Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier: PxC5TGdrAmVB5zDjE9utn61auyTRCphmNWVBoMsn+ug=
Subject key identifier: 41:CE:4E:59:A5:8A:DF:A4:6F:08:F6:FA:3B:C5:20:A8:09:58:C4:86
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 019CB2B6CBF49DCA0F3D1A88EE7B0AE534EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number: 11FD
Signing time: Tue 03 Mar 2026 08:00:50 +0000
Manifest this update: Tue 03 Mar 2026 08:00:50 +0000
Manifest next update: Wed 04 Mar 2026 08:00:50 +0000
Files and hashes: 1: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: y14uz6zCB4jyzH2v4aV+m7+kAg+3cJ0/7uAsHgpfO/o=)
2: wsRYfWg6DsSzH9Q3tVso7U8el9Q.roa (hash: Xq2nLBLB6mAPwQgJf30OZP4onb0gGELFmiDalFNQA4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:b6:cb:f4:9d:ca:0f:3d:1a:88:ee:7b:0a:e5:34:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Mar 3 08:00:50 2026 GMT
Not After : Mar 4 08:00:50 2026 GMT
Subject: CN=41ce4e59a58adfa46f08f6fa3bc520a80958c486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:0a:e4:6e:73:e4:71:fc:4c:73:ef:ea:6b:
76:58:24:07:f8:40:91:a8:65:44:3a:e4:31:5f:e6:
01:50:45:64:d9:7e:95:53:d2:66:7b:d1:2f:0b:c1:
7f:ad:92:b9:00:d0:18:13:b5:09:c9:17:3c:31:69:
33:71:c2:69:02:81:58:dd:a8:84:2f:31:a4:c2:bf:
aa:f7:bc:26:71:10:c1:47:3b:2b:3b:01:16:cd:cd:
39:ec:f3:ff:73:21:5a:84:57:74:37:06:91:bc:65:
83:9a:f9:93:62:ed:2d:22:15:19:bf:4d:07:b6:68:
52:43:5d:d5:b5:07:a9:be:94:e6:46:ac:1d:f1:51:
4b:1f:3a:78:2c:b0:d3:23:02:9c:ec:63:ad:03:d0:
e3:c6:8f:39:5f:f1:dc:50:2b:b3:19:3a:b0:82:df:
a6:7f:03:25:63:93:02:08:63:22:72:1b:fc:99:1b:
dc:22:54:0f:24:05:5e:7e:4a:d6:f4:2e:25:f4:59:
36:ac:09:9c:29:ff:a5:b7:df:69:e6:77:14:f2:a9:
57:c2:15:56:4c:63:45:7f:03:82:ce:81:58:6b:f9:
c5:22:aa:16:65:9f:f6:ab:c8:d0:8f:9d:a9:07:bb:
16:78:d3:33:32:2c:9a:27:b1:d6:e8:1f:5c:fb:aa:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CE:4E:59:A5:8A:DF:A4:6F:08:F6:FA:3B:C5:20:A8:09:58:C4:86
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:82:b4:95:af:e7:ab:e4:61:7a:53:7d:17:3f:f8:54:86:c6:
81:3f:29:ea:71:57:65:35:39:85:b6:c8:21:a2:6d:d0:6c:c0:
65:f7:80:2a:9e:69:d3:a6:bb:29:91:e9:ce:0a:56:5b:01:54:
11:d2:65:f6:32:c5:3c:ce:7a:57:1d:d2:5f:e8:13:38:c0:d9:
03:61:f6:a9:03:a8:7f:96:79:3f:b6:60:34:59:58:42:cc:56:
9e:41:05:34:a2:44:9a:06:35:70:72:99:5a:54:f9:1c:f4:4f:
21:38:ae:17:d0:c8:4b:0a:e3:ff:e6:cb:03:8b:fc:91:9e:bc:
c6:c9:a6:e7:cc:ab:d3:99:57:da:e7:66:ed:fb:7a:7b:93:5d:
51:db:df:ee:73:0a:0b:fe:3a:29:a7:b6:43:b6:f2:3c:30:56:
50:ff:d8:2d:87:56:5d:5f:da:65:37:e5:98:35:20:bd:e5:6c:
16:65:bc:f0:5b:cc:d7:40:ab:a4:ac:42:6a:a7:97:00:f4:f9:
6a:e1:42:1b:5b:1b:e2:3f:15:36:10:fc:37:10:04:bb:7e:4d:
cf:dc:11:71:13:4f:35:2e:d7:22:ac:af:29:92:56:3b:ab:68:
e9:38:a0:6e:ac:d1:88:51:0d:dc:ce:85:d6:30:7d:6f:01:98:
c5:ad:91:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyytsv0ncoPPRqI7nsK5TTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMzFiODdlOTFlYTI3MTA0NmQzMTk5NWU3YTZjMDM4YmYx
YjE0N2MwHhcNMjYwMzAzMDgwMDUwWhcNMjYwMzA0MDgwMDUwWjAzMTEwLwYDVQQD
Eyg0MWNlNGU1OWE1OGFkZmE0NmYwOGY2ZmEzYmM1MjBhODA5NThjNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGkK5G5z5HH8THPv6mt2WCQH+ECR
qGVEOuQxX+YBUEVk2X6VU9Jme9EvC8F/rZK5ANAYE7UJyRc8MWkzccJpAoFY3aiE
LzGkwr+q97wmcRDBRzsrOwEWzc057PP/cyFahFd0NwaRvGWDmvmTYu0tIhUZv00H
tmhSQ13VtQepvpTmRqwd8VFLHzp4LLDTIwKc7GOtA9Djxo85X/HcUCuzGTqwgt+m
fwMlY5MCCGMichv8mRvcIlQPJAVefkrW9C4l9Fk2rAmcKf+lt99p5ncU8qlXwhVW
TGNFfwOCzoFYa/nFIqoWZZ/2q8jQj52pB7sWeNMzMiyaJ7HW6B9c+6ob9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHOTlmlit+kbwj2+jvFIKgJWMSGMB8GA1UdIwQY
MBaAFAMxuH6R6icQRtMZleemwDi/GxR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYTI0ZjYtYzVhMC00MGJmLWFiYjYt
OGRhNTM3M2E2YTZkLzEvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xYTI0ZjYtYzVhMC00MGJmLWFiYjYtOGRhNTM3M2E2YTZk
LzEvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwIK0la/n
q+RhelN9Fz/4VIbGgT8p6nFXZTU5hbbIIaJt0GzAZfeAKp5p06a7KZHpzgpWWwFU
EdJl9jLFPM56Vx3SX+gTOMDZA2H2qQOof5Z5P7ZgNFlYQsxWnkEFNKJEmgY1cHKZ
WlT5HPRPITiuF9DISwrj/+bLA4v8kZ68xsmm58yr05lX2udm7ft6e5NdUdvf7nMK
C/46Kae2Q7byPDBWUP/YLYdWXV/aZTflmDUgveVsFmW88FvM10CrpKxCaqeXAPT5
auFCG1sb4j8VNhD8NxAEu35Nz9wRcRNPNS7XIqyvKZJWO6to6TigbqzRiFEN3M6F
1jB9bwGYxa2RpQ==
-----END CERTIFICATE-----
Generated at Tue Mar 3 16:55:44 2026 by rpki-client