Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier: LAqMaLB7PZIZVJemhTeGsOdZAYWjacLn0pMrpypc/AQ=
Subject key identifier: 0A:8E:8A:C8:BF:73:89:74:3A:C1:51:8E:9E:45:50:D4:83:26:BF:50
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 019F91A36384ACBB9A36D139E3F47C21D30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number: 137A
Signing time: Fri 24 Jul 2026 01:00:31 +0000
Manifest this update: Fri 24 Jul 2026 01:00:31 +0000
Manifest next update: Sat 25 Jul 2026 01:00:31 +0000
Files and hashes: 1: 7bTTYk_Oq_ZApCkkIYsewzN1n20.roa (hash: WwMfICexdyPcR8HhkOfl7+rmvQQnanKC9rFr0nbj7UI=)
2: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: B4TBKTv7tNshA/TT8fulvtFyW3z8gpF3/vYL8cNYnGM=)
3: wsRYfWg6DsSzH9Q3tVso7U8el9Q.roa (hash: Xq2nLBLB6mAPwQgJf30OZP4onb0gGELFmiDalFNQA4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:63:84:ac:bb:9a:36:d1:39:e3:f4:7c:21:d3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Jul 24 01:00:31 2026 GMT
Not After : Jul 25 01:00:31 2026 GMT
Subject: CN=0a8e8ac8bf7389743ac1518e9e4550d48326bf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:37:f2:ec:d0:2e:29:e8:cc:44:3a:42:53:
b2:de:b5:f7:95:64:73:e4:d2:06:15:cc:84:79:51:
84:59:3d:d8:52:57:ad:cd:ba:37:11:58:6f:0d:8a:
3b:63:00:20:c6:36:4f:d2:84:4c:6d:44:ac:ea:1c:
da:fe:38:19:31:ef:18:ed:0f:25:73:94:55:ce:08:
e2:67:86:33:bb:16:a9:33:9a:fe:63:18:04:53:f6:
e6:69:e0:d3:0f:85:a2:a0:30:f3:75:89:b2:1a:bb:
72:d6:d4:ba:3f:e0:a0:ed:d1:d5:5c:26:64:b1:bd:
69:f3:cb:9c:5c:85:62:2a:5b:0f:63:1f:df:4c:74:
f3:30:62:8d:84:a1:34:1f:85:80:ab:0c:c8:28:c5:
2d:c5:e7:46:60:e4:54:c2:a1:90:8d:07:1f:a1:ef:
c7:62:11:3a:b9:6e:08:f0:31:20:35:36:a7:04:a5:
2e:eb:79:3e:85:fe:e9:72:78:09:9b:1a:a1:6a:34:
91:e9:fa:08:13:ae:36:6a:5e:f0:d6:d8:2f:ca:68:
9e:47:26:56:b6:77:19:11:cb:97:7e:60:01:4c:3b:
18:03:92:da:a8:b4:03:c9:de:46:25:77:2f:96:8a:
98:27:fe:57:ff:84:1d:d8:23:8e:d4:49:a6:ed:fb:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8E:8A:C8:BF:73:89:74:3A:C1:51:8E:9E:45:50:D4:83:26:BF:50
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6c:08:d7:7c:d3:15:1f:b6:ad:6f:68:24:ad:2d:96:36:02:
a4:e2:f5:4a:28:fc:ec:52:cb:ea:73:6c:42:a4:43:c7:79:71:
79:6f:08:f0:40:50:b1:6d:1f:5b:7e:dd:fe:93:ca:0b:91:7c:
d3:e8:0a:ef:d5:43:44:74:b4:db:e4:51:c3:14:ae:7b:5c:13:
aa:f7:02:3d:84:94:f2:9a:78:34:fe:cd:55:0e:0e:64:82:6b:
d8:ed:a3:ad:39:27:4d:2e:86:10:14:f3:ac:ee:c1:ad:94:f8:
60:3b:d2:1b:df:cf:ce:65:2a:8f:89:12:ba:a2:e2:32:00:40:
bd:55:f9:73:3b:8c:2f:87:52:6f:1c:20:ea:85:f4:ed:3e:b0:
42:51:59:19:49:8a:a0:40:f8:f7:6f:d2:a3:91:11:c5:36:d2:
b2:f0:0e:a4:53:aa:1b:39:c3:11:1f:e5:dd:17:27:3c:80:00:
de:f9:de:dc:30:ee:b3:49:c2:aa:38:09:58:d5:53:f9:ee:f9:
c2:93:97:0b:30:01:fc:7b:a3:2f:20:f6:96:02:41:62:41:2b:
78:d0:af:32:f0:d4:76:9b:57:9b:b7:93:cc:30:df:df:f7:2d:
49:a6:68:d7:f8:2d:8c:c6:87:2e:55:2d:82:48:a2:55:49:ac:
a9:df:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:06:30 2026 by rpki-client