Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
File: az921hCBSGU2b6pnz8Za0GnHz8Q.mft (raw, json)
Hash identifier: i5XgehBvuwEMBy9r/HvB98jIhPrHUM96D7Szh2Us9mw=
Subject key identifier: 06:C3:56:50:BC:25:6F:5D:22:95:CD:B7:E0:A5:0D:0B:2D:34:8F:09
Authority key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
Certificate issuer: /CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Certificate serial: 019D284D7BFE033FB7212C8FDD4D3F61F654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
Manifest number: 0F64
Signing time: Thu 26 Mar 2026 04:00:59 +0000
Manifest this update: Thu 26 Mar 2026 04:00:59 +0000
Manifest next update: Fri 27 Mar 2026 04:00:59 +0000
Files and hashes: 1: az921hCBSGU2b6pnz8Za0GnHz8Q.crl (hash: Qt8I1/S0A6NLjqhlGPXY2zPCvx6xtHfWVPxuFk6Lxz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:7b:fe:03:3f:b7:21:2c:8f:dd:4d:3f:61:f6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Validity
Not Before: Mar 26 04:00:59 2026 GMT
Not After : Mar 27 04:00:59 2026 GMT
Subject: CN=06c35650bc256f5d2295cdb7e0a50d0b2d348f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:af:0d:57:41:e9:66:8f:33:d1:84:0c:e3:c0:
e4:36:22:6b:8d:23:ac:dc:54:42:1e:7e:3b:c6:61:
7d:c5:d4:7b:e2:61:72:41:72:cf:e4:43:bd:57:47:
49:31:30:4f:0e:a6:88:62:a5:05:90:15:f5:9a:20:
5c:28:d2:c5:5c:f5:20:cc:ae:b6:bf:87:d6:a7:4f:
5b:54:e7:56:f6:8a:c2:9f:4e:4c:26:ea:59:a8:8d:
6c:56:f5:67:e7:ae:03:3a:78:74:45:5f:ac:fe:bd:
55:0e:25:9e:fd:7e:bf:2b:a2:f9:50:4d:32:36:f8:
fd:73:8d:fe:90:d1:80:a8:70:1e:f3:79:a2:09:81:
9b:1f:45:23:25:3a:df:94:b6:25:3a:f6:32:5a:63:
fe:24:99:95:e6:06:bc:18:7d:a1:c6:50:bf:1d:89:
fb:f1:d6:df:20:69:3c:33:0a:bc:0f:14:00:00:04:
ca:a4:fc:2b:51:d3:1f:ba:b8:1c:9b:6f:22:ac:07:
e4:84:8f:7c:14:9e:fc:f4:c4:83:b3:0f:8b:f6:f4:
59:45:ed:d8:b1:fe:82:9e:78:bb:0e:a2:de:2a:97:
60:c3:70:68:18:22:ab:44:b8:fc:72:34:19:16:e9:
fe:4c:84:fa:3a:07:a7:bd:81:be:d8:70:91:ed:ab:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C3:56:50:BC:25:6F:5D:22:95:CD:B7:E0:A5:0D:0B:2D:34:8F:09
X509v3 Authority Key Identifier:
keyid:6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9f:92:e7:e2:1c:56:ae:34:38:39:d0:f9:7d:66:1d:b7:b0:
fb:54:00:96:93:70:32:a0:b6:c2:29:31:72:d9:cb:ec:56:bb:
34:1c:84:5e:ed:df:fb:ae:9c:66:97:1a:5b:57:95:d1:28:0c:
0b:09:a2:d4:54:36:76:fb:16:d7:b4:8d:5b:b4:e4:77:c3:c4:
f3:49:a2:e5:e7:fa:ed:09:01:1d:12:d1:3d:04:4e:bf:b9:19:
f2:0c:80:8c:cf:43:28:1c:cc:0d:96:5b:87:9b:fb:f7:cb:1e:
b8:a8:b3:42:70:bf:ab:aa:b1:45:ac:86:03:dd:70:91:64:d3:
8a:ca:58:ca:30:53:ed:1c:7b:d4:44:c6:e1:21:63:df:32:e9:
9e:c2:3e:08:f1:14:c8:d7:b7:ea:59:4d:54:68:51:41:fc:9b:
02:ca:2e:7c:31:f8:61:87:21:db:37:76:bd:a5:3c:d3:4c:67:
32:6e:91:db:58:c4:7a:43:74:4f:d4:ed:1e:23:0f:d2:d5:22:
69:3b:38:a8:34:ab:6b:18:b8:03:af:73:20:ac:27:da:ac:86:
73:5a:7b:1e:8c:c9:46:6b:4c:c0:12:c5:65:e3:1d:e5:26:f9:
a2:d1:84:8b:d5:24:4c:00:96:fe:4b:29:e5:b7:c8:c8:bd:c9:
7d:1b:56:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTXv+Az+3ISyP3U0/YfZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiM2Y3NmQ2MTA4MTQ4NjUzNjZmYWE2N2NmYzY1YWQwNjlj
N2NmYzQwHhcNMjYwMzI2MDQwMDU5WhcNMjYwMzI3MDQwMDU5WjAzMTEwLwYDVQQD
EygwNmMzNTY1MGJjMjU2ZjVkMjI5NWNkYjdlMGE1MGQwYjJkMzQ4ZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8K8NV0HpZo8z0YQM48DkNiJrjSOs
3FRCHn47xmF9xdR74mFyQXLP5EO9V0dJMTBPDqaIYqUFkBX1miBcKNLFXPUgzK62
v4fWp09bVOdW9orCn05MJupZqI1sVvVn564DOnh0RV+s/r1VDiWe/X6/K6L5UE0y
Nvj9c43+kNGAqHAe83miCYGbH0UjJTrflLYlOvYyWmP+JJmV5ga8GH2hxlC/HYn7
8dbfIGk8Mwq8DxQAAATKpPwrUdMfurgcm28irAfkhI98FJ789MSDsw+L9vRZRe3Y
sf6Cnni7DqLeKpdgw3BoGCKrRLj8cjQZFun+TIT6OgenvYG+2HCR7aseOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbDVlC8JW9dIpXNt+ClDQstNI8JMB8GA1UdIwQY
MBaAFGs/dtYQgUhlNm+qZ8/GWtBpx8/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZDQ0YTItYTA0Mi00OGIxLThiMDQt
ZjVkMDI4NTRmNTFmLzEvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZDQ0YTItYTA0Mi00OGIxLThiMDQtZjVkMDI4NTRmNTFm
LzEvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJ+S5+Ic
Vq40ODnQ+X1mHbew+1QAlpNwMqC2wikxctnL7Fa7NByEXu3f+66cZpcaW1eV0SgM
Cwmi1FQ2dvsW17SNW7Tkd8PE80mi5ef67QkBHRLRPQROv7kZ8gyAjM9DKBzMDZZb
h5v798seuKizQnC/q6qxRayGA91wkWTTispYyjBT7Rx71ETG4SFj3zLpnsI+CPEU
yNe36llNVGhRQfybAsoufDH4YYch2zd2vaU800xnMm6R21jEekN0T9TtHiMP0tUi
aTs4qDSraxi4A69zIKwn2qyGc1p7HozJRmtMwBLFZeMd5Sb5otGEi9UkTACW/ksp
5bfIyL3JfRtWvg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:10 2026 by rpki-client