Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier: rIcLt6KYIsPmGe0HKLlO5e4+yiCVNnquw+HI9JPc+F8=
Subject key identifier: D1:80:64:46:21:59:14:17:0D:16:41:89:C0:93:2F:27:7D:88:D0:45
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial: 01A12A9F5C16260FA9016E8571BB0AFDFEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number: 1A99
Signing time: Sun 11 Oct 2026 11:00:49 +0000
Manifest this update: Sun 11 Oct 2026 11:00:49 +0000
Manifest next update: Mon 12 Oct 2026 11:00:49 +0000
Files and hashes: 1: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: v9i+eVIUk841KpQJzIa3ZN4Xn9qrF5NHBFrAAQT0dtQ=)
2: eTrUoV1B4bRDuSSd3vjzahf5Fv0.roa (hash: IbkmdqkTYW4Kd/WPuzbn4B9/sqXybS99skf40EqigTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:9f:5c:16:26:0f:a9:01:6e:85:71:bb:0a:fd:fe:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Validity
Not Before: Oct 11 11:00:49 2026 GMT
Not After : Oct 12 11:00:49 2026 GMT
Subject: CN=d1806446215914170d164189c0932f277d88d045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:6a:19:36:30:7c:de:fe:b7:6a:19:5e:35:
4b:95:02:ae:d0:47:51:f6:a6:7d:26:6b:36:89:9b:
b1:ae:a4:2b:6f:f9:d9:77:58:20:47:70:b1:55:e2:
05:dd:0a:e7:03:08:3e:9a:99:ab:55:68:22:ec:ef:
99:43:fb:90:50:fd:e6:38:6f:f9:f3:f0:8b:f8:3d:
ae:bd:85:5b:d0:cc:6a:f9:a3:c4:d1:9f:ac:d8:28:
ac:97:bc:c9:cc:61:31:8f:b8:2c:99:19:98:98:f3:
89:e1:c1:69:cb:00:15:13:15:c1:1b:c4:42:fc:7c:
c0:0f:8b:f6:81:ba:46:71:2b:73:42:ed:ee:b7:44:
e5:27:09:75:c4:65:99:40:ee:35:f9:53:94:bd:18:
46:3b:78:b4:24:45:c0:55:16:9c:c6:64:fa:39:5f:
e5:b4:38:77:64:8f:a0:68:1a:8a:d0:8b:14:4b:c2:
0e:b8:dd:9c:19:5d:0e:c1:ed:68:0d:d2:d6:aa:1f:
f5:59:18:36:88:8d:8e:5d:f0:39:ff:ef:02:73:c5:
27:0b:db:cf:88:23:e6:a9:7b:e0:b4:0a:1f:3e:7b:
0d:68:64:64:fc:a1:01:47:15:7d:2e:63:91:8e:02:
09:8f:ca:fa:d8:72:b8:df:68:59:a0:68:4e:1e:00:
f1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:80:64:46:21:59:14:17:0D:16:41:89:C0:93:2F:27:7D:88:D0:45
X509v3 Authority Key Identifier:
keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:1b:c7:86:95:1d:6a:4b:cb:df:bb:35:43:75:69:a0:ac:f6:
09:b0:8b:36:81:6f:21:11:71:cd:ba:f8:a8:1c:42:3c:69:b2:
78:33:db:04:d2:20:f4:8e:d5:e0:1d:d1:6b:5e:c9:4f:91:72:
6d:4d:7f:a3:fe:f6:22:8c:08:c7:47:8a:26:d6:c6:53:d7:b7:
82:ee:4a:c1:c3:c7:89:eb:b7:39:75:14:42:f6:3a:07:43:b9:
62:aa:00:9e:48:a9:05:98:cf:b3:8b:d1:ab:17:2d:2c:a1:dc:
67:29:66:9f:37:f8:a7:c4:ff:07:dd:17:23:59:bb:70:74:43:
0b:2f:b8:11:56:f4:68:b2:a9:fe:75:36:63:5d:c5:8a:12:c0:
60:9d:de:6b:f1:a2:2e:bd:10:3f:95:d7:f1:0f:5e:26:48:06:
f1:6b:51:ed:73:f4:a3:79:4a:06:4d:5b:eb:4e:bf:2f:77:df:
e0:ce:ce:6a:d5:d5:7a:2e:44:40:8a:30:6d:60:6a:07:92:b7:
cc:78:04:0a:bc:b9:32:b0:09:80:e8:ca:d9:89:94:f3:1a:ce:
e7:f1:5e:a3:18:76:9d:19:24:ce:e5:63:cb:4a:e1:83:3e:97:
8a:d7:8d:4c:68:f6:bc:6a:c7:6b:ae:db:57:e2:61:15:8c:6f:
38:e3:d1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:07:59 2026 by rpki-client