Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: BI6oEmvPyvPXvetR07P5/AXKeetQ9EpImZFhsB4Nq2g=
Subject key identifier: A4:D7:D3:91:79:E4:B2:C5:E9:A1:2D:A7:9F:F1:FE:6C:D6:C1:23:E5
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 019D265F019129EE9BA5DCE4D96308FF5F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:00:53 +0000
Manifest this update: Wed 25 Mar 2026 19:00:53 +0000
Manifest next update: Thu 26 Mar 2026 19:00:53 +0000
Files and hashes: 1: CHly21F90uK3t1PTfGR7rzZwk_E.roa (hash: mWrqsrt9qgm67LUNBZ/tu5yn1dKMTJD4Xe31GCUEOfc=)
2: aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa (hash: Orir7PkRZZnMYBwB3ZGIXihY2LtAAjB+kCKoDM/u5+A=)
3: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: pGLm4fVFIaITp7vtvC4RswPuvULdFIZ02p+GR6uipE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:01:91:29:ee:9b:a5:dc:e4:d9:63:08:ff:5f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Mar 25 19:00:53 2026 GMT
Not After : Mar 26 19:00:53 2026 GMT
Subject: CN=a4d7d39179e4b2c5e9a12da79ff1fe6cd6c123e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:42:ca:62:2c:a3:ea:3e:14:96:e7:e3:36:
a4:2a:97:c4:75:39:4b:1d:dd:f1:ce:d6:a3:5b:56:
19:99:7d:90:5d:45:8e:4e:dd:5b:f0:e6:22:b8:52:
20:db:7a:d4:81:05:26:09:49:d7:8d:89:d0:fa:73:
a9:c7:36:bd:6f:63:2a:94:93:b5:0e:52:fa:5f:d2:
63:f4:b6:48:3e:4b:f3:72:0d:6c:33:17:24:fc:e5:
20:b4:e3:75:e5:6d:ab:92:5d:f8:bb:5d:ac:85:4c:
30:39:ff:1f:09:71:2a:b5:00:f9:de:2a:c3:78:40:
06:34:20:50:38:67:76:cd:e5:86:86:39:38:1d:e6:
1a:25:5c:15:54:ea:7d:8c:81:8f:57:fe:91:b8:e2:
8c:69:c3:ee:5b:83:8e:a8:d7:4e:9e:65:3c:15:69:
f0:66:02:29:2f:01:53:2d:70:89:2e:9e:fc:e8:f1:
ad:3e:8a:cf:45:08:67:5e:d2:6f:e7:17:ce:13:d2:
27:8e:5b:cf:94:11:81:2f:67:1d:be:76:ad:0c:ac:
6d:4e:f9:59:6c:4a:8e:72:6f:65:24:1b:d4:5d:90:
71:5b:a5:e7:d7:fc:94:2a:ba:35:62:ca:9a:c7:b2:
7c:8f:5f:9a:bd:5f:dd:ac:38:c1:f5:60:36:dd:41:
f0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D7:D3:91:79:E4:B2:C5:E9:A1:2D:A7:9F:F1:FE:6C:D6:C1:23:E5
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c3:5f:9c:26:8f:58:2f:e1:73:59:9b:5d:91:19:e3:20:4c:
07:62:05:eb:be:27:5d:67:65:f1:9e:1b:dc:d6:21:3c:d2:e6:
a5:20:20:9c:77:8b:b5:e5:c1:cd:76:08:66:c5:cf:63:52:f5:
54:39:cb:c3:8d:2e:79:7a:cb:10:ed:96:8d:0e:50:a9:11:67:
4a:d9:f2:33:cc:13:f0:d2:66:1e:c6:cb:c9:20:2b:ff:79:e1:
7d:6b:df:c3:92:33:52:f3:a5:f3:0d:0b:31:5e:05:d8:1a:9e:
ad:b9:e8:e7:ac:7a:1e:d6:b1:d4:27:9a:b0:4f:43:19:16:e4:
93:d1:b3:a4:88:48:5f:5a:de:66:01:4c:13:af:b5:08:14:fa:
9d:0f:cd:2e:d2:8f:13:91:8a:c6:32:09:3b:ae:d5:aa:7e:c0:
3c:37:15:41:89:76:7a:46:21:af:3f:ea:44:d6:f5:d3:a1:d0:
49:c8:2c:50:fe:be:5b:f5:c4:0b:b0:4e:5d:04:fd:23:59:8a:
a7:7e:77:8d:b5:c2:4d:be:6a:3e:21:40:d4:4e:5a:6b:30:98:
af:37:4f:fa:62:3b:2f:06:dc:33:eb:a4:6f:33:41:4d:bd:1c:
25:b9:a5:ba:bf:3e:43:93:6b:97:59:b3:31:b9:2f:e0:bc:89:
67:f9:34:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:36 2026 by rpki-client