Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
File: AZrRgkvlRhY7SB_ElkegUIsia_Q.mft (raw, json)
Hash identifier: WAMGlREs2LmcTfbtzjnQz5/89j7LJ5mjdqcgCyHRc64=
Subject key identifier: 33:D1:E0:DC:EC:B5:CB:EA:39:96:59:6A:77:9D:B2:2E:C1:0E:C8:04
Authority key identifier: 01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
Certificate issuer: /CN=019ad1824be546163b481fc49647a0508b226bf4
Certificate serial: 01A0CCA356C79E6125867921F18AB578F97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 05:00:51 +0000
Manifest this update: Wed 23 Sep 2026 05:00:51 +0000
Manifest next update: Thu 24 Sep 2026 05:00:51 +0000
Files and hashes: 1: AZrRgkvlRhY7SB_ElkegUIsia_Q.crl (hash: kv496UdiDl5ZQM+jmzXHh6ffCWt1W/gipgSTXm/9vv0=)
2: MQ92_0fGHOoIjRuTyTUpaxcjewQ.roa (hash: pQoBQIuWr/SR02V/o9Vd/iTYZAno9pmjmE5yt40diZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:56:c7:9e:61:25:86:79:21:f1:8a:b5:78:f9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019ad1824be546163b481fc49647a0508b226bf4
Validity
Not Before: Sep 23 05:00:51 2026 GMT
Not After : Sep 24 05:00:51 2026 GMT
Subject: CN=33d1e0dcecb5cbea3996596a779db22ec10ec804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:74:29:be:75:35:ef:0f:2f:8c:74:d1:ca:
50:fa:b7:e2:60:9d:fc:9f:23:6e:b5:d6:88:24:bc:
a3:00:a5:55:9c:6f:ba:d2:56:9b:ec:80:2d:04:f8:
3f:f2:a2:90:e8:c9:cc:79:9f:5a:37:c0:c1:1b:5a:
66:f0:7d:89:e1:bf:e6:84:a5:67:44:7f:78:01:33:
3c:0c:4d:cf:de:02:20:e9:c1:61:1d:8e:82:61:6c:
34:be:51:99:5e:63:4c:c9:12:e9:d2:d7:57:b4:4c:
0f:1b:42:e0:9c:11:8e:9a:7c:ec:ac:35:8d:5c:ef:
5c:7f:7f:fd:c5:19:4f:1c:5c:f9:3f:b5:30:0a:62:
25:fa:c1:dc:86:09:11:09:38:73:9c:8c:63:0c:15:
0d:94:ec:3b:1e:73:69:1d:fa:03:7c:ea:44:c7:d2:
d9:b9:0c:9c:d5:e1:c3:0e:33:54:2e:8f:0b:1d:25:
b3:32:64:47:93:01:2d:c4:16:60:52:06:2c:58:20:
2e:79:6a:a4:51:cc:a0:a8:18:f8:c7:36:b8:74:86:
a4:8e:a3:f6:7a:d0:d4:44:26:87:fc:15:15:33:09:
81:8a:59:a4:24:31:db:df:23:60:ae:3b:bd:72:64:
69:3d:65:5b:10:3d:8f:50:3c:50:53:09:db:f8:4c:
b0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D1:E0:DC:EC:B5:CB:EA:39:96:59:6A:77:9D:B2:2E:C1:0E:C8:04
X509v3 Authority Key Identifier:
keyid:01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:85:7e:fe:9a:f5:b6:ad:e3:ee:13:55:db:ae:ee:8a:26:ea:
95:5b:96:1b:6c:d5:a5:8d:ed:b3:0b:05:10:62:cc:74:44:4e:
9e:29:a9:02:36:e6:8e:8f:9d:d9:81:bd:ff:e3:bd:d3:6b:8b:
1e:a6:98:f2:1d:4e:22:b5:38:73:cd:44:a0:81:e1:40:62:52:
8b:a2:78:e2:53:f4:33:a5:e7:a5:fc:25:c5:c0:f6:f2:e2:36:
05:47:5e:5d:02:13:17:c7:23:e7:81:09:50:c4:55:46:b4:d7:
bd:13:30:fe:9c:72:b0:fa:a8:b1:a1:fa:df:ee:09:82:4b:89:
ed:5b:a1:86:3e:11:5f:3e:cc:a7:04:35:31:4e:90:b8:41:5c:
cc:6a:eb:cb:ce:28:12:06:05:e8:0b:dc:4c:9f:02:64:cc:00:
d4:ef:d3:fa:87:04:d5:71:5f:f4:5a:74:a6:35:b6:92:e6:e6:
57:e7:bd:7f:90:7a:bd:35:b2:7d:56:31:e8:0f:9f:3d:cc:8f:
0f:67:4d:c2:65:c6:fe:3a:65:59:b6:6f:c5:63:99:e8:f2:46:
00:27:fe:e4:35:e2:23:86:8d:59:e6:68:82:99:8e:44:a2:08:
e9:d3:c2:89:84:89:85:1d:e3:c4:a8:b9:4b:6a:8b:40:82:20:
e5:73:4c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:52:57 2026 by rpki-client