Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
File: AZrRgkvlRhY7SB_ElkegUIsia_Q.mft (raw, json)
Hash identifier: gXqRg0L+Sa1m1ZzNFy+lhTkTqJep17m+jmpU+b4xEN8=
Subject key identifier: 0F:65:43:E0:B8:FA:C0:4F:90:78:DA:D9:8B:CB:C4:58:F8:80:D1:CC
Authority key identifier: 01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
Certificate issuer: /CN=019ad1824be546163b481fc49647a0508b226bf4
Certificate serial: 019D25F22888545D28C33577F33A320D45CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 17:02:00 +0000
Manifest this update: Wed 25 Mar 2026 17:02:00 +0000
Manifest next update: Thu 26 Mar 2026 17:02:00 +0000
Files and hashes: 1: AZrRgkvlRhY7SB_ElkegUIsia_Q.crl (hash: g/B4Jh5Jual4y29FyLdqRu4zpsi8XKRsE6rGUC58kl0=)
2: MQ92_0fGHOoIjRuTyTUpaxcjewQ.roa (hash: pQoBQIuWr/SR02V/o9Vd/iTYZAno9pmjmE5yt40diZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:28:88:54:5d:28:c3:35:77:f3:3a:32:0d:45:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019ad1824be546163b481fc49647a0508b226bf4
Validity
Not Before: Mar 25 17:02:00 2026 GMT
Not After : Mar 26 17:02:00 2026 GMT
Subject: CN=0f6543e0b8fac04f9078dad98bcbc458f880d1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:da:44:ba:75:48:64:53:cb:7c:f7:f6:3b:
8e:3a:b6:1a:87:dc:ce:ce:f2:da:a3:07:c3:37:00:
b9:1a:aa:8d:ae:38:f4:ca:2e:60:3b:a8:0c:d0:f3:
cb:58:e0:e0:ed:14:1d:b8:5f:fb:bf:75:aa:ac:e4:
26:f7:07:3b:4e:6a:d1:48:f1:ea:2d:72:39:32:22:
de:91:f7:55:51:fd:1b:ef:bd:9d:3a:85:69:8e:0a:
4b:dc:aa:f2:3f:28:26:f2:94:07:a0:0a:b6:5b:ae:
23:23:07:05:e6:9b:d5:a0:70:c2:e8:a7:78:4a:0e:
5d:41:34:4c:90:be:0e:b2:5c:e9:ae:db:e7:99:30:
9e:57:70:d5:fc:01:0b:ae:09:fa:10:91:29:9c:14:
c4:13:e8:b1:e5:27:0d:08:ea:dd:1e:84:f8:78:9c:
bf:ce:bd:a1:c5:3e:61:b4:8a:52:09:c4:9b:c4:34:
14:0d:35:e5:19:21:85:10:ec:da:3c:20:d3:26:b9:
3f:b0:51:fc:29:86:41:56:dc:d2:c9:66:3c:4f:64:
a4:74:13:b7:45:87:57:92:58:5b:38:16:bd:86:97:
05:f5:4a:7e:4f:7d:f8:85:3f:0e:ef:28:37:2c:95:
0b:34:d8:86:a0:db:3b:d1:fb:fd:07:51:6c:27:29:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:65:43:E0:B8:FA:C0:4F:90:78:DA:D9:8B:CB:C4:58:F8:80:D1:CC
X509v3 Authority Key Identifier:
keyid:01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1f:aa:ca:10:e0:e1:04:bd:99:31:1d:42:cf:1b:c6:d7:b3:
77:4a:b2:d3:74:79:bb:e7:3c:a8:77:c8:44:4b:4b:ec:ec:7d:
11:2a:54:de:47:8e:1a:40:c4:72:1e:eb:c8:bb:1c:b4:4d:5e:
70:a6:75:50:da:e8:1d:66:c0:75:d5:3b:0e:67:20:aa:01:fe:
eb:45:37:be:b2:92:ec:1e:44:80:9e:ec:c0:80:77:66:45:1b:
70:62:cb:30:cd:b1:79:cb:87:06:6f:1f:6d:d3:95:39:87:c9:
cd:da:24:91:50:41:5b:34:62:5d:b8:22:64:0d:1b:11:e5:54:
f5:85:4e:45:a4:f4:ff:58:89:22:d6:88:bb:c7:5d:08:cb:03:
86:3b:dc:c1:ab:11:97:70:86:1a:3d:38:45:0f:55:0a:be:38:
27:b7:99:7c:21:bf:92:f3:99:3a:a0:27:93:cc:e5:c5:df:1a:
f4:23:a5:4c:80:d2:1f:56:bb:a4:09:2d:a9:3f:00:45:e2:35:
c4:2a:91:76:b9:07:9d:6e:ec:b0:92:d3:44:a4:78:63:c8:d4:
ea:a8:21:91:04:77:69:60:4d:30:f2:5c:0b:42:d5:2a:a6:69:
ae:66:b4:f8:ce:c5:f7:ef:d0:04:1a:66:37:a1:83:e1:d3:72:
8e:57:96:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:12 2026 by rpki-client