Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
File: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft (raw, json)
Hash identifier: 2rNMBGk6WLr7wSkg3BK5Put4s3eu6GNbibEGd7RyABw=
Subject key identifier: D0:47:E6:12:4A:5D:20:BC:F5:DB:AC:87:E4:6C:15:50:DF:1E:04:26
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 01A0CAB4E845AD56F52EF36E153E33755882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
Manifest number: 0DCD
Signing time: Tue 22 Sep 2026 20:00:48 +0000
Manifest this update: Tue 22 Sep 2026 20:00:48 +0000
Manifest next update: Wed 23 Sep 2026 20:00:48 +0000
Files and hashes: 1: 1vE6-KH4MdU7N2hv_um52mZD9OU.roa (hash: F9xU+2/qqKu1d965ooJJSZMmafwKTsHI7SAoZJI74E8=)
2: APfc6JNEU6PdULzFR5BxZMOlk6o.roa (hash: Hd78Iessw8olpkO1cT25elJbp1Ay+8DdMA34bYWrxMs=)
3: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl (hash: rJFv86nNUAvRCKdH3Y1LLAN/LmfRuZlLyoMeWpJ4gmc=)
4: DELZK5MwczuVxzj3X4of5HLO9Vw.roa (hash: GLmFQqmMgF4LsrUkccEanCYe2QvwLzSjgMEN7Qp7IPs=)
5: L9GldWcZhP-VtwQ-IrVBJjRxbvQ.roa (hash: i/vLhAVFm6Bpc/WiiZN81LZdAjQFDptqMqTGBS6saY4=)
6: MO2X-hKSVMmkU2wdt5M6rkMSJsQ.roa (hash: qgMxb6qJVo4sk1tLNRwm1PF/2ClIOldHiE0/SLkAAbQ=)
7: frbnQVPA6AMYX2oD_gTcyZulwfY.roa (hash: N+i+LJivHuJoPXNh9pH2cdBw0saTiGMUT1bVhtTAkgs=)
8: pttNsriY8yChB9BrtVjJhNIJyPY.roa (hash: tXY2XaK++NV5rGr1J0Fs5zNa7PQ/vWbv79WLgy93nbY=)
9: z_HTT3a31vAkFtPvUQtcTev0iQU.roa (hash: +OTmOuEmOD6LWIpLkfhzeYNBT0QjMtJvvZDBWFxGkTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:e8:45:ad:56:f5:2e:f3:6e:15:3e:33:75:58:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Sep 22 20:00:48 2026 GMT
Not After : Sep 23 20:00:48 2026 GMT
Subject: CN=d047e6124a5d20bcf5dbac87e46c1550df1e0426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:32:77:4a:b0:54:d5:71:21:2a:6a:80:86:
52:d7:65:fb:c0:e8:de:2b:95:e0:cd:90:0c:2b:55:
0d:aa:0b:10:ec:d5:be:8b:d7:72:b2:58:67:7f:b0:
9e:22:f5:db:c2:4d:57:f8:1c:1a:77:3d:d9:13:d0:
76:9a:26:43:f6:28:f1:be:0d:c2:bc:30:64:3d:eb:
2d:1e:63:3a:c5:ce:ee:09:87:65:bf:6b:92:78:a5:
11:bf:9a:f3:28:69:9e:4f:03:4a:8c:d4:e6:f6:9d:
ef:53:1b:30:03:73:37:be:22:de:25:b7:2b:f7:7c:
18:24:dd:0b:c8:5a:cf:66:37:bf:0a:9e:e8:41:bf:
90:09:e0:6d:6f:48:97:80:b9:74:95:79:e6:15:60:
af:0a:01:17:62:19:d6:fe:41:80:7f:a8:22:1d:87:
73:48:86:ad:72:65:fa:6a:dd:b6:90:58:e2:42:81:
75:64:38:73:62:13:b9:67:20:56:dd:93:26:d8:8c:
17:b0:c1:99:ee:69:50:8c:54:48:26:6d:9d:80:a3:
bc:94:8f:55:14:09:02:78:25:da:b5:59:fd:b3:14:
b4:79:4b:a9:15:12:e2:cd:05:a6:6a:6b:47:60:09:
4e:d5:21:0a:b6:ef:f5:31:79:29:a9:43:f5:08:84:
49:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:47:E6:12:4A:5D:20:BC:F5:DB:AC:87:E4:6C:15:50:DF:1E:04:26
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:09:f6:c9:63:37:15:12:d6:7d:c8:09:e9:dd:9b:d0:0c:89:
11:4b:b5:92:3d:2b:81:ab:5e:c9:30:6b:25:00:11:da:18:c0:
e2:7d:d7:d8:45:81:7a:ca:03:a9:7d:d1:cf:bf:49:d1:32:91:
ee:cc:c7:e0:c2:3a:0d:4b:87:be:96:c6:c9:b8:db:2f:99:31:
11:9c:b4:ad:e1:fd:c7:cd:02:da:0e:2a:be:db:b3:49:ec:62:
be:ab:f6:50:1c:71:0a:cf:cf:7c:33:cd:41:08:3a:e3:47:af:
64:b1:e0:4a:7a:65:7b:c9:1c:7a:02:cc:3a:b2:e8:74:76:0f:
86:e9:a5:ae:4a:48:de:1b:10:ed:b6:69:46:e7:8f:3d:a2:9a:
dd:88:09:09:3d:d6:30:10:02:14:f0:3b:8a:82:9a:19:b4:7a:
5f:2d:f9:a3:f5:a2:22:19:96:3e:47:22:a3:a3:9d:f5:d6:32:
d3:c6:a2:49:89:a7:48:6a:47:19:d7:50:eb:62:f6:3f:1e:d8:
a1:00:e8:fd:7d:5a:6e:42:f1:61:60:d7:aa:b4:e1:e0:9c:d0:
c3:74:ec:44:40:91:ba:f6:13:1d:25:21:36:56:2c:5f:ff:c5:
b3:ef:b6:9c:f2:90:29:05:11:f7:01:02:5a:94:2b:f2:01:e0:
54:8e:64:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:11:38 2026 by rpki-client