Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File: AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier: YuJYQ9ZEPMVLS8BpJeGitO/YyijZjReWGvDhaGqG2TI=
Subject key identifier: 9C:FA:1E:EE:32:A0:22:2A:BF:CD:82:2F:CE:7B:71:2E:B7:7F:35:AA
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer: /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial: 019D2928F7AE1699DE6261FE1E7274A4223B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:00:43 +0000
Manifest this update: Thu 26 Mar 2026 08:00:43 +0000
Manifest next update: Fri 27 Mar 2026 08:00:43 +0000
Files and hashes: 1: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: iJ1su1v+grOpeRJU5ZBvpLITBJxr/kJd0pW3UbdM058=)
2: VeD0j8DDk8aNazB8XjlyUYtBGB4.roa (hash: 3r6wr0pUmwD48d+/WPFhEsF0b5taens/OvioZS+8fGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:f7:ae:16:99:de:62:61:fe:1e:72:74:a4:22:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Validity
Not Before: Mar 26 08:00:43 2026 GMT
Not After : Mar 27 08:00:43 2026 GMT
Subject: CN=9cfa1eee32a0222abfcd822fce7b712eb77f35aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:0d:73:27:35:cb:e6:99:87:20:3c:bd:fd:
23:2a:67:87:b1:88:bd:c9:99:c3:b5:04:51:77:54:
2b:97:df:9b:ad:1e:c9:08:16:da:ac:23:ca:6c:ad:
3e:98:cf:8e:da:ab:d6:85:43:16:cf:a6:ea:4c:8a:
4b:76:ba:00:49:8c:1c:a5:62:54:96:51:31:3e:1b:
77:17:86:82:c1:df:c0:e2:e6:68:92:b2:26:dc:54:
7a:31:07:af:1e:9a:cb:58:c2:60:84:ab:1f:da:02:
33:a2:74:1a:04:bb:5a:2b:60:2d:ae:0a:20:95:6a:
a4:c3:41:ec:2f:92:77:7f:87:9e:29:14:c7:02:09:
1f:2b:f4:97:c6:11:e8:42:c3:45:3f:5c:af:a9:ba:
52:34:da:2d:86:8a:ce:d2:fe:48:66:4a:c2:92:19:
b1:71:9e:19:8e:2c:1b:8b:a2:d5:af:50:36:f4:d4:
ff:cf:75:aa:ae:e3:23:82:96:54:c7:1e:90:98:76:
aa:94:c7:9d:90:df:7e:4b:b0:93:4c:29:3c:c1:90:
43:6f:b4:31:48:2d:27:e6:e4:3c:71:36:fd:8a:90:
78:56:47:3f:d3:7c:5f:89:a0:c6:d1:87:2d:df:c3:
eb:73:8d:82:6d:d4:0a:fe:70:66:8e:b5:94:24:70:
a3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FA:1E:EE:32:A0:22:2A:BF:CD:82:2F:CE:7B:71:2E:B7:7F:35:AA
X509v3 Authority Key Identifier:
keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4e:51:30:f8:64:94:dd:b6:1f:d7:24:19:d4:e4:65:46:63:
12:19:7d:4e:b6:b3:84:03:a9:e7:92:69:dc:2c:9c:90:07:a2:
40:de:91:f4:f9:b0:88:38:24:da:66:71:40:b8:76:7b:1a:33:
46:cd:86:92:11:c9:df:0a:ac:98:b8:fc:eb:4d:41:f3:31:50:
54:0d:20:5a:ac:e6:ab:5e:6a:ef:35:2d:96:92:de:e1:f2:12:
93:37:82:4d:63:11:fe:b7:47:5b:7e:a3:75:7f:ef:c6:3f:7a:
ba:86:0a:fc:1b:2b:21:f0:e5:48:42:13:64:2c:ba:a4:1b:38:
5e:f1:58:62:49:94:d1:8a:cc:7b:c5:c1:0b:cb:b0:5f:95:af:
88:15:26:cb:a0:dd:66:3d:99:d2:1c:8f:b7:68:06:55:b7:45:
32:6a:86:a6:bb:7c:6d:06:41:31:f5:40:8d:b3:6e:b2:a0:de:
14:06:df:ea:28:77:6f:5e:65:e9:fc:52:d1:c4:0d:c6:04:2a:
94:03:c1:73:08:4b:64:2a:e8:5b:8e:92:a7:9a:2d:b9:37:42:
10:c9:6f:47:c8:e6:07:51:5c:13:68:29:4b:f0:fb:58:b3:0e:
a4:ae:a5:74:e3:ea:6f:43:57:90:58:89:af:7a:8e:fa:39:35:
70:95:fb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:40:33 2026 by rpki-client