Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: yjel/44VqyDwkLrDE7UGgMMmPnGcu1x/ymfpoVx3tNw=
Subject key identifier: A2:37:D6:F0:69:87:1E:B2:F4:59:34:45:90:E6:13:05:0E:5A:14:98
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 01A0D26E82FB1DBA0B99791DB1D1B4CD824D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 085E
Signing time: Thu 24 Sep 2026 08:00:52 +0000
Manifest this update: Thu 24 Sep 2026 08:00:52 +0000
Manifest next update: Fri 25 Sep 2026 08:00:52 +0000
Files and hashes: 1: 4xB4yyr6YEm-yvCmxKG_UezWjuY.roa (hash: CVgnePl3GtGgUJvx3YbVJ3pRj6ajgpXzxG/fkBKNNBE=)
2: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: svTZ7vldyMrSWO9delc5F98ScZIZ+aVjeNNvvYqiYCU=)
3: w6NI6aLvx4KDIuytptDmPUNw4k8.roa (hash: J4WatUQ1Gg1wlYFtBnYv3nfQa17rcBTANwBndrk06EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:82:fb:1d:ba:0b:99:79:1d:b1:d1:b4:cd:82:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Sep 24 08:00:52 2026 GMT
Not After : Sep 25 08:00:52 2026 GMT
Subject: CN=a237d6f069871eb2f459344590e613050e5a1498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:4d:8c:9e:f5:13:81:e5:bb:7a:76:23:a0:
21:02:9e:3d:7a:49:50:b0:5b:f8:8e:b9:76:23:d3:
9e:21:a2:0e:65:e3:d8:ec:c9:1e:e8:31:29:47:b2:
61:ba:eb:b6:79:d2:21:30:ed:a9:18:c0:5b:68:f5:
95:f1:b3:57:4e:3e:61:f6:6a:da:48:b8:fa:0e:f4:
eb:30:23:0c:58:0a:c1:f9:c7:a7:c8:fe:8c:69:58:
08:40:4e:ad:cb:9b:0c:1c:75:d9:a0:89:62:60:8c:
df:e0:4d:10:ae:94:ad:08:62:22:29:1e:06:ba:8e:
5d:76:f8:42:f0:9a:86:95:a9:28:ae:e4:db:c6:b5:
f6:1f:7e:49:44:eb:e1:f8:ba:f8:a9:a8:c5:4f:98:
e4:8c:10:dc:57:42:83:89:3f:1e:19:0f:7f:78:3c:
fa:60:ea:13:bf:c6:de:68:f6:83:f5:98:82:dc:b3:
49:2f:48:4d:d2:67:0e:65:93:97:a5:1c:10:72:04:
f4:9e:5a:49:b3:e6:a7:5f:84:c4:d2:b7:47:7b:0b:
39:ff:65:96:f7:53:64:34:8f:5e:d7:f5:ac:02:7b:
d4:b2:41:a0:67:81:a3:7f:9b:e6:be:c9:6a:a6:4c:
4d:0c:25:52:b0:75:4c:85:79:60:49:cf:44:69:3e:
ae:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:37:D6:F0:69:87:1E:B2:F4:59:34:45:90:E6:13:05:0E:5A:14:98
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ac:a9:2e:d5:e4:a8:7c:16:ce:34:d0:65:1c:99:44:6a:ac:
e8:e3:6d:2c:1a:47:5a:68:e9:c5:65:10:9b:ff:4a:ed:2c:5e:
43:1f:a9:41:32:1f:d5:4e:e1:f4:25:54:07:f9:31:4d:27:68:
a3:c0:f9:a2:b1:59:e6:05:f3:cd:dc:1d:8d:55:1e:cd:a5:30:
57:b1:fc:cc:da:52:bb:73:0c:c0:e7:5a:ab:64:38:ff:a7:6a:
78:94:23:a5:9a:8d:69:55:c4:9a:06:3a:0c:d6:db:d9:09:9b:
ca:ea:8d:e1:f8:14:f0:ae:76:e4:43:00:fc:08:f8:94:31:05:
d0:1e:11:fe:cb:7c:33:6b:79:b2:84:fb:26:32:18:2e:5d:87:
2f:bf:a1:dc:46:43:7f:92:42:1b:8f:fd:f2:55:2b:a7:d3:36:
c8:55:ab:16:c7:60:7d:fb:ac:d9:a4:0e:4d:d6:32:3f:31:53:
67:ae:9a:2c:60:c6:7b:8c:55:a2:04:90:90:5f:63:84:1c:1f:
6d:ed:34:76:fa:b9:03:5d:fb:b2:7d:d9:89:25:df:1a:7e:8a:
0d:1d:4d:15:78:56:76:e6:e1:ee:3e:dd:bd:b9:dd:0b:2f:00:
5b:be:c9:a0:90:88:9d:99:2f:82:01:bd:34:3c:05:00:8d:4c:
c1:f5:1b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:53:46 2026 by rpki-client