Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier: yz1c/LwAJ5B4EriG0Fn4GgWNEnYQl1zTO0KIB6PQoFA=
Subject key identifier: EA:DF:0C:E4:44:D4:9A:54:D1:2B:D1:09:B1:45:4B:15:4D:09:DE:6E
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 019F9391E0DB8FC6DC0EDA6093642E9CD487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number: 137B
Signing time: Fri 24 Jul 2026 10:00:38 +0000
Manifest this update: Fri 24 Jul 2026 10:00:38 +0000
Manifest next update: Sat 25 Jul 2026 10:00:38 +0000
Files and hashes: 1: 7bTTYk_Oq_ZApCkkIYsewzN1n20.roa (hash: WwMfICexdyPcR8HhkOfl7+rmvQQnanKC9rFr0nbj7UI=)
2: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: 3qBycljeD5gUpdQCgWdPfRaMfc/gycxBnbUtO/KgoPU=)
3: wsRYfWg6DsSzH9Q3tVso7U8el9Q.roa (hash: Xq2nLBLB6mAPwQgJf30OZP4onb0gGELFmiDalFNQA4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:e0:db:8f:c6:dc:0e:da:60:93:64:2e:9c:d4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Jul 24 10:00:38 2026 GMT
Not After : Jul 25 10:00:38 2026 GMT
Subject: CN=eadf0ce444d49a54d12bd109b1454b154d09de6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:af:40:1c:1b:4c:d2:c7:3c:da:0e:43:bf:
da:4b:01:8e:75:90:a7:1f:e4:07:8f:0f:68:eb:78:
e6:b2:f7:55:ca:66:b1:c8:85:01:5b:0d:04:4a:8b:
b8:fd:c9:22:97:25:f9:08:f7:86:72:13:50:52:04:
5d:4f:09:7d:43:f1:b5:70:7b:e7:44:7c:9a:d3:87:
83:72:bc:a4:3e:44:f1:6e:45:9d:2d:c3:19:9f:90:
cc:a1:c6:a2:b5:13:bc:89:cb:59:42:8e:69:62:fa:
92:55:0c:d5:5a:c6:29:7b:73:b2:c7:dc:6e:04:ca:
18:07:2e:7b:8b:ae:6b:bc:ef:07:59:59:04:c1:5e:
ef:42:68:cc:70:26:5e:09:8b:86:35:dc:a0:57:e4:
d4:db:43:e2:77:44:69:65:3a:9b:12:07:9f:7f:b6:
09:6f:b0:b5:1c:31:f6:3d:5d:5a:42:b3:9b:a8:7c:
08:fd:7b:4e:a7:9e:5b:33:65:88:5c:64:02:10:b4:
fe:d8:51:da:fc:96:ca:48:b8:f7:bc:ad:27:26:52:
87:6e:1a:50:17:00:51:0f:ef:1b:96:80:48:30:0f:
14:81:a0:70:bc:53:1d:70:3f:f6:b8:df:49:18:b8:
a1:f0:8c:a0:fa:90:48:3f:3e:fc:df:59:76:85:52:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DF:0C:E4:44:D4:9A:54:D1:2B:D1:09:B1:45:4B:15:4D:09:DE:6E
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1c:3c:8b:3c:17:10:33:61:75:f1:5c:1d:e6:38:28:79:ac:
2d:ff:eb:9d:96:c2:45:73:4c:77:ae:25:e9:73:2c:f3:4b:0f:
be:e8:67:4e:ec:f8:50:b4:16:f7:26:1d:ef:ec:2a:ba:33:c6:
f7:11:a8:52:84:51:cd:08:20:3e:39:4e:e8:5f:40:01:21:c4:
19:45:61:7e:f3:55:82:ef:44:4a:87:97:9a:7f:ab:1a:6a:dc:
52:9a:ca:93:42:f0:ba:25:b5:df:0f:34:ec:9a:f6:c2:06:ec:
a8:c4:f0:9b:9f:26:9c:80:73:15:12:16:7c:1a:d0:8c:c4:35:
8c:70:82:cf:fd:31:88:b4:f5:a7:7f:2c:12:5f:55:9a:14:a2:
09:e8:f6:68:0b:18:fc:ea:51:3a:3e:13:df:cb:39:b5:d1:68:
9d:c6:bc:80:d9:aa:06:f4:8b:43:24:4a:d9:9a:1f:bd:f0:88:
73:66:8f:ba:e7:02:e8:e0:d4:5d:09:f5:96:ca:fa:a3:45:70:
9b:3f:57:27:01:a6:50:4e:c4:58:40:90:2c:d9:97:17:22:20:
19:c7:a7:ea:b6:5d:fd:a3:7d:d3:16:9b:d8:8b:52:cc:2a:7f:
2d:44:1b:55:f1:c6:bb:01:16:e2:88:58:e3:69:f2:f8:33:20:
86:78:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:35 2026 by rpki-client