Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
File: az-2BsttcRGHiqeonJVaruhPPdw.mft (raw, json)
Hash identifier: DTTUEDhqgwz/bxVHkT028SJH5C4ax5wZ8c6bw0wfJ1E=
Subject key identifier: D5:1A:FD:19:C7:5C:67:A2:84:1D:A0:74:DA:82:E8:16:DF:0A:06:5B
Authority key identifier: 6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC
Certificate issuer: /CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
Certificate serial: 019D25843243A6D1FD3E11340DBC94CE24A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
Manifest number: 17D5
Signing time: Wed 25 Mar 2026 15:01:53 +0000
Manifest this update: Wed 25 Mar 2026 15:01:53 +0000
Manifest next update: Thu 26 Mar 2026 15:01:53 +0000
Files and hashes: 1: az-2BsttcRGHiqeonJVaruhPPdw.crl (hash: TItVPWvsP5zvM0ikQKS58VlyToKZih6bq9d1gXf2hRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:32:43:a6:d1:fd:3e:11:34:0d:bc:94:ce:24:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
Validity
Not Before: Mar 25 15:01:53 2026 GMT
Not After : Mar 26 15:01:53 2026 GMT
Subject: CN=d51afd19c75c67a2841da074da82e816df0a065b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:a1:d5:67:61:8e:12:70:0a:9f:10:e3:38:
e2:7b:a5:1e:bb:1e:90:5e:ce:98:f1:72:f8:9f:7f:
a4:43:a2:36:c3:d1:c8:7a:6f:53:79:58:b2:ce:8a:
d6:94:19:6b:69:ba:e7:09:ce:c4:c2:a5:97:85:10:
41:24:87:0e:4c:90:f7:6a:77:e1:91:71:07:3b:bc:
8d:6c:56:89:b8:79:82:d3:1a:85:4b:7e:80:bf:32:
e0:61:5d:f3:ab:b3:aa:81:47:f3:ba:69:c4:30:e5:
f0:5b:a7:33:12:b4:43:4d:a5:da:65:37:26:8a:56:
19:27:e5:36:84:45:24:a2:ff:12:47:f0:51:4e:77:
bd:f2:ca:1f:ee:ab:ea:2a:31:2f:f3:89:98:2d:93:
f0:e3:18:22:99:b9:e9:40:fd:de:90:2b:77:20:bd:
03:62:ff:54:c6:38:26:6a:dd:34:31:c1:bc:e5:46:
d8:6e:26:76:f5:ec:32:68:d2:bb:a7:8c:a0:3a:7f:
6a:0e:34:07:67:d9:4f:db:26:44:19:bc:8f:7e:62:
e0:95:18:07:2a:c4:67:b3:54:a3:ad:d9:ef:55:80:
ed:34:2b:41:b2:85:fd:4b:67:19:3a:6c:b9:c1:cb:
d2:b4:1f:50:14:b2:33:91:ce:06:c8:a2:62:e5:27:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1A:FD:19:C7:5C:67:A2:84:1D:A0:74:DA:82:E8:16:DF:0A:06:5B
X509v3 Authority Key Identifier:
keyid:6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e2:bb:d8:f3:71:c1:4d:df:f6:a3:91:c7:c8:f4:43:68:63:
89:e1:fc:01:61:57:cb:2f:8a:f8:68:2c:1a:94:c1:fd:16:4b:
45:7b:97:c9:36:1a:dd:cb:c5:0e:ab:59:94:59:bf:8a:19:6a:
4b:ce:67:78:bc:cb:37:45:f3:b0:55:64:73:bc:6f:21:57:f5:
ad:31:00:aa:48:08:6b:d1:d2:10:ce:b9:83:0c:1e:2e:fc:2e:
2a:f7:7c:61:50:6b:e5:c9:f2:85:66:18:f3:09:be:f0:d3:29:
68:4e:c4:29:4d:bd:98:13:4e:14:e3:2f:53:5e:51:81:77:a5:
ed:62:b5:03:9e:fe:de:c3:67:4e:7c:73:ca:cb:97:64:90:c4:
26:5e:63:fd:bf:6f:3f:42:35:54:57:07:87:70:25:37:23:0e:
ca:77:0b:fd:14:1d:d3:19:01:87:9e:4d:b2:2c:df:27:03:21:
37:85:0f:d6:c6:df:de:98:10:30:eb:6f:45:9a:8c:03:af:9a:
1e:a1:bf:49:84:1d:3f:a8:90:10:8c:c0:4e:5b:fb:34:11:eb:
ea:b5:15:5e:91:af:29:91:95:38:9e:00:99:8f:0d:d6:af:22:
f4:5a:d7:20:68:e3:81:b4:bf:22:38:6c:2a:e6:c0:50:72:aa:
cc:7b:be:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:31 2026 by rpki-client