Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
File: AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json)
Hash identifier: ELjnjs3RwqmwitP8AXGzTyBAyJc8lBB80WyZe5e5oe0=
Subject key identifier: B9:EC:7B:F0:6C:CA:FE:5F:7F:1C:93:11:63:D3:6B:2A:43:A0:4B:79
Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
Certificate issuer: /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Certificate serial: 019D28F32C2C68F726A6A5209A79867D4EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
Manifest number: 02D0
Signing time: Thu 26 Mar 2026 07:01:58 +0000
Manifest this update: Thu 26 Mar 2026 07:01:58 +0000
Manifest next update: Fri 27 Mar 2026 07:01:58 +0000
Files and hashes: 1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: ryQ+Pyd3T2IsYxFy2qlFvlYiVPLMZXV4PdOrSOM4im4=)
2: nmpgPMBFt9dLqNX0M81_MpAwEgA.roa (hash: 4RQmSgy56Vqmok8SF0GYYTjto7wxmhh7LR4/RfXSDMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:2c:2c:68:f7:26:a6:a5:20:9a:79:86:7d:4e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Validity
Not Before: Mar 26 07:01:58 2026 GMT
Not After : Mar 27 07:01:58 2026 GMT
Subject: CN=b9ec7bf06ccafe5f7f1c931163d36b2a43a04b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:cf:e1:f6:ad:11:00:9c:98:a2:ea:c8:84:
c0:22:24:8c:1d:b0:e4:a1:13:22:ab:1f:c3:63:3d:
1e:c1:cd:d1:c3:ab:d4:3a:7a:6f:96:e2:9e:b9:79:
f0:ac:c3:f0:39:a4:c7:22:11:02:75:d1:7d:b5:d6:
ff:41:a6:96:a2:ac:36:d4:f0:95:67:94:01:df:4c:
2f:2c:b6:52:d5:06:01:ce:2e:0c:bd:f2:2a:11:30:
a5:d8:16:00:32:0a:29:ee:3f:8e:ac:c1:0e:57:16:
cd:9f:1e:1a:94:0e:2d:3f:fb:f3:c0:1d:fc:97:8c:
ee:d9:e1:67:0b:30:41:ab:da:7b:d9:fb:e6:22:98:
6e:ec:e3:f4:35:61:84:5a:b9:cc:c6:28:80:96:cc:
16:ad:d8:fd:cc:89:bf:c7:80:cd:0f:02:15:db:e1:
e7:27:9a:2c:b6:46:ca:9e:05:ee:13:b9:8c:94:98:
f9:56:45:50:d2:de:50:7e:b1:80:bf:f8:96:17:78:
2d:ec:7b:f9:91:a8:ba:33:16:22:1f:88:cf:03:18:
9a:65:23:74:ad:89:21:8c:1a:e6:cb:08:79:01:93:
90:a7:5d:5c:7d:28:6c:06:c0:29:40:e1:4a:a6:5d:
ea:83:c3:56:1d:7f:69:b8:7b:d3:30:96:c0:ec:ee:
05:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EC:7B:F0:6C:CA:FE:5F:7F:1C:93:11:63:D3:6B:2A:43:A0:4B:79
X509v3 Authority Key Identifier:
keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0d:de:db:c2:22:97:c4:e4:8b:c7:63:60:79:d1:98:cc:f9:
99:e2:0f:f2:ca:54:39:06:1b:9f:cd:87:e7:1b:28:c1:82:86:
81:49:60:a7:d2:15:77:42:d9:6a:b4:34:4d:f3:fc:35:3e:1f:
fa:e9:ac:da:51:db:d1:99:e3:dc:34:5b:df:be:bb:45:8c:4b:
06:54:e7:36:22:ac:4f:ca:d7:8c:6a:4d:95:dd:d0:08:57:50:
0e:86:74:d8:dd:c9:76:4f:eb:52:90:3e:7e:b3:0f:1a:8d:3e:
3a:d3:28:b8:5b:38:7c:4e:98:ce:27:e2:64:cd:42:c3:d9:82:
a8:82:a5:7f:5d:f4:09:36:99:dc:d5:da:21:5f:86:55:12:f8:
e0:64:4f:bb:a4:d3:31:f8:02:3a:c9:42:79:7a:ee:2c:87:51:
98:71:ae:c2:d1:7b:ee:ed:d0:58:83:c9:48:d6:cb:e9:76:a4:
36:ed:86:19:0b:ee:5c:92:d8:ca:28:df:a2:d6:b9:7b:ec:e7:
44:2a:a3:60:02:16:b7:a1:c1:c0:32:e8:fb:bf:59:44:c2:26:
81:eb:2b:05:fc:9e:d5:3c:78:cf:48:6a:9b:1f:f9:cf:14:54:
0a:39:a5:64:16:89:c6:9a:30:7a:14:71:42:b5:0e:2b:f3:00:
21:6a:ca:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:42 2026 by rpki-client