Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
File: AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft (raw, json)
Hash identifier: R1U8ip4Twwwa/5bF+TTlhGzf05ndvhF/qo4JWBXBFBg=
Subject key identifier: FF:81:58:AA:29:CA:C0:35:E2:68:D6:62:C6:DD:3A:2E:F6:A1:92:D8
Authority key identifier: 03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
Certificate issuer: /CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Certificate serial: 019FA9AC3C421893372D0FE1057EA6FB446E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
Manifest number: 16E1
Signing time: Tue 28 Jul 2026 17:01:04 +0000
Manifest this update: Tue 28 Jul 2026 17:01:04 +0000
Manifest next update: Wed 29 Jul 2026 17:01:04 +0000
Files and hashes: 1: AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl (hash: lxAlYkyJKy6VvUhnvQhrIjMiroNcHWrIVHR5VukGIPg=)
2: gaiwvOzwGssGcUjJBpcvV87z0fc.roa (hash: EOZcdS1ssPA9VVKtbtDUZt9s5YRREorJf+iX12uBL2A=)
3: gnudez_bNU8zFn_PhQuJZ7Kk7ZI.asa (hash: yRjHxgLUV/5Q32Nspr0sxDttJcUcfnlqnq+9X75wxOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:3c:42:18:93:37:2d:0f:e1:05:7e:a6:fb:44:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Validity
Not Before: Jul 28 17:01:04 2026 GMT
Not After : Jul 29 17:01:04 2026 GMT
Subject: CN=ff8158aa29cac035e268d662c6dd3a2ef6a192d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:e0:f1:a6:34:85:94:fa:55:ba:ce:23:bb:
dd:8f:1b:13:40:4b:3b:c9:29:13:38:31:c5:e1:b5:
3f:d1:9a:a6:74:04:13:d2:a1:8f:c8:1b:58:fc:ad:
5a:43:df:27:9b:04:e7:37:ee:72:f2:b0:5a:2f:55:
24:6e:1d:86:7b:6b:a4:5e:7d:2c:de:f0:a7:1b:9d:
9e:f8:56:67:34:95:13:11:a8:c2:a0:52:97:75:c5:
05:04:92:28:ae:a4:f4:e3:81:2e:63:48:0a:76:a4:
ab:d0:cc:2a:cb:0f:25:c1:40:01:8a:f7:81:61:48:
76:5d:dc:ac:7f:e4:2a:9e:1b:5c:2a:10:2f:4d:a8:
90:7b:4a:04:31:a6:50:92:0f:d8:7d:0e:c2:43:cf:
ca:22:56:80:1c:89:90:f7:92:8a:a1:ee:e4:90:4b:
a6:37:38:09:c3:c1:36:65:32:6d:22:49:8e:84:5b:
04:5b:f7:53:7d:88:c4:f6:c5:e5:a5:b4:82:b0:77:
30:ce:15:92:76:88:17:3d:24:df:21:a9:c1:27:41:
71:a6:81:b5:da:27:94:63:08:16:86:e3:f1:22:33:
49:32:3f:a5:30:54:ae:79:c8:e4:d4:f6:1c:52:8c:
c5:8d:35:58:e8:2f:50:93:74:e3:96:d2:de:9c:de:
c1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:81:58:AA:29:CA:C0:35:E2:68:D6:62:C6:DD:3A:2E:F6:A1:92:D8
X509v3 Authority Key Identifier:
keyid:03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:11:4e:e3:96:ae:ec:9b:40:ca:35:0b:c4:5e:06:61:3c:ba:
40:23:f4:e9:ac:ef:18:c2:25:63:9f:7d:07:df:47:81:6c:50:
0d:00:0b:8a:a4:12:36:cd:db:37:5a:2a:20:05:4d:b0:ca:06:
78:51:11:7d:75:95:67:2f:99:b8:58:1d:36:ce:cc:39:6e:d6:
fc:d9:6c:49:58:fa:57:5a:fe:bf:39:3e:7e:bc:b2:5f:c3:a7:
f7:ec:25:06:4b:1a:51:8a:5a:3f:9c:79:62:d5:65:3e:60:e2:
cd:51:c0:c1:4d:8b:d9:47:83:4f:ce:61:2e:57:9e:8d:d7:ac:
1c:71:01:c7:f9:f7:c4:89:38:03:10:22:f9:cd:d7:c4:2c:33:
be:08:3d:e3:90:60:f0:f1:36:0e:32:78:5e:59:8b:fe:e3:0d:
a6:88:1c:45:35:8d:c8:6c:93:6c:7f:74:62:0d:fd:aa:85:ad:
97:fb:46:11:e7:91:d3:7a:c1:7d:44:1e:54:d2:51:2b:e4:38:
e4:d3:8d:56:ca:84:f0:29:c9:01:24:d0:3e:75:7b:05:f3:bd:
13:49:45:4b:7a:3f:c7:0a:db:db:5b:53:9c:51:e6:cd:32:99:
d4:1b:df:32:71:78:82:60:ce:89:1e:4f:f7:7a:c4:15:a0:19:
de:a1:68:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:15 2026 by rpki-client