Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier: AOWStclPiqUGGCvDwWCyl0B/7rNjer7O5udO8Ovvu48=
Subject key identifier: 41:56:E6:00:21:07:4F:5C:86:74:14:EB:7E:CD:50:EE:EC:36:E3:51
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 019E1CEB51BB636FAEA9326E74CBBDC7CFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number: 12B9
Signing time: Tue 12 May 2026 16:00:44 +0000
Manifest this update: Tue 12 May 2026 16:00:44 +0000
Manifest next update: Wed 13 May 2026 16:00:44 +0000
Files and hashes: 1: 7bTTYk_Oq_ZApCkkIYsewzN1n20.roa (hash: WwMfICexdyPcR8HhkOfl7+rmvQQnanKC9rFr0nbj7UI=)
2: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: EnOeqI8IcZ5SS1L1qQ9IeV5Pw9feMEBwSCzr7lO/f4c=)
3: wsRYfWg6DsSzH9Q3tVso7U8el9Q.roa (hash: Xq2nLBLB6mAPwQgJf30OZP4onb0gGELFmiDalFNQA4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:51:bb:63:6f:ae:a9:32:6e:74:cb:bd:c7:cf:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: May 12 16:00:44 2026 GMT
Not After : May 13 16:00:44 2026 GMT
Subject: CN=4156e60021074f5c867414eb7ecd50eeec36e351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:db:9f:76:30:ba:a0:82:19:be:d8:63:0d:
28:fb:ed:a2:77:5c:4a:2a:98:7c:23:15:9f:8c:bf:
db:af:3d:68:7f:21:1e:dc:7c:bd:8c:53:9b:64:6a:
91:52:7a:5b:7c:25:22:3d:2f:84:be:9f:35:41:60:
b0:71:fa:90:e5:fa:bb:99:e6:67:77:ca:74:5d:5b:
ba:e5:36:d7:68:e7:35:03:55:c0:d8:6f:76:00:03:
f9:59:37:c4:d1:fc:e6:8b:b7:ae:5f:99:b9:8e:c8:
d3:30:0b:9f:74:de:26:45:f4:0e:bb:52:86:64:67:
b6:d1:e2:48:6e:f0:2f:10:48:d2:5b:c1:51:93:c4:
2d:7a:1a:64:c9:77:d9:ef:75:aa:ac:5b:07:e1:76:
c3:2f:40:d5:62:9a:14:45:d1:02:40:0e:51:31:9c:
0f:16:18:37:10:38:aa:99:6c:b7:7a:ad:04:c5:ba:
9c:61:a7:54:1b:32:97:21:71:5b:94:5b:68:c6:36:
bc:99:41:b2:a4:40:5f:79:3f:da:fe:6f:8b:49:d1:
41:2f:55:78:2a:c9:41:ab:75:26:0b:19:56:78:dc:
cd:fa:c4:a7:fa:3b:d6:13:f4:3f:31:ac:bd:4d:20:
70:18:42:72:6b:11:32:7a:ac:97:3e:e0:6e:81:b4:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:56:E6:00:21:07:4F:5C:86:74:14:EB:7E:CD:50:EE:EC:36:E3:51
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:29:38:9a:33:d4:3e:4e:20:f6:f6:2a:2e:62:e1:89:3b:6c:
19:28:43:c4:e2:8a:83:f6:c1:c5:21:6f:1d:e3:da:19:68:f3:
9d:78:b9:53:ad:3f:f8:f9:12:19:94:90:b4:78:99:e5:fd:57:
6e:2d:82:38:88:5a:d2:28:1c:3b:b6:60:80:ac:8b:38:2f:3d:
12:6a:47:37:28:5c:6e:40:eb:ba:28:02:a2:1e:9d:6c:31:b4:
15:94:2d:54:4a:81:3a:73:27:2a:5d:ac:54:62:c8:5c:fc:ab:
b0:7d:0b:93:e1:11:28:59:c3:4f:47:60:67:2f:ae:05:e5:b1:
75:e8:ef:d8:dd:d2:1e:6a:1e:77:02:42:de:c8:9c:fb:26:ec:
13:a6:7c:3b:08:ee:2d:68:5e:d9:7f:ba:3d:bb:21:65:13:d6:
8c:1e:38:98:99:0a:ad:62:4d:1b:e2:67:78:65:e4:c4:1f:cb:
ef:a4:4c:99:b6:8d:82:74:3a:8a:36:2c:8e:e4:bf:fb:73:ee:
58:1c:1e:06:b7:1f:09:48:7b:61:a7:1e:18:70:51:5c:65:e7:
38:52:36:5b:ce:7f:02:9d:c8:a5:e8:1d:01:73:fa:e2:c6:58:
91:5c:47:a3:5f:81:a5:60:b0:db:f4:38:cf:56:7b:63:58:e6:
a3:4f:b7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:40 2026 by rpki-client