Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: aMq+vNy1nIXKmXstkzupfnjaUaAtffDMtIdxHDu5UuM=
Subject key identifier: 3B:0D:C9:16:C5:95:82:2C:83:46:3F:23:BB:F6:B4:22:62:9D:72:09
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 019D3375F0EEDAB11C476F1ACA54DD29008B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 067E
Signing time: Sat 28 Mar 2026 08:01:00 +0000
Manifest this update: Sat 28 Mar 2026 08:01:00 +0000
Manifest next update: Sun 29 Mar 2026 08:01:00 +0000
Files and hashes: 1: 4xB4yyr6YEm-yvCmxKG_UezWjuY.roa (hash: CVgnePl3GtGgUJvx3YbVJ3pRj6ajgpXzxG/fkBKNNBE=)
2: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: bS/veyElkcY8+8VMG+bL1bl3E404FWaZbRQDrZ80zJE=)
3: w6NI6aLvx4KDIuytptDmPUNw4k8.roa (hash: J4WatUQ1Gg1wlYFtBnYv3nfQa17rcBTANwBndrk06EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:f0:ee:da:b1:1c:47:6f:1a:ca:54:dd:29:00:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Mar 28 08:01:00 2026 GMT
Not After : Mar 29 08:01:00 2026 GMT
Subject: CN=3b0dc916c595822c83463f23bbf6b422629d7209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:c9:89:80:36:cf:7c:d3:78:e8:d6:54:39:
91:6a:ba:2e:c6:0f:4f:84:e0:3d:6f:14:b8:50:42:
92:03:22:0f:3f:76:7f:47:d4:e7:f0:d6:f7:d4:fb:
6b:15:96:e5:9d:da:02:80:f4:b7:3a:da:0e:08:bd:
bb:6c:d5:36:b2:d8:40:f7:0b:82:60:77:d0:c8:d7:
ad:2f:62:df:f1:2e:48:0c:f9:d3:5d:7f:a5:49:f8:
db:51:69:58:82:3d:e3:b1:af:e9:60:b4:da:b5:3d:
43:20:c7:33:2f:bd:7c:06:36:2d:6c:5b:d1:f3:62:
26:0c:02:46:3b:a4:e5:29:91:ec:81:36:e1:a4:10:
59:87:f3:e9:4e:74:f2:7a:70:73:2a:a5:f3:00:90:
50:95:6e:b7:a3:d7:6a:57:ed:23:fd:69:59:f1:69:
d5:2b:3b:e2:e9:cf:67:a5:6d:e4:ed:95:36:82:1d:
1d:c9:11:f1:69:63:a5:a5:05:ef:c2:eb:18:ad:f4:
ed:9d:1b:35:04:d7:58:02:29:92:1d:2c:cf:d3:90:
1a:65:14:17:46:a0:74:9d:c7:c1:92:73:fb:a9:cc:
e6:3c:af:96:65:64:6c:bc:13:61:80:88:27:b9:5b:
12:30:9e:43:b6:21:fe:d5:2d:4a:ff:60:92:dc:03:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0D:C9:16:C5:95:82:2C:83:46:3F:23:BB:F6:B4:22:62:9D:72:09
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:22:ef:7b:cb:19:32:3b:ba:06:70:c6:cd:a8:c7:2a:13:93:
9d:92:35:60:ed:8c:de:7d:e7:25:d9:c6:bf:c0:6a:cc:a3:4d:
7a:ea:29:3d:bf:29:55:30:bd:cb:7c:9c:f2:a9:23:37:3c:6c:
0c:e0:09:d1:2c:cb:82:78:45:52:8f:d6:3b:ff:72:cf:95:c7:
d5:92:90:bf:8b:be:f1:4f:d0:05:e1:44:1a:60:2d:8c:f3:8d:
f9:54:88:6b:6c:d6:71:bb:9f:b3:a7:6d:d2:a2:65:0f:60:b2:
c8:d5:28:d0:4c:14:8e:fc:e9:bc:aa:63:10:40:de:f6:dd:0b:
16:84:98:60:69:e8:52:17:c9:35:76:6b:86:4b:d0:2b:5d:bb:
8b:57:d3:bb:a4:96:96:10:72:8e:67:f7:1e:aa:99:d0:d8:80:
ed:32:d0:e5:9d:92:38:b4:f0:3c:6e:c9:45:e4:41:a7:d0:53:
15:cb:b8:6a:af:36:a7:67:d6:bc:3a:86:09:a8:11:65:af:57:
c2:93:64:60:3a:5c:32:d5:25:c3:5b:93:88:ad:5e:d7:79:d3:
46:2a:f1:75:75:12:aa:bf:0e:26:d1:56:42:ac:be:d6:95:f6:
fc:43:1f:46:7c:a1:2e:69:ae:9f:3d:d4:d2:3f:e8:ee:32:3e:
1b:26:46:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:26 2026 by rpki-client