Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
File: aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json)
Hash identifier: JPBGrr0ZaVFRYaKrmpZrJYB1/Tp5OlAEVku+YZPcCBc=
Subject key identifier: 23:06:64:86:F1:60:13:58:65:05:63:6B:8F:21:16:64:F3:DA:75:37
Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
Certificate issuer: /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Certificate serial: 019CAA8FFA2178127043338FF58D662C3357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
Manifest number: 10DB
Signing time: Sun 01 Mar 2026 18:01:28 +0000
Manifest this update: Sun 01 Mar 2026 18:01:28 +0000
Manifest next update: Mon 02 Mar 2026 18:01:28 +0000
Files and hashes: 1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: GRvnQJqsCPMvE166otja9dbp4TFgkZ5Bq/QdsKJNfEI=)
2: uxIFoYaci_ec-DO8z0hezY7ktq4.asa (hash: SDJifCzUIO+4H118O2u0CQ5c1Yer68j64MbpD0n6+XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:fa:21:78:12:70:43:33:8f:f5:8d:66:2c:33:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Validity
Not Before: Mar 1 18:01:28 2026 GMT
Not After : Mar 2 18:01:28 2026 GMT
Subject: CN=23066486f16013586505636b8f211664f3da7537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:9d:9f:aa:27:f7:bd:a7:2f:0c:4d:8c:ed:
46:4c:de:6b:ae:a1:28:f0:b7:61:0d:fd:74:b9:c5:
4a:88:24:1e:27:24:23:dc:d7:87:8c:ed:76:52:c0:
b3:87:4e:e0:5c:05:c8:98:1d:5d:ad:35:5b:53:37:
50:bc:22:2f:4b:ad:c3:f1:50:dc:80:d4:df:e7:4e:
95:78:94:cb:35:5c:09:3a:dd:c8:4e:9d:ec:19:b7:
20:b0:6e:a4:8a:08:ee:ac:70:0b:21:54:79:e2:bd:
5c:98:28:8e:bc:02:ed:e5:a7:2f:59:d7:d9:09:cb:
a2:72:a2:47:32:b8:56:a7:db:fe:ec:b4:ad:7f:05:
fc:d9:84:61:21:00:7d:fd:05:0d:2e:85:b3:fd:de:
a2:5b:8f:af:3f:ff:6f:41:29:ac:c7:9f:23:4b:c8:
ec:6b:26:b9:9b:37:56:6b:0f:42:3f:16:4c:cc:eb:
94:7a:4d:7d:54:43:a0:05:99:0a:2f:f2:9c:cc:21:
71:a7:72:62:94:ae:75:75:3e:57:fd:a6:60:38:07:
a2:cb:b3:0a:d0:62:85:e1:75:5b:38:a9:9d:d1:56:
6c:a3:cd:5b:18:8d:37:7d:2f:e3:58:4a:f4:11:01:
1c:ef:4a:f7:a2:4e:03:2f:9d:93:4d:46:e1:3d:3c:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:06:64:86:F1:60:13:58:65:05:63:6B:8F:21:16:64:F3:DA:75:37
X509v3 Authority Key Identifier:
keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b5:79:b7:38:a4:ca:7b:58:0b:29:d5:d7:84:b5:b9:c6:91:
86:6e:a7:ba:54:f1:7c:fc:ec:a1:6d:49:1f:0c:fd:d6:d9:05:
20:ca:d5:ee:68:ee:6f:a1:23:85:93:37:ed:08:98:97:de:87:
ef:2d:16:a8:cf:48:c1:4b:a9:0b:dc:e7:d0:ef:ff:52:ac:5e:
1b:ad:58:98:22:4c:b1:4b:78:df:1c:14:3e:44:d0:71:78:e1:
7f:13:2e:5d:fd:6b:02:cc:22:33:fb:3e:fb:f6:50:e8:34:0a:
da:e2:f2:7a:ae:20:e5:32:40:ce:8c:3f:f7:8a:fb:04:d2:ff:
ce:8f:14:19:14:9f:5d:2d:31:bf:4a:a7:24:01:6f:98:fe:45:
52:e0:7a:b5:0c:9e:b8:e1:bb:62:ef:fa:82:79:07:93:c1:88:
50:ce:9d:89:7d:b6:bc:14:f6:8c:86:e5:41:5c:e4:ea:01:b6:
31:90:4c:74:37:97:63:b5:ee:e9:2b:aa:63:c8:e4:58:f9:a7:
74:4d:fb:a1:3e:18:05:9e:01:16:81:59:ff:b5:da:97:24:6b:
1d:7a:f3:67:27:d6:13:86:af:d4:7c:26:6c:fc:ef:62:f3:cf:
25:64:c5:25:18:f2:14:fe:27:06:39:73:a1:61:4b:55:7f:5e:
b2:9d:2e:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj/oheBJwQzOP9Y1mLDNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OWQ3NTA3ZjlhZTFjOGIzZmRlNDU0MzNhZWU4ZmNmOTg1
YTIxZmEwHhcNMjYwMzAxMTgwMTI4WhcNMjYwMzAyMTgwMTI4WjAzMTEwLwYDVQQD
EygyMzA2NjQ4NmYxNjAxMzU4NjUwNTYzNmI4ZjIxMTY2NGYzZGE3NTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEidn6on972nLwxNjO1GTN5rrqEo
8LdhDf10ucVKiCQeJyQj3NeHjO12UsCzh07gXAXImB1drTVbUzdQvCIvS63D8VDc
gNTf506VeJTLNVwJOt3ITp3sGbcgsG6kigjurHALIVR54r1cmCiOvALt5acvWdfZ
CcuicqJHMrhWp9v+7LStfwX82YRhIQB9/QUNLoWz/d6iW4+vP/9vQSmsx58jS8js
aya5mzdWaw9CPxZMzOuUek19VEOgBZkKL/KczCFxp3JilK51dT5X/aZgOAeiy7MK
0GKF4XVbOKmd0VZso81bGI03fS/jWEr0EQEc70r3ok4DL52TTUbhPTyAUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMGZIbxYBNYZQVja48hFmTz2nU3MB8GA1UdIwQY
MBaAFGmddQf5rhyLP95FQzruj8+YWiH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjIt
MjI0MTY1ZWMxODBhLzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjItMjI0MTY1ZWMxODBh
LzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebV5tzik
yntYCynV14S1ucaRhm6nulTxfPzsoW1JHwz91tkFIMrV7mjub6EjhZM37QiYl96H
7y0WqM9IwUupC9zn0O//UqxeG61YmCJMsUt43xwUPkTQcXjhfxMuXf1rAswiM/s+
+/ZQ6DQK2uLyeq4g5TJAzow/94r7BNL/zo8UGRSfXS0xv0qnJAFvmP5FUuB6tQye
uOG7Yu/6gnkHk8GIUM6diX22vBT2jIblQVzk6gG2MZBMdDeXY7Xu6SuqY8jkWPmn
dE37oT4YBZ4BFoFZ/7XalyRrHXrzZyfWE4av1HwmbPzvYvPPJWTFJRjyFP4nBjlz
oWFLVX9esp0uzg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:38 2026 by rpki-client