Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.mft
File: 1-azwLBziBnz6SspNf9HLADf94vI.mft (raw, json)
Hash identifier: TKBxSSZMovLDzati8M9kWWMpmivMgeCgWDei9Hx1fyQ=
Subject key identifier: B4:5B:73:87:95:27:78:3E:F1:3A:71:B2:14:F8:2D:52:B5:BD:12:6D
Authority key identifier: F9:AC:F0:2C:1C:E2:06:7C:FA:4A:CA:4D:7F:D1:CB:00:37:FD:E2:F2
Certificate issuer: /CN=f9acf02c1ce2067cfa4aca4d7fd1cb0037fde2f2
Certificate serial: 019FF97EECADB60398838D5E1E7930DB51D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-azwLBziBnz6SspNf9HLADf94vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.mft
Manifest number: 2C
Signing time: Thu 13 Aug 2026 05:01:12 +0000
Manifest this update: Thu 13 Aug 2026 05:01:12 +0000
Manifest next update: Fri 14 Aug 2026 05:01:12 +0000
Files and hashes: 1: 1-azwLBziBnz6SspNf9HLADf94vI.crl (hash: oTWiEQ/SeVGt4UfDINkK9KNtmQxZlvS5m2nel3cjkuY=)
2: Jszha3pRavrqhLYF9llULjRDVPA.roa (hash: sdO9tDDPhGXLEWym/ewpstRJHKQA4MEXZOgnSWY5UnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-azwLBziBnz6SspNf9HLADf94vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:7e:ec:ad:b6:03:98:83:8d:5e:1e:79:30:db:51:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9acf02c1ce2067cfa4aca4d7fd1cb0037fde2f2
Validity
Not Before: Aug 13 05:01:12 2026 GMT
Not After : Aug 14 05:01:12 2026 GMT
Subject: CN=b45b73879527783ef13a71b214f82d52b5bd126d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cb:98:39:92:94:fd:06:c7:40:c8:86:95:e9:
98:5f:39:0f:13:c5:6b:6d:d7:db:8a:54:83:7d:26:
7d:53:25:51:a7:15:08:44:90:35:85:34:81:81:2f:
01:50:20:76:9f:98:e8:a7:f6:fc:06:cb:db:be:b3:
bb:df:84:4d:4a:b0:cd:cb:7b:78:23:a7:ff:3f:90:
4e:ec:98:ff:ad:de:d4:59:d1:a5:11:c3:4e:6b:d2:
b5:d6:3d:a0:15:68:75:9f:f5:b3:ea:58:05:0e:a6:
11:3a:ae:c7:b7:06:6e:aa:8a:81:d0:5b:96:d3:e2:
c9:2f:6a:9d:a9:e6:83:eb:1a:61:fe:a5:3d:6b:96:
76:a1:68:c1:08:7f:66:5a:b0:c6:5a:1f:f2:ca:e8:
e0:43:db:f6:f0:98:38:6f:24:78:5f:2c:19:11:32:
70:c6:70:d9:48:85:93:87:f7:7d:18:a8:35:7e:f5:
4e:70:b7:f4:95:0c:09:08:92:1c:ad:b0:6e:2c:67:
2b:07:b3:32:b9:2e:ba:ca:bd:e1:31:de:03:8b:c3:
d6:b9:76:fb:61:0a:33:27:98:48:05:f3:5e:04:73:
0f:3f:2d:1c:17:c5:b0:9e:b8:78:32:04:13:f5:41:
ac:bc:61:15:60:c5:80:9d:a9:4f:5c:71:e3:9b:85:
be:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5B:73:87:95:27:78:3E:F1:3A:71:B2:14:F8:2D:52:B5:BD:12:6D
X509v3 Authority Key Identifier:
keyid:F9:AC:F0:2C:1C:E2:06:7C:FA:4A:CA:4D:7F:D1:CB:00:37:FD:E2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-azwLBziBnz6SspNf9HLADf94vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:64:b6:77:70:69:05:0c:33:84:f6:62:79:ec:52:28:22:03:
f5:59:23:6b:29:4f:f4:0e:4a:32:52:e2:93:f5:72:f5:88:3f:
7c:17:4f:a1:46:a4:21:13:ea:01:2e:63:7e:24:1e:d9:75:f9:
34:ae:68:cc:de:7e:af:70:de:9d:d9:79:88:5a:60:01:e7:6d:
8b:5f:36:91:d3:53:29:26:31:4e:e4:11:d9:72:24:a5:05:73:
6b:6c:68:7a:ca:a7:df:08:42:f9:84:65:70:5e:94:13:86:a5:
84:2d:6f:36:c1:9c:49:b4:fe:90:b5:8c:c0:33:b9:78:75:71:
46:19:b7:02:c1:8a:96:a8:35:64:9f:7a:f4:09:03:5b:29:99:
d7:fd:44:52:f2:13:f9:36:20:53:c9:68:c5:7c:1e:20:c9:fa:
31:bb:6f:7e:7b:50:26:44:36:fe:03:6e:89:86:ca:a8:14:bb:
30:b3:a2:50:a2:e3:1b:18:05:35:e8:57:4e:f9:f1:d3:8c:fa:
91:f8:32:a6:19:2e:79:a9:d5:29:5e:67:92:90:22:d0:9c:2b:
9d:15:18:01:dd:2e:e2:a3:6e:3b:c4:c9:05:ee:e8:91:34:6d:
2d:1c:9a:15:13:49:db:8e:43:f3:7c:b8:d0:ce:db:40:87:2a:
e6:cd:84:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:39:08 2026 by rpki-client