Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.mft
File: 1-azwLBziBnz6SspNf9HLADf94vI.mft (raw, json)
Hash identifier: 3sS5b6VfI5UDtzuZ4Aflz03UOPNCG/DWR7RlXGLQCZg=
Subject key identifier: 6A:68:8D:27:F1:78:28:75:9F:16:DE:DA:C1:67:9A:FB:9F:CB:73:FC
Authority key identifier: F9:AC:F0:2C:1C:E2:06:7C:FA:4A:CA:4D:7F:D1:CB:00:37:FD:E2:F2
Certificate issuer: /CN=f9acf02c1ce2067cfa4aca4d7fd1cb0037fde2f2
Certificate serial: 01A0E13D254993BA7CBA171433D43FABD536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-azwLBziBnz6SspNf9HLADf94vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.mft
Manifest number: A4
Signing time: Sun 27 Sep 2026 05:01:15 +0000
Manifest this update: Sun 27 Sep 2026 05:01:15 +0000
Manifest next update: Mon 28 Sep 2026 05:01:15 +0000
Files and hashes: 1: 1-azwLBziBnz6SspNf9HLADf94vI.crl (hash: ucR7XP5zXWSUuybtdbHLSFPNK3MJEzgNMHXTwHrRXHg=)
2: Jszha3pRavrqhLYF9llULjRDVPA.roa (hash: sdO9tDDPhGXLEWym/ewpstRJHKQA4MEXZOgnSWY5UnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-azwLBziBnz6SspNf9HLADf94vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:25:49:93:ba:7c:ba:17:14:33:d4:3f:ab:d5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9acf02c1ce2067cfa4aca4d7fd1cb0037fde2f2
Validity
Not Before: Sep 27 05:01:15 2026 GMT
Not After : Sep 28 05:01:15 2026 GMT
Subject: CN=6a688d27f17828759f16dedac1679afb9fcb73fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:c6:79:69:52:3e:42:7d:37:bc:00:01:e3:
82:8f:4b:08:37:ab:93:e7:7c:2d:ca:33:fb:5d:2d:
88:5e:6f:0f:f9:e1:e1:24:7d:35:51:09:83:72:25:
fd:09:29:f3:26:9f:45:fc:fc:c7:55:f5:3f:96:4f:
58:55:1b:93:e6:01:cf:6d:80:2f:d7:51:e1:04:d7:
d7:4f:00:0d:8e:c7:e5:c0:c5:8a:35:8e:13:b8:5f:
55:b1:10:68:31:bf:f0:6c:ac:96:cd:72:98:a4:55:
a2:55:7a:72:35:d0:33:a4:b1:ed:4e:83:96:42:77:
dc:c5:75:78:e9:48:40:7f:e7:6e:70:e6:15:42:44:
ae:d3:41:3a:cc:0a:ac:d8:76:0a:63:5f:f7:ab:e4:
ac:12:bd:b6:82:a7:c1:7e:b3:77:55:60:f3:99:69:
cb:a1:48:a1:af:8a:a4:3c:b9:0f:10:ca:b8:a5:e4:
33:33:a0:d5:c7:46:a3:31:ae:2c:b2:a5:c0:62:2e:
1b:76:24:fa:47:b4:0e:81:55:ec:b8:51:00:91:87:
dd:d3:5c:ef:c6:f2:fe:cb:cd:dc:66:0a:35:4d:a9:
64:51:8f:61:33:57:23:57:a4:48:41:b1:27:5d:be:
e7:e1:d0:f9:52:6c:c4:a9:39:d1:c7:4e:f6:97:6d:
91:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:68:8D:27:F1:78:28:75:9F:16:DE:DA:C1:67:9A:FB:9F:CB:73:FC
X509v3 Authority Key Identifier:
keyid:F9:AC:F0:2C:1C:E2:06:7C:FA:4A:CA:4D:7F:D1:CB:00:37:FD:E2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-azwLBziBnz6SspNf9HLADf94vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1c:ce:cb:6c:50:ee:f0:a3:3e:74:93:4d:ae:87:5b:3f:2c:
3a:a2:8c:74:a6:23:a5:d3:04:fc:3f:3f:1d:a0:94:f2:c2:99:
b5:4f:56:6d:f7:30:bb:15:2f:ab:4c:0c:03:87:a6:14:6c:a1:
04:b7:d4:fa:4d:ee:16:86:ad:29:e1:da:d8:50:0d:45:7f:8c:
cd:83:8d:0b:43:9c:98:12:1d:4c:5c:78:f2:b7:2d:4e:c8:b5:
c7:51:b6:ca:06:30:e5:7e:1c:2b:39:72:28:ef:a9:7f:95:21:
03:f5:41:c6:30:07:86:fa:7f:15:c0:48:50:a8:bd:19:2a:83:
26:d5:38:17:76:56:6d:12:18:81:53:83:35:ed:ff:9b:e0:39:
9b:82:2c:70:4e:60:9c:c8:34:27:26:6a:e1:58:3d:e6:e0:04:
cf:b3:12:8b:53:49:0c:16:70:50:07:b8:3a:fb:90:3b:5e:a2:
a1:65:0f:fa:19:a0:71:e9:d0:b8:27:9d:e1:c1:64:d2:4f:29:
53:cf:49:5e:ba:a7:0d:b2:e9:d5:f4:c1:45:d8:50:fa:98:83:
26:db:17:66:b8:5e:0f:a3:6d:b8:67:e5:b7:c9:c0:13:2f:08:
63:99:44:67:d7:83:fc:34:c1:e9:eb:16:11:fa:c6:32:fa:39:
55:ca:3e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:18:25 2026 by rpki-client