Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File: AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier: 9ArBzPWjdXtnjZL2c7vr5+nXXpYC33g3MMR9IOrQDSY=
Subject key identifier: 2B:B7:B5:0B:F5:04:DF:66:F2:3F:FE:19:03:F5:5E:F4:D2:D8:9F:AE
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer: /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial: 01A0CDECC27A8548D60C23B5A25D9490994F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 11:00:40 +0000
Manifest this update: Wed 23 Sep 2026 11:00:40 +0000
Manifest next update: Thu 24 Sep 2026 11:00:40 +0000
Files and hashes: 1: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: 5DZsuBUBFDrAGcba5i3T/SRUep4LT2WQFRV7CQ2nqDY=)
2: VeD0j8DDk8aNazB8XjlyUYtBGB4.roa (hash: 3r6wr0pUmwD48d+/WPFhEsF0b5taens/OvioZS+8fGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:c2:7a:85:48:d6:0c:23:b5:a2:5d:94:90:99:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Validity
Not Before: Sep 23 11:00:40 2026 GMT
Not After : Sep 24 11:00:40 2026 GMT
Subject: CN=2bb7b50bf504df66f23ffe1903f55ef4d2d89fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2e:92:22:3b:5d:51:be:2f:0f:fd:fa:16:3c:
ea:47:c0:9d:0b:66:3f:14:da:7d:90:32:33:99:8d:
58:21:b7:4a:21:38:14:24:80:35:04:34:8b:01:7d:
29:b4:01:83:11:44:1b:d2:71:ac:dd:4d:89:62:2c:
41:7d:05:bc:79:d2:9f:3c:1b:ed:f8:6f:fc:d7:b2:
56:32:ef:78:fb:10:0b:f7:37:15:fa:49:7b:ff:9f:
99:45:d8:18:18:2d:77:ea:7b:78:20:06:55:49:dc:
be:d8:c7:3b:be:b1:92:2a:54:a1:6b:30:f9:2c:08:
99:3b:be:48:5d:48:55:3d:14:17:39:9f:13:6c:2b:
5d:b1:87:b0:1c:82:15:f5:23:66:7a:e5:cc:79:5c:
f6:40:c5:29:f8:61:71:fd:55:69:ff:58:39:13:f3:
d3:96:f1:a0:33:a1:1f:9a:71:39:7b:1b:8f:0e:62:
49:a4:8f:66:89:b1:47:7f:7d:6a:bb:a3:c0:d6:6d:
58:15:de:5d:e0:0c:e6:6a:2b:d8:c6:b3:40:24:56:
f3:dc:63:19:a0:d7:f5:e0:a9:9a:c7:4c:2c:c1:30:
db:28:da:b1:7c:4c:15:75:9c:03:7f:50:fe:91:56:
a0:e1:f6:cb:9b:b8:fc:a2:9c:e4:79:dd:64:20:87:
42:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B7:B5:0B:F5:04:DF:66:F2:3F:FE:19:03:F5:5E:F4:D2:D8:9F:AE
X509v3 Authority Key Identifier:
keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d1:12:10:e5:7e:36:99:0d:71:25:4f:2a:d0:6b:5e:b8:e3:
fd:b3:56:7d:a8:ad:2e:97:e3:9b:a9:b2:8a:e0:ae:7e:dd:73:
43:0a:a0:10:3a:2f:96:d5:fd:17:35:0b:d7:7e:94:3e:30:ba:
8b:fd:d0:93:e6:fa:1d:ee:b3:a5:b8:89:86:29:ca:6d:89:25:
b8:b8:9e:a5:26:f1:8f:93:cd:57:c5:7c:2b:5d:fa:09:27:96:
7e:d4:92:95:86:87:5a:cd:90:8b:98:e9:6f:58:55:15:75:e3:
65:bb:62:3f:93:76:87:ba:ee:d1:7d:3b:c4:26:ff:cd:84:ac:
c1:c8:aa:a1:aa:b0:21:0e:2b:db:b5:15:64:72:ff:17:5f:dc:
19:a8:fe:56:1a:78:07:cf:b0:78:7d:3c:00:ae:b4:6e:03:e0:
45:fb:26:f8:0d:3f:04:53:d1:23:bf:78:ce:20:c8:d2:c2:a0:
c7:30:2f:a4:1d:e4:7a:24:61:8a:79:9f:f0:c9:63:11:9e:1d:
46:0e:16:78:a9:99:5a:6d:2a:19:34:dd:62:b0:c7:92:55:ef:
2c:0b:b6:46:2f:44:40:46:f8:9a:5a:1d:4e:12:29:17:4c:a4:
61:6f:d1:38:fe:5c:cf:ad:8a:a0:cf:23:b0:6f:8f:14:57:eb:
7a:82:f3:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDN7MJ6hUjWDCO1ol2UkJlPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTE0OTY0NjkxNjdjNWIxZDg5MjBiOThiZDUxYWYzZmUz
NWFkZTUwHhcNMjYwOTIzMTEwMDQwWhcNMjYwOTI0MTEwMDQwWjAzMTEwLwYDVQQD
EygyYmI3YjUwYmY1MDRkZjY2ZjIzZmZlMTkwM2Y1NWVmNGQyZDg5ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy6SIjtdUb4vD/36FjzqR8CdC2Y/
FNp9kDIzmY1YIbdKITgUJIA1BDSLAX0ptAGDEUQb0nGs3U2JYixBfQW8edKfPBvt
+G/817JWMu94+xAL9zcV+kl7/5+ZRdgYGC136nt4IAZVSdy+2Mc7vrGSKlShazD5
LAiZO75IXUhVPRQXOZ8TbCtdsYewHIIV9SNmeuXMeVz2QMUp+GFx/VVp/1g5E/PT
lvGgM6EfmnE5exuPDmJJpI9mibFHf31qu6PA1m1YFd5d4AzmaivYxrNAJFbz3GMZ
oNf14Kmax0wswTDbKNqxfEwVdZwDf1D+kVag4fbLm7j8opzked1kIIdCgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCu3tQv1BN9m8j/+GQP1XvTS2J+uMB8GA1UdIwQY
MBaAFAGRSWRpFnxbHYkguYvVGvP+Na3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xZDAxNTItODU2ZC00NzE3LTgyMTkt
YmYyZjk3ZjFlMzRmLzEvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xZDAxNTItODU2ZC00NzE3LTgyMTktYmYyZjk3ZjFlMzRm
LzEvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtESEOV+
NpkNcSVPKtBrXrjj/bNWfaitLpfjm6myiuCuft1zQwqgEDovltX9FzUL136UPjC6
i/3Qk+b6He6zpbiJhinKbYkluLiepSbxj5PNV8V8K136CSeWftSSlYaHWs2Qi5jp
b1hVFXXjZbtiP5N2h7ru0X07xCb/zYSswciqoaqwIQ4r27UVZHL/F1/cGaj+Vhp4
B8+weH08AK60bgPgRfsm+A0/BFPRI794ziDI0sKgxzAvpB3keiRhinmf8MljEZ4d
Rg4WeKmZWm0qGTTdYrDHklXvLAu2Ri9EQEb4mlodThIpF0ykYW/ROP5cz62KoM8j
sG+PFFfreoLzrw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:02:26 2026 by rpki-client