Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.mft
File: 1-azwLBziBnz6SspNf9HLADf94vI.mft (raw, json)
Hash identifier: ZTMLVWjkrzNgvUl+MQYZv4LGhX2CLtaC1XAfl4nGYPo=
Subject key identifier: 90:94:08:9B:D5:DD:C1:F9:F6:7E:FF:D6:3E:53:C7:43:A9:B6:E5:28
Authority key identifier: F9:AC:F0:2C:1C:E2:06:7C:FA:4A:CA:4D:7F:D1:CB:00:37:FD:E2:F2
Certificate issuer: /CN=f9acf02c1ce2067cfa4aca4d7fd1cb0037fde2f2
Certificate serial: 01A0F67B7039B537D5D453DC369A30AF4DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-azwLBziBnz6SspNf9HLADf94vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.mft
Manifest number: AF
Signing time: Thu 01 Oct 2026 08:01:19 +0000
Manifest this update: Thu 01 Oct 2026 08:01:19 +0000
Manifest next update: Fri 02 Oct 2026 08:01:19 +0000
Files and hashes: 1: 1-azwLBziBnz6SspNf9HLADf94vI.crl (hash: zt5mUuNC+NtkGHi0XJ77DYcsXqflXAxSG6rpoY/wW5A=)
2: Jszha3pRavrqhLYF9llULjRDVPA.roa (hash: sdO9tDDPhGXLEWym/ewpstRJHKQA4MEXZOgnSWY5UnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-azwLBziBnz6SspNf9HLADf94vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:7b:70:39:b5:37:d5:d4:53:dc:36:9a:30:af:4d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9acf02c1ce2067cfa4aca4d7fd1cb0037fde2f2
Validity
Not Before: Oct 1 08:01:19 2026 GMT
Not After : Oct 2 08:01:19 2026 GMT
Subject: CN=9094089bd5ddc1f9f67effd63e53c743a9b6e528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:e5:d6:ac:ce:d4:ea:b9:7a:38:55:5d:93:
99:ec:4c:3f:83:e7:ad:69:43:d9:99:a6:eb:4a:f5:
0b:38:01:4f:bf:ca:b4:59:2d:45:27:93:43:19:d5:
98:6e:99:31:c8:73:98:2f:76:24:e8:b7:8d:f9:8a:
0f:58:e2:2d:a0:ab:a9:c5:c1:92:d7:eb:2f:51:02:
4a:0f:af:f0:8b:bf:ce:be:b5:73:db:9f:95:18:25:
09:bd:26:7b:12:bc:ca:9f:2e:67:62:fd:5c:00:8a:
b3:ec:d3:1b:19:9b:33:27:6a:1f:18:df:b3:27:cc:
b0:2b:72:bb:c1:d0:9d:8b:e4:3a:d1:76:a2:71:2e:
78:07:29:d4:2b:e0:ed:0a:a4:84:2e:da:20:4c:cd:
74:4f:d4:1c:34:12:4b:9f:78:bf:b5:b9:90:f5:79:
21:3b:94:cc:bf:70:0f:3d:56:e2:2b:17:ce:e9:84:
85:41:96:f4:05:c1:cb:e0:ff:9d:dc:6b:17:9e:80:
70:7d:82:82:86:71:69:af:fa:c5:9b:77:48:e5:9f:
97:74:dc:2d:55:5c:55:f2:6c:5f:87:d2:3b:2c:c3:
c6:9a:c2:f7:8e:cd:0a:ed:5f:62:35:20:3d:6e:19:
f4:1a:c4:64:52:04:4a:60:98:80:6d:49:58:b7:5e:
35:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:94:08:9B:D5:DD:C1:F9:F6:7E:FF:D6:3E:53:C7:43:A9:B6:E5:28
X509v3 Authority Key Identifier:
keyid:F9:AC:F0:2C:1C:E2:06:7C:FA:4A:CA:4D:7F:D1:CB:00:37:FD:E2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-azwLBziBnz6SspNf9HLADf94vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c3:56:05:71:91:42:54:7b:b1:33:d2:f8:1b:9e:fb:6e:40:
a6:45:82:d4:93:28:ac:74:bd:78:2d:c8:f3:a4:3a:02:cd:b3:
65:a3:38:63:08:72:68:99:fa:08:5c:7e:5a:8e:50:52:8d:54:
ab:6d:de:2e:9e:b1:50:d4:7d:c0:3f:3a:30:f3:50:60:d1:41:
a2:2e:31:cf:9c:d0:d0:0a:39:a1:9a:9e:87:22:4b:c8:87:4d:
2e:01:ae:30:32:29:3c:83:58:49:79:50:dc:30:38:2a:b2:8b:
94:38:67:03:8d:e0:52:ac:41:8e:75:09:16:cf:96:5b:6f:33:
91:14:bc:30:03:a2:5a:ed:28:a5:6e:99:a2:2f:04:3d:0b:aa:
bc:6f:2a:6d:88:30:0c:7a:9c:3e:9d:17:c1:16:ac:5b:34:67:
9a:58:b8:a7:7c:5a:1d:ba:5a:83:ff:32:e5:b5:83:e4:8b:ee:
3c:0f:c9:8d:fe:64:94:07:cb:cd:ae:a5:fb:79:2b:2e:53:6f:
94:da:b0:33:7d:4d:f5:f3:f2:01:ab:55:8d:f6:d7:03:bb:a8:
a0:e6:74:88:b3:53:b5:fc:4b:58:e8:d9:cf:45:1e:14:1d:56:
eb:09:35:9c:11:f2:bd:d5:34:8a:13:84:7d:9a:e0:a7:19:d2:
fc:f7:d7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:30:52 2026 by rpki-client