Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: CVEjKUvTYUIF1/dV93NfZmfdUIuwar3JHaw/LwSnM7g=
Subject key identifier: D0:34:15:78:E7:B0:62:08:17:DB:C6:28:03:8E:95:D0:31:A7:6A:27
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 01A0EFD449B9CBE2988C2412373D86ADFC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 1A7C
Signing time: Wed 30 Sep 2026 01:01:01 +0000
Manifest this update: Wed 30 Sep 2026 01:01:01 +0000
Manifest next update: Thu 01 Oct 2026 01:01:01 +0000
Files and hashes: 1: CHly21F90uK3t1PTfGR7rzZwk_E.roa (hash: mWrqsrt9qgm67LUNBZ/tu5yn1dKMTJD4Xe31GCUEOfc=)
2: aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa (hash: Orir7PkRZZnMYBwB3ZGIXihY2LtAAjB+kCKoDM/u5+A=)
3: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: JcMJX1Ucpif5rYESbHFcZENtj+WVS2QTS82lu6bfLeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:d4:49:b9:cb:e2:98:8c:24:12:37:3d:86:ad:fc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Sep 30 01:01:01 2026 GMT
Not After : Oct 1 01:01:01 2026 GMT
Subject: CN=d0341578e7b0620817dbc628038e95d031a76a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:52:c6:bc:b9:64:8b:e6:58:14:90:0d:16:
02:5c:18:65:4f:36:93:92:3a:fc:a0:f0:71:ba:bb:
32:34:72:92:54:6c:a3:14:a8:66:3a:cb:45:62:fb:
71:86:63:11:e6:fe:3f:56:52:f8:a8:f5:f9:6b:5a:
69:67:b4:e4:6f:a0:17:06:20:5d:de:5f:c4:ba:dd:
b2:79:fd:76:1b:bc:30:09:e1:fc:59:56:ef:70:42:
9e:35:ec:01:51:72:20:c8:9a:6f:b5:52:00:cf:65:
06:5f:3a:7d:4f:35:93:c7:b2:55:7b:30:29:27:e9:
10:a5:e4:bd:36:65:b4:f4:1b:76:43:6d:a2:23:fb:
22:38:53:64:18:27:bd:55:5a:7d:1f:c3:ca:14:59:
b2:f1:68:cb:fc:df:66:b7:fb:a5:81:40:b2:e3:bc:
c4:91:24:11:1d:af:c6:fc:21:de:bc:c1:db:bb:67:
08:35:41:9b:ec:ac:45:aa:80:6b:b7:d5:61:a6:71:
19:dd:fa:88:25:38:36:4e:92:80:48:f7:1d:26:94:
64:70:82:51:2c:fa:72:91:a7:65:ce:de:ac:be:6a:
52:6c:4a:18:fa:07:34:72:34:e1:f9:4c:40:4b:76:
c3:74:05:d2:9b:1c:b5:cb:e4:38:03:97:85:00:f6:
6c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:34:15:78:E7:B0:62:08:17:DB:C6:28:03:8E:95:D0:31:A7:6A:27
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f8:51:46:bd:80:99:4a:74:35:d7:52:67:b0:a6:11:9c:4b:
f1:9b:c8:d1:72:92:9e:34:f8:49:47:42:8b:8d:35:55:bd:52:
3c:9d:53:0e:d6:e3:e3:31:55:a3:74:e7:b3:01:6a:bf:59:47:
65:eb:bf:4a:fc:6f:7d:69:6f:e3:80:53:63:fe:00:d5:46:56:
e9:4f:5c:28:26:3a:96:c7:64:69:53:54:b0:00:fa:ae:92:4a:
26:c8:74:29:34:53:3f:15:76:b0:03:05:72:f2:ff:d2:83:d9:
09:8e:e7:ec:04:f7:57:7c:e2:07:fd:b8:ec:73:5a:a8:3e:32:
12:61:de:fc:a1:ff:7d:9d:55:5f:0f:26:ea:37:ea:91:de:42:
da:39:b3:6d:d6:5e:22:e6:c8:ad:92:b4:1c:8d:2f:1f:3c:1b:
f1:68:f7:52:04:e7:50:46:c9:3a:ba:d8:f0:2c:bb:24:5e:53:
36:d3:3f:e2:0b:54:b8:f9:e8:9a:f4:f7:fd:3e:56:6c:4e:5b:
7d:5e:f7:bf:9c:62:16:57:9c:07:37:22:50:30:e7:5c:d1:48:
4c:75:8e:72:a5:fe:2f:23:60:6f:cc:1d:19:d9:f9:30:28:ba:
3c:c9:9a:ef:b0:06:65:22:52:dc:50:ae:fe:59:56:8b:1e:83:
b4:e2:1f:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDv1Em5y+KYjCQSNz2GrfyDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMGNkMWEzMzhlYmY1Yzc5NTJlYjlhMWYwMDYwNTQ5Zjkz
NDBhZDYwHhcNMjYwOTMwMDEwMTAxWhcNMjYxMDAxMDEwMTAxWjAzMTEwLwYDVQQD
EyhkMDM0MTU3OGU3YjA2MjA4MTdkYmM2MjgwMzhlOTVkMDMxYTc2YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd5Sxry5ZIvmWBSQDRYCXBhlTzaT
kjr8oPBxursyNHKSVGyjFKhmOstFYvtxhmMR5v4/VlL4qPX5a1ppZ7Tkb6AXBiBd
3l/Eut2yef12G7wwCeH8WVbvcEKeNewBUXIgyJpvtVIAz2UGXzp9TzWTx7JVezAp
J+kQpeS9NmW09Bt2Q22iI/siOFNkGCe9VVp9H8PKFFmy8WjL/N9mt/ulgUCy47zE
kSQRHa/G/CHevMHbu2cINUGb7KxFqoBrt9VhpnEZ3fqIJTg2TpKASPcdJpRkcIJR
LPpykadlzt6svmpSbEoY+gc0cjTh+UxAS3bDdAXSmxy1y+Q4A5eFAPZsmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNA0FXjnsGIIF9vGKAOOldAxp2onMB8GA1UdIwQY
MBaAFKwM0aM46/XHlS65ofAGBUn5NArWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQt
YTMzNTE4YmRkOGZlLzEvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQtYTMzNTE4YmRkOGZl
LzEvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvhRRr2A
mUp0NddSZ7CmEZxL8ZvI0XKSnjT4SUdCi401Vb1SPJ1TDtbj4zFVo3TnswFqv1lH
Zeu/SvxvfWlv44BTY/4A1UZW6U9cKCY6lsdkaVNUsAD6rpJKJsh0KTRTPxV2sAMF
cvL/0oPZCY7n7AT3V3ziB/247HNaqD4yEmHe/KH/fZ1VXw8m6jfqkd5C2jmzbdZe
IubIrZK0HI0vHzwb8Wj3UgTnUEbJOrrY8Cy7JF5TNtM/4gtUuPnomvT3/T5WbE5b
fV73v5xiFlecBzciUDDnXNFITHWOcqX+LyNgb8wdGdn5MCi6PMma77AGZSJS3FCu
/llWix6DtOIf0g==
-----END CERTIFICATE-----
Generated at Wed Sep 30 13:14:30 2026 by rpki-client