Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
File: AZaQhdv67lorEfXMh_WddBh4vR4.mft (raw, json)
Hash identifier: c32BkYsVU8N3AJ14R/2RewsyAj3Kc/tFVJjP4HEpemc=
Subject key identifier: F9:A0:1C:D5:20:42:1E:3E:E6:A2:F1:6E:00:99:03:5F:DF:D6:C6:F7
Authority key identifier: 01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
Certificate issuer: /CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Certificate serial: 019E1BD8A1FC2BD72309FF6383651DBA8D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
Manifest number: 0402
Signing time: Tue 12 May 2026 11:00:42 +0000
Manifest this update: Tue 12 May 2026 11:00:42 +0000
Manifest next update: Wed 13 May 2026 11:00:42 +0000
Files and hashes: 1: AZaQhdv67lorEfXMh_WddBh4vR4.crl (hash: j++UgSR4CVdSWAPrmBusW+q4tgsCqVHBLGbPH0SsuQY=)
2: mrgQvPT5f81LqdW8fBMupeJKuJU.roa (hash: xHnIDJmAiiC8Js7rQ2nzM4B4BoLoJOSKWWF32wLisBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:a1:fc:2b:d7:23:09:ff:63:83:65:1d:ba:8d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Validity
Not Before: May 12 11:00:42 2026 GMT
Not After : May 13 11:00:42 2026 GMT
Subject: CN=f9a01cd520421e3ee6a2f16e0099035fdfd6c6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:42:87:6a:26:8f:86:23:df:ea:0b:1e:de:
cc:01:7b:62:1b:3a:7b:45:c9:e5:27:b6:60:06:c7:
c6:c1:c1:66:8f:90:da:37:ed:18:9d:85:62:c1:14:
c4:71:d8:ff:41:51:ef:91:1d:aa:9d:4b:d0:38:43:
f0:4b:02:21:f1:db:12:f9:46:54:5d:71:66:0c:d8:
7b:61:83:dc:f5:fb:3c:0a:00:49:a5:ed:da:8f:36:
54:0b:9f:43:2d:ea:c9:59:b3:f4:da:91:16:50:ea:
ed:22:a4:95:7c:82:42:92:c5:4a:d1:f3:32:d4:30:
5c:a7:72:d4:70:66:40:bd:1b:f2:c4:f2:78:20:f4:
b9:ae:13:b6:2b:e1:d3:4d:27:9f:e9:38:69:a8:46:
5a:0d:19:4e:d9:32:98:b0:72:e5:9a:04:b9:0a:97:
0e:07:c9:e3:63:1f:e8:e4:d1:f2:df:a2:4b:51:cb:
af:2c:76:93:cd:33:91:bc:27:df:2d:a6:0c:3c:72:
2d:6d:e4:af:55:26:b0:b4:a3:90:fd:d5:e2:43:bd:
99:c7:5a:80:a7:cc:2d:d7:4f:f2:ce:48:6d:94:86:
b4:54:8c:9e:a5:11:90:66:3f:e8:80:ba:7d:9a:60:
88:91:26:77:e2:83:18:3e:b1:3d:76:0b:f7:2b:1b:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A0:1C:D5:20:42:1E:3E:E6:A2:F1:6E:00:99:03:5F:DF:D6:C6:F7
X509v3 Authority Key Identifier:
keyid:01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:14:b2:a7:6a:5a:65:92:67:ac:40:b7:d2:8d:8d:89:21:04:
7a:44:f3:a4:1f:3d:27:ce:49:bb:fa:2e:88:05:d7:dc:35:08:
82:52:e9:c7:9b:f9:2b:f4:8a:28:6a:ec:12:e6:39:be:a1:13:
fe:06:55:63:56:cf:a1:55:ed:36:71:17:b4:3e:b3:82:64:6b:
d2:cf:1e:cc:65:52:39:a2:8f:62:98:6b:cd:ab:2f:03:f6:5e:
a0:56:e0:1c:68:78:ad:09:b4:b3:ac:f4:06:2f:4d:09:46:5f:
98:ca:c2:48:77:3c:75:65:5a:09:cf:5b:43:45:fc:2c:47:6d:
6a:68:11:c9:2f:c4:83:ad:1d:d8:55:a2:c1:05:8f:4c:25:f5:
e7:b1:0c:3d:84:f6:d3:fd:fc:69:cd:f0:6f:f9:40:b6:c2:1d:
52:81:93:0d:be:f2:48:24:a7:ad:7b:9d:b4:7e:6d:6d:92:f8:
04:e2:75:5e:12:e0:29:49:cf:7a:97:b2:1a:3a:7b:ab:22:f7:
66:0d:f8:73:74:34:26:8b:7e:5a:9c:67:5c:0d:02:d3:28:f4:
db:19:be:e6:e8:43:ae:1b:7e:43:a0:87:90:7d:2f:e7:d0:d0:
34:1b:7b:9e:60:48:4f:2f:9d:3f:d4:45:26:06:0f:9c:8c:3e:
3d:ca:04:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:45 2026 by rpki-client