
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
File: AZYrnNLlVrWW_HJDVlgHueLchoo.mft (raw, json)
Hash identifier: j8Z1/1IPlM00yYZNG9d0K363dTFeahvPRLKQkFw/hx8=
Subject key identifier: 22:7D:64:34:AB:B5:96:04:ED:A2:FB:9B:03:D5:7F:2E:64:BC:93:88
Authority key identifier: 01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A
Certificate issuer: /CN=01962b9cd2e556b596fc7243565807b9e2dc868a
Certificate serial: 01A0CBC7D13D7375E8CA1D99BCCDD62D4518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
Manifest number: 0B72
Signing time: Wed 23 Sep 2026 01:01:05 +0000
Manifest this update: Wed 23 Sep 2026 01:01:05 +0000
Manifest next update: Thu 24 Sep 2026 01:01:05 +0000
Files and hashes: 1: AZYrnNLlVrWW_HJDVlgHueLchoo.crl (hash: G5SVlPAcBt7jogbg0HnIteuSjyNnzEKTsgoezFWs01g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:d1:3d:73:75:e8:ca:1d:99:bc:cd:d6:2d:45:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01962b9cd2e556b596fc7243565807b9e2dc868a
Validity
Not Before: Sep 23 01:01:05 2026 GMT
Not After : Sep 24 01:01:05 2026 GMT
Subject: CN=227d6434abb59604eda2fb9b03d57f2e64bc9388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9d:92:fd:0e:70:84:f8:05:5f:32:c2:1e:f1:
90:9c:ed:e9:03:c1:a2:4e:76:86:4a:17:ef:91:25:
fd:6d:74:5f:bb:e7:05:89:d4:37:88:15:02:b6:9d:
3c:53:de:c6:38:5a:2d:04:b6:4f:15:a6:6a:bd:59:
64:2e:32:74:fb:f5:96:3c:84:ad:8d:b5:55:4c:ba:
d9:3e:5b:dc:08:12:ae:f5:16:4e:31:ed:d6:86:9b:
d5:9d:4f:97:be:04:2c:79:3c:61:68:5f:3f:42:26:
66:a1:4e:23:e8:65:a5:0e:c1:10:1b:dc:1c:cb:36:
c2:a3:b6:ea:a2:7f:e2:fa:10:9a:56:3a:ef:93:8a:
04:b6:22:54:eb:55:35:2f:e0:d2:45:34:72:40:2d:
9f:e3:7a:7e:e9:ab:5a:47:25:ad:8a:b5:5f:6d:73:
4a:f0:7d:d8:20:d7:26:28:e8:cb:af:32:db:4b:2b:
93:17:f4:f0:6f:41:4b:61:63:3e:78:4b:90:ca:6d:
fb:2b:04:b9:17:3d:18:38:1f:9b:cc:18:0c:30:84:
99:d3:5c:bd:59:d8:d1:17:d3:f9:63:cd:de:73:0f:
cd:ae:7d:d3:8b:5d:a6:a7:86:6e:82:fb:b1:e9:0d:
96:e7:c7:54:54:57:47:7d:08:fa:d4:8a:6b:a5:2f:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7D:64:34:AB:B5:96:04:ED:A2:FB:9B:03:D5:7F:2E:64:BC:93:88
X509v3 Authority Key Identifier:
keyid:01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:85:ab:17:2a:73:43:0d:eb:41:b9:21:f0:5b:1c:a8:02:30:
bb:50:6c:f7:12:d8:b9:48:4c:aa:ce:9b:13:93:5e:36:f1:97:
18:ab:5a:5e:22:ab:74:2f:f2:3f:bd:12:b0:12:c6:46:30:f0:
2c:81:62:e0:31:8c:03:b2:92:10:56:a8:e7:50:ce:2b:e2:ef:
bd:2f:94:bc:b2:70:41:d7:8c:23:18:66:c7:85:f4:6d:6c:c4:
43:d7:5f:05:2f:1f:d8:8b:ef:21:80:3b:89:28:e6:a9:8a:33:
9c:fa:20:eb:86:3b:c4:27:eb:af:11:57:03:9c:e9:f5:54:aa:
12:45:d5:52:01:70:b3:a6:6a:70:67:e0:46:71:fd:36:5c:9c:
ab:f6:83:49:a0:53:d1:40:e4:86:e0:65:75:5f:98:49:36:57:
cc:4d:62:39:9b:b1:0d:a8:8a:a7:ba:b8:a5:4e:33:98:0f:aa:
d4:8a:22:ae:64:0b:43:4c:38:51:87:ad:62:7a:11:b2:e1:81:
92:f2:05:26:1d:db:dc:9f:3d:cf:15:a9:28:3f:e6:a6:7a:b4:
5b:b2:3f:19:09:3e:d7:1e:b0:f6:9b:3e:6a:95:de:c5:67:b4:
6d:62:91:a1:6e:db:3c:04:80:23:f5:d9:b0:5e:41:d3:00:df:
4a:aa:f9:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLx9E9c3Xoyh2ZvM3WLUUYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTYyYjljZDJlNTU2YjU5NmZjNzI0MzU2NTgwN2I5ZTJk
Yzg2OGEwHhcNMjYwOTIzMDEwMTA1WhcNMjYwOTI0MDEwMTA1WjAzMTEwLwYDVQQD
EygyMjdkNjQzNGFiYjU5NjA0ZWRhMmZiOWIwM2Q1N2YyZTY0YmM5Mzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi52S/Q5whPgFXzLCHvGQnO3pA8Gi
TnaGShfvkSX9bXRfu+cFidQ3iBUCtp08U97GOFotBLZPFaZqvVlkLjJ0+/WWPISt
jbVVTLrZPlvcCBKu9RZOMe3WhpvVnU+XvgQseTxhaF8/QiZmoU4j6GWlDsEQG9wc
yzbCo7bqon/i+hCaVjrvk4oEtiJU61U1L+DSRTRyQC2f43p+6ataRyWtirVfbXNK
8H3YINcmKOjLrzLbSyuTF/Twb0FLYWM+eEuQym37KwS5Fz0YOB+bzBgMMISZ01y9
WdjRF9P5Y83ecw/Nrn3Ti12mp4Zugvux6Q2W58dUVFdHfQj61IprpS9HowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJ9ZDSrtZYE7aL7mwPVfy5kvJOIMB8GA1UdIwQY
MBaAFAGWK5zS5Va1lvxyQ1ZYB7ni3IaKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpZcm5OTGxWcldXX0hKRFZsZ0h1ZUxjaG9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lMjFiNjktOWRmOS00OGEzLWExZTEt
NzAzNDJhMmU3NTMzLzEvQVpZcm5OTGxWcldXX0hKRFZsZ0h1ZUxjaG9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lMjFiNjktOWRmOS00OGEzLWExZTEtNzAzNDJhMmU3NTMz
LzEvQVpZcm5OTGxWcldXX0hKRFZsZ0h1ZUxjaG9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYWrFypz
Qw3rQbkh8FscqAIwu1Bs9xLYuUhMqs6bE5NeNvGXGKtaXiKrdC/yP70SsBLGRjDw
LIFi4DGMA7KSEFao51DOK+LvvS+UvLJwQdeMIxhmx4X0bWzEQ9dfBS8f2IvvIYA7
iSjmqYoznPog64Y7xCfrrxFXA5zp9VSqEkXVUgFws6ZqcGfgRnH9Nlycq/aDSaBT
0UDkhuBldV+YSTZXzE1iOZuxDaiKp7q4pU4zmA+q1IoirmQLQ0w4UYetYnoRsuGB
kvIFJh3b3J89zxWpKD/mpnq0W7I/GQk+1x6w9ps+apXexWe0bWKRoW7bPASAI/XZ
sF5B0wDfSqr5ow==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:47:36 2026 by rpki-client