Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
File: azZigAPagkZT2aWJdfaf0rwQa3E.mft (raw, json)
Hash identifier: Z0MGL0uSGRauIMCuYV+srqfCznFAZ6OVrOy83gtdliM=
Subject key identifier: A6:BF:57:93:2D:3C:4E:F1:A9:A3:9A:18:1E:E8:5E:E9:4F:5C:3C:7A
Authority key identifier: 6B:36:62:80:03:DA:82:46:53:D9:A5:89:75:F6:9F:D2:BC:10:6B:71
Certificate issuer: /CN=6b36628003da824653d9a58975f69fd2bc106b71
Certificate serial: 019F9549ED5FB02B4C182429CE38DE5D45B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:17 +0000
Manifest this update: Fri 24 Jul 2026 18:01:17 +0000
Manifest next update: Sat 25 Jul 2026 18:01:17 +0000
Files and hashes: 1: azZigAPagkZT2aWJdfaf0rwQa3E.crl (hash: 7FeWZylPxPOobN2e1gTzkvy6QziEaLrG0ICMu7rvJfk=)
2: xv_mfH_vDLg1Q5L8BpAH47O17uo.roa (hash: DoTOjlCGKN2DqHejuNWU2055DZZTGt7Dy1dJF/wtwJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:ed:5f:b0:2b:4c:18:24:29:ce:38:de:5d:45:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b36628003da824653d9a58975f69fd2bc106b71
Validity
Not Before: Jul 24 18:01:17 2026 GMT
Not After : Jul 25 18:01:17 2026 GMT
Subject: CN=a6bf57932d3c4ef1a9a39a181ee85ee94f5c3c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:cb:51:77:81:2e:c9:fd:4d:67:66:7c:27:
8c:1a:64:a5:3f:22:01:91:39:eb:6b:63:38:4b:dd:
0c:a0:e5:cf:97:3c:04:ac:b8:9c:da:eb:a3:b1:13:
35:2e:1c:ab:89:b2:e6:81:46:1a:2d:9f:64:7e:88:
83:51:2f:11:ef:2f:5a:30:59:b0:07:28:70:c6:32:
0b:d5:27:95:1d:53:37:37:aa:7c:fa:91:89:a6:c1:
67:2a:0d:54:02:f3:94:b2:89:79:63:f9:ed:9b:a8:
b0:f0:11:8d:14:4d:4a:c0:c3:ef:ca:4f:91:9d:c5:
15:f7:22:69:cd:c9:b1:6c:0e:92:45:74:49:34:32:
09:2a:b4:6c:ed:f5:e3:1e:6a:8e:d8:9d:b5:e2:96:
dc:d4:cf:66:e7:47:62:ce:63:fc:f2:35:24:0a:e7:
3c:29:70:dd:10:d6:a7:d4:9d:79:1d:a6:cd:85:4b:
f7:97:95:12:57:66:dd:78:9b:e3:54:18:41:75:1a:
62:0b:ba:95:6a:f5:f6:15:69:46:02:7c:d3:db:c6:
47:7f:bb:39:e8:7d:6a:1c:8e:23:4e:73:1f:3b:1e:
e1:3f:18:19:83:5d:16:c7:f2:b4:65:d1:4d:89:67:
04:43:d0:b5:8c:e1:4a:f1:b8:17:f2:31:12:80:fb:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BF:57:93:2D:3C:4E:F1:A9:A3:9A:18:1E:E8:5E:E9:4F:5C:3C:7A
X509v3 Authority Key Identifier:
keyid:6B:36:62:80:03:DA:82:46:53:D9:A5:89:75:F6:9F:D2:BC:10:6B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c4:09:03:6d:04:ec:49:a5:a4:99:9f:b8:c8:33:d6:83:0c:
78:28:2c:5d:95:32:89:7e:d9:82:3d:3e:82:cc:5c:13:a1:8f:
55:fd:9f:39:1c:23:b0:02:5d:d4:bf:a4:bc:47:69:47:0e:72:
6b:87:06:35:ee:1e:62:b3:7a:46:ec:34:41:af:b5:4d:6b:7f:
50:b4:63:89:74:5c:04:21:d5:ed:ab:18:1a:02:f6:82:cc:33:
aa:e3:7b:91:11:ea:e1:d2:ef:3f:96:f6:bc:d9:03:c3:3b:c9:
4a:74:24:5b:0e:97:f6:be:e2:30:55:1f:8b:7e:cf:29:de:95:
e5:0b:4a:c0:7a:d3:f2:11:94:5c:4b:7a:ac:e6:dd:51:ae:73:
6f:81:6a:06:2d:95:11:9b:48:6c:56:88:f6:3d:26:be:e1:2d:
bf:b7:a4:6c:cb:8c:71:11:38:a1:2a:40:9c:86:ad:01:9f:1e:
19:1c:0c:ba:1a:00:cf:40:cf:a1:83:93:64:81:1a:80:9d:5c:
10:75:d7:ff:6e:47:48:cd:c9:10:c6:1e:10:29:a4:07:39:1e:
01:5b:7e:eb:60:71:8f:b5:0f:6e:80:58:72:21:31:33:20:43:
e5:1b:a9:9e:7d:f3:9c:39:f1:a4:70:d6:17:3f:4b:84:cf:75:
50:77:cc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:55:07 2026 by rpki-client