Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier: yLe++yfSqRP8vrVkOM2GWtz5DLS3x58PrJaQIXxv/Ro=
Subject key identifier: 94:EA:1E:86:9C:6E:33:D3:8B:EA:EE:12:71:1E:15:2E:9A:A3:64:AC
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 01A0CE5A31F57C19B7F3923D70BB6FEDDAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number: 141E
Signing time: Wed 23 Sep 2026 13:00:12 +0000
Manifest this update: Wed 23 Sep 2026 13:00:12 +0000
Manifest next update: Thu 24 Sep 2026 13:00:12 +0000
Files and hashes: 1: 7bTTYk_Oq_ZApCkkIYsewzN1n20.roa (hash: WwMfICexdyPcR8HhkOfl7+rmvQQnanKC9rFr0nbj7UI=)
2: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: u729Nt1MLduMmCnZwBZx483GbNvJOyP+j1iea8VP2+A=)
3: wsRYfWg6DsSzH9Q3tVso7U8el9Q.roa (hash: Xq2nLBLB6mAPwQgJf30OZP4onb0gGELFmiDalFNQA4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:31:f5:7c:19:b7:f3:92:3d:70:bb:6f:ed:da:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Sep 23 13:00:12 2026 GMT
Not After : Sep 24 13:00:12 2026 GMT
Subject: CN=94ea1e869c6e33d38beaee12711e152e9aa364ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:36:b5:2c:fe:f0:30:5d:6d:18:4b:85:4b:
ea:cf:b4:60:49:c7:55:ff:99:ed:cf:05:2d:6a:2d:
ae:6d:b1:08:11:8a:3d:15:b3:25:2e:8b:8e:e3:73:
82:82:27:73:6b:d2:a9:18:f8:2a:0f:82:3e:30:68:
2a:19:e5:4c:f4:48:31:25:0e:33:63:8d:37:f4:9b:
e0:3d:26:b5:54:b9:2d:37:ee:63:6f:33:fe:cd:5c:
43:49:c3:06:ed:cc:13:4e:12:9c:3b:e6:ce:d4:82:
24:6b:10:78:45:cc:63:44:77:73:fa:ac:90:48:c1:
24:a3:ae:e8:23:92:86:eb:f3:62:23:d0:2e:00:04:
26:7d:11:08:9f:9a:19:81:c5:f4:cb:b0:3e:08:ac:
dd:86:c4:58:30:8b:0a:5e:ba:7c:22:0d:11:f7:f5:
87:2b:d2:5d:93:7b:5b:49:ad:8c:b4:b1:df:45:07:
a9:13:ff:71:8c:f0:56:56:c5:24:90:f8:8e:4b:af:
43:5c:f8:30:54:ba:31:98:92:a3:7b:ed:bb:2b:85:
0e:e4:4a:ad:c7:f3:0c:5d:e1:04:16:a3:17:16:64:
fd:7a:f6:52:fd:cb:4f:6d:6c:eb:51:47:8e:0b:83:
30:ba:db:d7:a8:44:7b:dc:66:79:19:43:d3:8f:b3:
7c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EA:1E:86:9C:6E:33:D3:8B:EA:EE:12:71:1E:15:2E:9A:A3:64:AC
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e9:a2:e2:da:2d:9b:22:20:ca:28:cc:33:75:d8:cf:1d:86:
f2:35:90:e8:8f:d5:e3:f4:f9:c1:94:36:77:56:d6:e2:1f:5a:
62:97:3d:12:b4:9b:7c:3a:9b:12:08:e5:1c:7c:51:dd:58:0b:
01:b8:a0:46:f3:45:0b:5a:c3:8a:89:c9:ca:38:56:ec:5c:a4:
e9:05:5c:8c:f1:18:8c:cf:32:bc:88:89:29:e2:c3:f8:a9:54:
54:06:cc:f3:83:02:ae:73:6a:e5:ca:eb:2b:6f:1c:9c:bd:c7:
cb:e7:ba:a0:d7:0f:cd:f1:d8:cf:8e:46:75:ac:3b:fe:01:e1:
8a:e5:7c:ac:b0:59:df:44:2c:67:d7:86:17:64:fc:2e:4e:aa:
ea:60:47:67:97:c5:0e:a0:b6:63:99:fe:d2:e2:5b:cb:e2:6e:
d3:51:a7:43:36:50:b0:5f:ff:84:ee:53:ef:75:8e:2d:de:7d:
cb:c0:45:45:d9:af:51:df:0a:17:f2:38:5b:fa:d6:93:e4:b5:
d9:02:0d:1d:51:7f:f9:38:e0:c1:de:34:c7:25:b9:e6:cc:de:
af:12:2d:f0:7c:d4:f6:e2:2c:25:3e:c3:d7:2c:31:4e:c0:b3:
af:ec:8c:50:c9:f1:32:42:5a:98:8f:d2:6e:b9:bc:7c:f3:25:
b7:d1:36:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:06:26 2026 by rpki-client