Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier: E6jNmImnY3iaDthF8iAU1FDWDkJdVytpZcqZNfIOSUM=
Subject key identifier: A7:AA:3E:59:28:77:CE:DC:9D:99:74:10:11:70:4C:42:49:DD:34:4D
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 019D2695DBB830BDE51E8409412008323BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number: 1239
Signing time: Wed 25 Mar 2026 20:00:48 +0000
Manifest this update: Wed 25 Mar 2026 20:00:48 +0000
Manifest next update: Thu 26 Mar 2026 20:00:48 +0000
Files and hashes: 1: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: /scO6Eau7fn9+/2wK1x80YKhkkVAq+YFfTW49+jsP9Q=)
2: wsRYfWg6DsSzH9Q3tVso7U8el9Q.roa (hash: Xq2nLBLB6mAPwQgJf30OZP4onb0gGELFmiDalFNQA4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:db:b8:30:bd:e5:1e:84:09:41:20:08:32:3b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Mar 25 20:00:48 2026 GMT
Not After : Mar 26 20:00:48 2026 GMT
Subject: CN=a7aa3e592877cedc9d99741011704c4249dd344d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5a:d3:2c:ed:a0:8d:ba:7b:8a:0b:ef:04:34:
62:16:a5:f6:4b:21:12:78:f2:66:cd:8e:29:76:31:
01:d3:bb:54:01:a1:35:d5:a0:d7:6c:a3:22:da:f0:
3c:68:5e:69:08:17:e6:5d:ad:e3:a9:5b:5d:e5:69:
18:b4:f1:35:ed:87:e5:e9:66:26:de:a6:64:47:21:
3d:c7:ab:67:86:b8:9c:87:8d:e0:db:3d:27:99:b3:
e5:cc:93:62:43:1d:07:30:58:3f:73:27:c5:86:e3:
af:04:c8:0b:ea:ab:a0:0f:2f:3d:8e:42:21:a9:d6:
02:9c:77:68:6e:ba:4e:d5:3c:ad:ab:79:0b:b6:f9:
a0:4a:c7:93:d8:aa:30:af:be:62:6f:8d:ac:0c:bc:
51:37:38:77:46:33:cb:c3:42:47:b4:72:0b:94:1e:
a7:49:e5:32:50:ed:ff:cc:81:91:80:5d:66:96:86:
b8:37:ab:74:97:7f:78:2b:ea:9a:26:2e:94:0f:b8:
d1:d2:ee:64:84:d0:95:10:cf:1b:56:24:0d:5d:31:
74:a4:58:c6:16:56:13:a4:64:79:59:19:87:35:66:
98:fb:84:08:5c:f3:bf:bb:38:a1:16:b5:4b:d2:df:
cf:dd:d7:20:6e:88:53:a8:74:e6:fb:dd:d1:24:19:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AA:3E:59:28:77:CE:DC:9D:99:74:10:11:70:4C:42:49:DD:34:4D
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:50:0d:8c:b2:a1:49:f4:bc:4c:d7:d6:0d:f7:08:b6:02:7d:
62:0c:fd:17:5c:97:fe:de:f5:24:fe:d5:6f:76:15:57:15:b1:
f2:ec:1c:98:e2:e3:9e:3c:b7:c3:fd:cb:81:b5:7b:80:24:01:
59:fb:50:23:4b:ac:d5:69:66:b0:f7:08:fb:ce:1d:fc:4a:d9:
33:d3:8a:e1:6b:bc:22:1c:ff:4e:3e:f3:52:9b:7c:85:2c:b1:
75:00:74:ab:1c:a5:1e:33:61:20:a6:03:59:dd:0a:01:f2:7c:
27:33:49:c1:5f:4e:89:63:65:41:b9:27:13:a2:75:dc:df:ec:
0d:28:c7:07:56:a6:f5:48:e5:2d:51:be:68:73:a1:92:ae:c5:
bb:d9:20:80:1e:7e:d0:47:0d:b1:8f:94:93:53:97:30:f6:23:
ef:4f:de:e3:97:b7:86:13:a1:1e:d7:ac:15:7f:b6:98:fd:74:
8a:6a:5f:57:d3:61:91:06:c4:bc:84:5f:86:2f:6c:d7:fa:72:
a8:0b:c5:86:22:f1:29:fc:74:9d:7e:7f:5d:e6:ab:78:51:18:
6d:d5:90:dd:94:4e:45:44:d4:06:f7:09:0a:1d:60:c3:d7:95:
7e:4b:d6:62:b9:5c:be:c9:14:a2:72:75:69:c7:b0:e4:11:9f:
ba:ad:1c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:25 2026 by rpki-client