Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: FiiAz0bRc7uROpJzkLsrn/q3YEan4f7kRsYh32F5KbY=
Subject key identifier: 22:3F:4C:3A:4C:ED:19:4D:2E:0C:90:04:DD:93:5A:4E:83:28:08:19
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 019E1D2233C154D20D6DBEEA9FED8FF3B507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 06F7
Signing time: Tue 12 May 2026 17:00:41 +0000
Manifest this update: Tue 12 May 2026 17:00:41 +0000
Manifest next update: Wed 13 May 2026 17:00:41 +0000
Files and hashes: 1: 4xB4yyr6YEm-yvCmxKG_UezWjuY.roa (hash: CVgnePl3GtGgUJvx3YbVJ3pRj6ajgpXzxG/fkBKNNBE=)
2: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: 93DP4XAMdDgibBSctQmpazQITCx4nqjsKHNgp0OQwJk=)
3: w6NI6aLvx4KDIuytptDmPUNw4k8.roa (hash: J4WatUQ1Gg1wlYFtBnYv3nfQa17rcBTANwBndrk06EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:33:c1:54:d2:0d:6d:be:ea:9f:ed:8f:f3:b5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: May 12 17:00:41 2026 GMT
Not After : May 13 17:00:41 2026 GMT
Subject: CN=223f4c3a4ced194d2e0c9004dd935a4e83280819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:76:7c:d8:90:18:07:4e:9d:b1:22:e3:2c:
13:4c:14:ba:af:f2:8f:be:e0:f6:37:32:7d:69:be:
0a:64:a8:3e:66:f2:0b:19:22:0d:d7:43:07:e8:cb:
01:82:c5:c0:49:cc:60:f0:a6:4f:8c:4e:a6:ee:5b:
e3:70:58:63:85:25:77:13:95:8f:10:47:f9:d2:9f:
d8:de:13:dc:d1:67:99:3d:29:c5:bc:3c:0e:ae:ba:
a4:3e:b6:19:fc:d6:7a:23:8c:86:29:93:f6:b8:04:
70:c0:73:ad:79:0a:54:1b:cb:3f:29:22:3e:dd:e1:
70:02:d4:63:76:92:af:95:33:fc:d2:e7:79:64:3e:
03:6d:59:11:7e:5f:bb:c9:9b:b4:64:2d:f6:93:76:
57:68:71:7a:f4:65:ab:9a:2c:88:3f:43:99:45:fe:
61:4e:e7:02:f9:f6:e0:81:b5:73:65:68:4e:9c:c3:
b1:0e:c0:47:22:f2:ce:a8:91:d2:59:61:96:ae:21:
f0:9f:73:17:63:63:55:ff:39:3c:ef:69:d5:eb:78:
3a:2a:c5:42:fd:05:07:b5:d4:a1:a4:1c:8a:7a:9f:
47:fd:9e:51:eb:42:f7:cd:cb:80:cf:b8:b9:d4:4a:
c4:96:d5:cf:c2:97:e1:bd:68:82:5f:db:94:ba:24:
9c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3F:4C:3A:4C:ED:19:4D:2E:0C:90:04:DD:93:5A:4E:83:28:08:19
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b5:3a:e4:a9:42:ec:cb:fe:35:fd:a2:6e:4c:7c:6e:ca:df:
a7:23:e8:59:ba:6b:6b:e8:fa:d7:86:d6:ad:4c:48:ae:ad:a4:
6f:07:f1:04:b1:7e:01:7a:60:07:1d:f8:bf:ec:52:c5:ba:8e:
e7:45:8b:7b:b5:ca:b0:ca:c2:96:ec:38:98:20:c0:b9:55:25:
4e:d7:3a:20:a0:8c:a4:23:8f:db:7c:61:6c:ed:97:ce:f4:34:
1c:00:35:e4:a8:02:cf:33:b4:85:76:55:af:86:e7:63:10:d9:
86:5c:56:c5:00:54:de:d2:02:80:fe:f7:2c:2c:15:78:4b:cc:
25:19:7a:41:df:4b:da:9b:69:c6:37:51:59:d9:88:21:e2:2d:
9d:e7:29:f9:85:0f:2d:de:5a:70:02:40:7e:77:d6:f2:37:71:
73:93:8e:6f:8a:36:e2:14:b2:a5:e6:ca:0b:66:6d:80:10:85:
92:11:69:04:95:0d:32:ba:63:c7:8b:0f:0a:09:d5:2b:73:8f:
bb:f5:6f:e2:07:21:a3:3f:af:d8:ac:38:44:41:de:f0:c5:2e:
27:ba:04:11:97:0e:75:57:e6:46:bc:71:04:5c:fc:d3:0c:20:
d4:ce:a6:ac:eb:d1:ad:a7:d9:83:cf:fa:8c:f2:b1:80:ee:c9:
c3:84:e0:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIjPBVNINbb7qn+2P87UHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMzY0ZmNlZGQ2OTEzNTc3MzNjZDVjY2Q3MDI5ZGI4ZTYx
ZDFlM2EwHhcNMjYwNTEyMTcwMDQxWhcNMjYwNTEzMTcwMDQxWjAzMTEwLwYDVQQD
EygyMjNmNGMzYTRjZWQxOTRkMmUwYzkwMDRkZDkzNWE0ZTgzMjgwODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYx2fNiQGAdOnbEi4ywTTBS6r/KP
vuD2NzJ9ab4KZKg+ZvILGSIN10MH6MsBgsXAScxg8KZPjE6m7lvjcFhjhSV3E5WP
EEf50p/Y3hPc0WeZPSnFvDwOrrqkPrYZ/NZ6I4yGKZP2uARwwHOteQpUG8s/KSI+
3eFwAtRjdpKvlTP80ud5ZD4DbVkRfl+7yZu0ZC32k3ZXaHF69GWrmiyIP0OZRf5h
TucC+fbggbVzZWhOnMOxDsBHIvLOqJHSWWGWriHwn3MXY2NV/zk872nV63g6KsVC
/QUHtdShpByKep9H/Z5R60L3zcuAz7i51ErEltXPwpfhvWiCX9uUuiScHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCI/TDpM7RlNLgyQBN2TWk6DKAgZMB8GA1UdIwQY
MBaAFAM2T87daRNXczzVzNcCnbjmHR46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEt
YWJmMGI1OTQ2NDZmLzEvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEtYWJmMGI1OTQ2NDZm
LzEvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsrU65KlC
7Mv+Nf2ibkx8bsrfpyPoWbpra+j614bWrUxIrq2kbwfxBLF+AXpgBx34v+xSxbqO
50WLe7XKsMrCluw4mCDAuVUlTtc6IKCMpCOP23xhbO2XzvQ0HAA15KgCzzO0hXZV
r4bnYxDZhlxWxQBU3tICgP73LCwVeEvMJRl6Qd9L2ptpxjdRWdmIIeItnecp+YUP
Ld5acAJAfnfW8jdxc5OOb4o24hSypebKC2ZtgBCFkhFpBJUNMrpjx4sPCgnVK3OP
u/Vv4gchoz+v2Kw4REHe8MUuJ7oEEZcOdVfmRrxxBFz80wwg1M6mrOvRrafZg8/6
jPKxgO7Jw4TgCA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:51:07 2026 by rpki-client