Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
File: azT6U9HYTbq-aY1bvMrt8QnRV64.mft (raw, json)
Hash identifier: uT2WkUW9XKEnaRIkV1IiTYq9DKLucuWUF/2WaMhoKss=
Subject key identifier: AD:25:3E:0A:9D:6F:99:1B:7E:F0:FC:B7:E8:B4:96:4A:20:62:64:85
Authority key identifier: 6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
Certificate issuer: /CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Certificate serial: 019D2704C82E5EA1816404774D91CA771FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 22:01:57 +0000
Manifest this update: Wed 25 Mar 2026 22:01:57 +0000
Manifest next update: Thu 26 Mar 2026 22:01:57 +0000
Files and hashes: 1: azT6U9HYTbq-aY1bvMrt8QnRV64.crl (hash: 501SmHHoOzrK6XhBl9rgQq1JG4OX5HElqOsj3/LlttQ=)
2: yYNRRHKgdOtFCz00-g6t9I_K7Go.roa (hash: IitB/79yukkXZTOZinZCbobPH0H2QgNqEDx9S8eqm08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c8:2e:5e:a1:81:64:04:77:4d:91:ca:77:1f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Validity
Not Before: Mar 25 22:01:57 2026 GMT
Not After : Mar 26 22:01:57 2026 GMT
Subject: CN=ad253e0a9d6f991b7ef0fcb7e8b4964a20626485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:1b:fe:d0:34:90:b5:b9:29:d5:81:68:7c:
e4:42:7e:00:60:aa:c3:d2:db:4a:22:4c:3b:97:58:
cb:5d:0b:d9:ce:8d:76:72:58:95:38:ea:92:92:fc:
12:1e:34:b7:81:7a:27:7b:1b:78:48:8d:ab:42:d3:
91:97:bc:54:d9:2e:88:eb:9d:92:52:37:f7:10:9a:
c0:26:f6:b0:44:6a:31:32:fe:99:f2:f3:7b:73:f2:
96:39:a1:c8:c4:c4:aa:10:b6:09:7c:fc:4d:bf:f7:
82:6f:b1:06:e2:56:33:19:03:6e:db:ef:df:68:7a:
c9:76:2e:51:23:77:65:2b:41:4b:cc:c9:e5:c8:4f:
eb:5d:d0:94:d6:26:5f:b8:e8:81:e8:65:43:9f:dd:
fc:c1:11:32:39:e3:1a:b1:3f:b2:90:f7:9c:ff:ae:
cf:bf:ba:13:3f:cb:e3:ac:70:9d:c1:c9:ce:b5:e5:
53:80:2a:89:f2:ab:17:9a:d4:47:7c:98:2e:9f:6c:
ed:e2:e9:7c:41:2c:c8:31:14:db:a5:ee:c3:a0:87:
c0:34:bd:6c:2e:0c:47:ea:d3:ee:95:b5:77:15:40:
17:1f:ad:d5:1c:67:ea:8c:33:9b:82:e5:b9:11:f3:
e7:28:46:6b:35:d2:2c:14:ff:1f:30:03:2a:45:5c:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:25:3E:0A:9D:6F:99:1B:7E:F0:FC:B7:E8:B4:96:4A:20:62:64:85
X509v3 Authority Key Identifier:
keyid:6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:48:d1:9b:5e:b8:49:43:f0:7e:54:28:02:23:d6:96:4b:ba:
7b:91:36:d0:e7:be:11:ea:e1:53:04:13:b8:d4:04:3c:ee:16:
1c:ab:a5:96:79:4b:a9:75:e5:48:fc:5f:c1:43:3c:48:69:79:
82:d2:1a:84:9d:c7:a0:14:9d:43:b4:b6:04:4f:91:d4:d4:bc:
d8:17:97:34:16:28:33:e0:83:56:09:43:7f:44:e5:fd:05:de:
ce:42:82:07:5f:c8:11:58:08:be:1e:ab:b8:26:63:85:cc:27:
4c:14:1c:d1:25:88:2c:9c:c4:0e:cc:b8:cc:7b:e0:52:eb:b5:
3c:32:62:14:8a:ab:ee:39:fe:5b:a2:96:0e:b3:56:30:34:f3:
a8:95:79:0a:12:c0:93:4b:13:6a:9b:28:16:62:bc:55:3b:cd:
fd:b3:82:73:54:97:c9:d1:0e:ad:ee:36:61:d5:c1:55:4f:b5:
8e:3d:22:67:86:42:23:ce:74:ef:e1:80:81:a0:ba:02:f3:4d:
e2:c5:b1:89:4a:d6:6c:59:24:13:dc:72:0f:bf:15:c0:38:b2:
e0:9b:86:8c:b0:f8:66:35:25:3f:bd:fb:57:ed:3a:39:ee:07:
26:19:a4:5d:7e:89:07:c0:41:08:78:f9:1f:ef:6c:c2:47:6a:
28:7e:e7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:36 2026 by rpki-client