Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
File: AZaQhdv67lorEfXMh_WddBh4vR4.mft (raw, json)
Hash identifier: JT+ilb1oYqPbPwqZF0ilah3NHgq/mHNyH4PBNitixng=
Subject key identifier: 54:CA:21:36:FE:38:AE:E6:A5:9F:0D:26:79:47:61:05:DC:1E:B3:C5
Authority key identifier: 01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
Certificate issuer: /CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Certificate serial: 019D2A7238FB0CE5DCF4EBEC9732C9B86D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
Manifest number: 0385
Signing time: Thu 26 Mar 2026 14:00:21 +0000
Manifest this update: Thu 26 Mar 2026 14:00:21 +0000
Manifest next update: Fri 27 Mar 2026 14:00:21 +0000
Files and hashes: 1: AZaQhdv67lorEfXMh_WddBh4vR4.crl (hash: 1u34Xll519/607X5Dpc9sYMGbiqakZCf6mljv1cNMp8=)
2: mrgQvPT5f81LqdW8fBMupeJKuJU.roa (hash: xHnIDJmAiiC8Js7rQ2nzM4B4BoLoJOSKWWF32wLisBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:38:fb:0c:e5:dc:f4:eb:ec:97:32:c9:b8:6d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Validity
Not Before: Mar 26 14:00:21 2026 GMT
Not After : Mar 27 14:00:21 2026 GMT
Subject: CN=54ca2136fe38aee6a59f0d2679476105dc1eb3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:d3:05:33:05:74:b7:3b:9b:df:83:7d:2f:
19:c3:1f:9d:cc:64:db:a7:26:8d:32:9e:f3:d9:ec:
5b:28:64:6d:af:03:84:ac:69:22:2e:f0:c9:1d:a5:
8d:a0:5d:f4:43:f0:8d:ee:08:65:57:9f:2d:52:2d:
67:9b:ee:0a:35:cb:aa:e6:b6:e3:b0:cc:78:42:54:
3a:f8:ae:b7:25:e1:b2:48:50:f0:14:43:38:fa:95:
26:aa:fe:01:49:b0:38:b4:89:78:dc:ab:04:32:ad:
a5:7f:04:43:bb:ff:71:a7:98:0f:e5:dc:15:ca:17:
06:f9:46:50:bb:61:46:e2:4a:f8:f6:83:58:df:5c:
5b:d6:84:44:26:bd:a5:63:08:99:94:44:30:4b:3b:
73:de:0f:4e:f3:cd:f3:7f:23:15:50:52:c9:37:fc:
49:f1:f4:8b:b8:71:d1:24:5d:78:46:34:ab:01:0b:
80:6f:95:28:bf:d5:f3:d3:28:00:70:c1:ca:cf:ab:
85:74:10:6c:20:8d:09:a5:93:de:be:06:1e:41:91:
82:a3:93:37:0a:0c:3e:e4:9d:b2:36:4c:64:2a:6f:
6d:c8:f3:de:24:b4:76:d4:7b:f0:e1:ee:71:a0:18:
8b:19:a5:20:7d:42:f4:c1:24:8a:b0:ac:45:f1:78:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CA:21:36:FE:38:AE:E6:A5:9F:0D:26:79:47:61:05:DC:1E:B3:C5
X509v3 Authority Key Identifier:
keyid:01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:fc:ac:3e:ca:0c:21:57:fa:4d:34:55:23:48:91:93:53:53:
ea:9c:4a:6c:7c:36:67:91:18:b8:81:0c:54:74:ac:5e:bd:66:
db:2d:a3:2d:e0:b5:10:3d:6c:f6:30:49:b2:3b:bb:67:ea:d9:
54:53:a5:7d:7b:b7:fb:de:c4:63:e4:fb:bc:b7:10:36:0f:13:
9f:50:dd:6c:28:97:7b:06:6d:8d:77:d6:28:60:67:d4:01:b2:
6a:29:a9:94:73:40:e6:84:ee:eb:8e:8e:d1:fa:6f:36:e6:67:
18:77:da:29:f7:e7:e9:a5:91:af:62:d9:f5:45:0c:12:3b:a7:
52:e7:0f:68:99:6b:b3:7b:f4:6f:7c:10:33:27:24:f6:36:3a:
56:e3:26:8b:20:53:46:99:4b:98:f9:86:30:0c:00:5b:db:c8:
8d:d2:27:3d:51:76:b7:2e:d7:a0:36:58:af:3e:8d:fa:ff:15:
9e:4b:b4:6b:3a:f6:04:a2:98:a9:5d:82:d3:33:5f:cc:07:91:
ed:e8:a3:7a:7e:e7:f7:bd:9a:06:f4:91:ef:66:19:d3:7b:07:
5f:94:ef:a4:14:1b:b0:e1:0a:2e:58:06:29:1b:9a:e6:72:8d:
be:1e:ba:fd:11:42:7f:b0:69:fd:de:f2:ca:27:39:34:e1:ab:
05:5d:a4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:32 2026 by rpki-client