Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: 4InCuZffsfPIJ77NzY8qFPt0ax80+Xh9jU6u7qQJlwU=
Subject key identifier: A0:4B:D4:C6:9D:62:55:B0:D8:08:D8:BA:48:FD:61:C7:1A:43:BE:77
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 019F94376714F4C0D840630C215C693F2144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 13:01:26 +0000
Manifest this update: Fri 24 Jul 2026 13:01:26 +0000
Manifest next update: Sat 25 Jul 2026 13:01:26 +0000
Files and hashes: 1: CHly21F90uK3t1PTfGR7rzZwk_E.roa (hash: mWrqsrt9qgm67LUNBZ/tu5yn1dKMTJD4Xe31GCUEOfc=)
2: aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa (hash: Orir7PkRZZnMYBwB3ZGIXihY2LtAAjB+kCKoDM/u5+A=)
3: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: toeccAsZ3r3AQfCMNl7FoognfTnyVN5sSmIfGLpEN5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:67:14:f4:c0:d8:40:63:0c:21:5c:69:3f:21:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Jul 24 13:01:26 2026 GMT
Not After : Jul 25 13:01:26 2026 GMT
Subject: CN=a04bd4c69d6255b0d808d8ba48fd61c71a43be77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8c:f3:b4:7c:a1:ae:52:bd:e8:eb:ab:06:44:
7a:a8:36:fc:d4:3d:91:ab:19:b1:17:90:f5:a2:64:
8d:1c:19:61:70:a6:78:b2:89:45:5b:74:87:0c:25:
e2:0b:bc:d2:89:fe:51:ad:be:24:59:1c:76:bc:f0:
59:28:13:65:1c:1a:ee:9e:fa:b3:f1:d6:20:81:da:
85:53:e8:ed:e5:cd:25:a9:33:7c:bc:28:98:59:e7:
2e:96:f3:a0:cb:64:d7:24:ae:63:d2:83:fa:09:aa:
ac:5e:4c:22:ab:4a:56:e7:a2:d2:f7:83:d8:e4:cf:
42:13:c8:f1:04:05:b6:fc:17:d0:53:a4:b2:03:b4:
84:f1:76:f5:27:57:6a:b9:59:e0:de:3c:49:a0:80:
4f:aa:fa:32:90:fb:3e:69:ed:ab:a3:ea:6a:88:00:
b3:a1:12:44:75:c8:ba:7c:4d:22:07:c8:33:ca:f0:
b3:37:3a:ee:5a:ff:f2:19:52:48:50:7c:71:4a:ff:
72:d0:8c:21:67:d4:82:dc:3c:dc:80:d8:e6:c1:be:
d1:57:2c:43:1e:b9:9a:54:a3:63:31:52:c9:38:0d:
02:d1:75:2b:91:73:76:b8:8d:c0:1b:68:a9:c9:e8:
15:72:95:4c:92:95:04:23:2e:6e:cd:8a:c9:99:81:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4B:D4:C6:9D:62:55:B0:D8:08:D8:BA:48:FD:61:C7:1A:43:BE:77
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e4:dc:39:64:65:4e:d4:56:89:98:c5:48:73:f3:ef:2e:12:
da:f8:d2:6b:91:b9:a2:e0:5b:2e:bd:31:fb:14:e9:e3:fd:ce:
81:95:8a:88:86:47:e0:33:69:1c:b4:0b:4d:b4:2c:eb:44:35:
36:3e:20:d7:f4:82:f2:6b:66:cf:2e:f1:17:ab:78:cc:a9:d6:
e5:bc:87:40:14:bc:1f:fd:30:71:01:65:bc:41:ad:5b:12:e3:
12:9f:b6:1a:90:1e:ff:59:5c:f1:dd:2e:a6:0e:88:ef:51:09:
11:7f:9c:bc:76:da:41:e7:60:75:8b:74:0c:e1:71:7e:78:4d:
73:6b:b7:5f:fe:7f:9e:38:40:36:b9:50:43:49:dd:66:2b:df:
2b:91:e8:97:c8:63:66:8e:51:b3:19:59:10:3b:49:f9:12:20:
47:90:90:27:eb:78:b5:a0:dd:dd:9b:64:70:72:10:fc:2f:d2:
7e:15:a6:f3:a6:a6:cc:09:64:9c:76:d3:b4:c8:c5:5c:3d:cf:
7d:f8:1d:57:d8:48:0c:03:9a:1f:a1:67:2e:41:f7:00:7f:e2:
75:39:33:77:d7:45:47:17:2b:2d:d7:21:cb:5c:e9:17:a2:2c:
7b:82:33:aa:5a:54:6e:15:fb:3b:1f:79:2a:94:9d:c8:b9:a0:
af:60:df:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UN2cU9MDYQGMMIVxpPyFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMGNkMWEzMzhlYmY1Yzc5NTJlYjlhMWYwMDYwNTQ5Zjkz
NDBhZDYwHhcNMjYwNzI0MTMwMTI2WhcNMjYwNzI1MTMwMTI2WjAzMTEwLwYDVQQD
EyhhMDRiZDRjNjlkNjI1NWIwZDgwOGQ4YmE0OGZkNjFjNzFhNDNiZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ozztHyhrlK96OurBkR6qDb81D2R
qxmxF5D1omSNHBlhcKZ4solFW3SHDCXiC7zSif5Rrb4kWRx2vPBZKBNlHBrunvqz
8dYggdqFU+jt5c0lqTN8vCiYWeculvOgy2TXJK5j0oP6CaqsXkwiq0pW56LS94PY
5M9CE8jxBAW2/BfQU6SyA7SE8Xb1J1dquVng3jxJoIBPqvoykPs+ae2ro+pqiACz
oRJEdci6fE0iB8gzyvCzNzruWv/yGVJIUHxxSv9y0IwhZ9SC3DzcgNjmwb7RVyxD
HrmaVKNjMVLJOA0C0XUrkXN2uI3AG2ipyegVcpVMkpUEIy5uzYrJmYEtuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBL1MadYlWw2AjYukj9YccaQ753MB8GA1UdIwQY
MBaAFKwM0aM46/XHlS65ofAGBUn5NArWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQt
YTMzNTE4YmRkOGZlLzEvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQtYTMzNTE4YmRkOGZl
LzEvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAluTcOWRl
TtRWiZjFSHPz7y4S2vjSa5G5ouBbLr0x+xTp4/3OgZWKiIZH4DNpHLQLTbQs60Q1
Nj4g1/SC8mtmzy7xF6t4zKnW5byHQBS8H/0wcQFlvEGtWxLjEp+2GpAe/1lc8d0u
pg6I71EJEX+cvHbaQedgdYt0DOFxfnhNc2u3X/5/njhANrlQQ0ndZivfK5Hol8hj
Zo5RsxlZEDtJ+RIgR5CQJ+t4taDd3ZtkcHIQ/C/SfhWm86amzAlknHbTtMjFXD3P
ffgdV9hIDAOaH6FnLkH3AH/idTkzd9dFRxcrLdchy1zpF6Ise4IzqlpUbhX7Ox95
KpSdyLmgr2DfnQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:22 2026 by rpki-client