Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
File: azZigAPagkZT2aWJdfaf0rwQa3E.mft (raw, json)
Hash identifier: HIxUibSqirxU2KVCLk0xtAY3+2J5mfkGzZGPhzurWcQ=
Subject key identifier: 70:5A:55:E2:54:00:B4:6B:06:EF:E3:7D:D7:3B:67:C5:BC:2C:3D:16
Authority key identifier: 6B:36:62:80:03:DA:82:46:53:D9:A5:89:75:F6:9F:D2:BC:10:6B:71
Certificate issuer: /CN=6b36628003da824653d9a58975f69fd2bc106b71
Certificate serial: 01A0D01279EB4CD49B0F252E5AC8A53BDA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:06 +0000
Manifest this update: Wed 23 Sep 2026 21:01:06 +0000
Manifest next update: Thu 24 Sep 2026 21:01:06 +0000
Files and hashes: 1: azZigAPagkZT2aWJdfaf0rwQa3E.crl (hash: DNuVXBppWceYmsHEaJYau+oHY+eF7Ih1vXDqdl45+Pw=)
2: xv_mfH_vDLg1Q5L8BpAH47O17uo.roa (hash: DoTOjlCGKN2DqHejuNWU2055DZZTGt7Dy1dJF/wtwJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:79:eb:4c:d4:9b:0f:25:2e:5a:c8:a5:3b:da:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b36628003da824653d9a58975f69fd2bc106b71
Validity
Not Before: Sep 23 21:01:06 2026 GMT
Not After : Sep 24 21:01:06 2026 GMT
Subject: CN=705a55e25400b46b06efe37dd73b67c5bc2c3d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:11:e7:10:6c:ac:a9:2e:55:fb:54:ab:25:
e2:b1:5c:0e:12:84:2f:6f:19:cd:79:68:e4:24:08:
31:3e:1f:fe:32:7d:6a:6e:10:1c:61:84:9a:cb:e0:
ac:ef:5d:d1:dc:cf:29:e7:3d:6f:7b:1f:c1:36:05:
77:75:26:8c:57:9e:82:63:d2:80:2d:3c:14:5a:f9:
69:5d:9c:f7:cb:6b:fb:1c:75:b1:5c:44:fc:83:0a:
6f:2a:a0:e6:30:fb:2c:8e:f5:2f:e3:d4:d7:f6:5b:
21:c0:a5:d3:16:0a:42:91:36:32:21:a3:94:06:16:
00:a3:5f:92:ca:57:a7:54:88:df:d4:d0:5e:37:06:
b7:50:8d:df:2e:c6:70:8b:35:7d:3c:e1:9c:fb:ab:
24:cd:c7:46:4b:e3:0c:b4:23:71:17:9c:dd:01:09:
35:cf:85:88:80:e4:ca:26:fa:cf:1a:d6:28:fb:b1:
3d:cb:90:f4:b9:df:cd:e4:f1:f5:19:3b:66:0a:3b:
5f:48:b0:ff:06:6d:8f:d2:eb:ce:cf:aa:8e:73:e9:
c7:40:b7:d3:f4:b4:15:00:e8:e9:65:47:2d:d6:f9:
a9:8a:8b:65:ce:65:f1:92:e8:a9:66:80:97:73:89:
ec:42:a1:02:81:75:0f:a3:42:2d:0a:e9:36:55:23:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5A:55:E2:54:00:B4:6B:06:EF:E3:7D:D7:3B:67:C5:BC:2C:3D:16
X509v3 Authority Key Identifier:
keyid:6B:36:62:80:03:DA:82:46:53:D9:A5:89:75:F6:9F:D2:BC:10:6B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2f:b7:bc:62:bd:ca:24:9d:94:0a:bd:4d:7b:32:87:88:f2:
50:be:ab:a2:93:55:96:d6:28:7d:0e:9b:68:b2:cf:36:09:3d:
92:27:0a:eb:85:09:4b:de:28:15:31:52:c9:91:33:00:67:6e:
9c:4e:71:62:74:83:24:f7:16:90:4c:e0:fb:e7:f8:ea:a5:16:
98:b8:54:a2:77:68:ea:b1:ef:f9:6e:c8:94:96:53:1d:d8:27:
38:29:61:29:f6:0a:2b:a8:84:57:96:89:b3:b5:34:ce:3c:b9:
aa:13:ab:1e:d5:2f:89:a6:5a:e1:39:6b:4c:5b:26:0e:3d:8b:
a2:1d:91:76:b9:31:cc:85:8e:8c:a4:aa:3e:87:ab:65:1d:b8:
e1:9b:54:ef:20:ca:83:bd:f0:66:e8:57:a5:b5:f4:39:29:ae:
1d:16:62:b5:66:c3:85:35:35:ff:04:5f:44:9e:47:8a:7c:e0:
79:32:68:5b:0a:f5:c2:d5:03:53:81:d4:ed:be:9b:c0:e3:ab:
65:c5:a6:aa:61:b3:d7:0b:f0:7f:4b:8a:72:ff:3b:76:82:ad:
6e:2e:04:19:21:5f:8c:a1:b6:ea:05:f4:9d:ad:03:b7:01:d6:
17:cf:14:0c:c3:71:54:f2:9b:59:27:19:14:95:c9:8e:61:24:
33:19:97:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:02:57 2026 by rpki-client