43:28:
f0:c6:1b:46:a7:33:27:74:fb:2b:17:1d:0f:b2:6b:29:6d:1e:
33:04:95:b8:47:7a:d4:2f:e6:05:d2:3d:8d:65:85:a1:d1:41:
91:6e:78:4d:59:42:49:3d:bf:72:82:9b:2b:7b:27:45:96:cf:
d0:92:71:72:29:d1:28:22:aa:d9:1e:0f:80:73:36:9d:87:66:
b7:f9:36:56:de:36:90:4b:e5:97:c4:b4:3c:5f:29:62:ca:f6:
c4:31:be:21:ad:99:6c:f9:75:62:2d:fa:4b:88:de:e7:0a:cc:
81:77:f9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:35 2026 by rpki-client