Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier: Iycqp42Utr33cD+9GjFXv55jLPuXwr9GFRnv4iPjv3Y=
Subject key identifier: 8F:06:9A:D7:A3:83:84:06:36:D7:96:8D:05:1F:E2:6D:18:EB:F4:73
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 019D9D75BB38758B32BC577C5CD9FEA7D6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number: 1277
Signing time: Fri 17 Apr 2026 22:00:31 +0000
Manifest this update: Fri 17 Apr 2026 22:00:31 +0000
Manifest next update: Sat 18 Apr 2026 22:00:31 +0000
Files and hashes: 1: 7bTTYk_Oq_ZApCkkIYsewzN1n20.roa (hash: WwMfICexdyPcR8HhkOfl7+rmvQQnanKC9rFr0nbj7UI=)
2: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: s75XdV8HGJrzmVqk9bIGu9z2vXT8WpPnPVrITwWsCm0=)
3: wsRYfWg6DsSzH9Q3tVso7U8el9Q.roa (hash: Xq2nLBLB6mAPwQgJf30OZP4onb0gGELFmiDalFNQA4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:bb:38:75:8b:32:bc:57:7c:5c:d9:fe:a7:d6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Apr 17 22:00:31 2026 GMT
Not After : Apr 18 22:00:31 2026 GMT
Subject: CN=8f069ad7a383840636d7968d051fe26d18ebf473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:f6:a5:65:55:c5:94:36:11:d2:51:9a:e6:
61:4a:0a:69:8c:a3:b1:38:b6:fc:b4:20:b8:8e:12:
fb:dd:4f:24:66:72:a0:79:43:83:05:8f:95:34:e7:
84:a8:9f:2c:07:cd:f0:c5:30:4a:1a:6c:5b:26:3d:
2b:30:f3:71:00:f0:4b:05:09:fe:f5:76:6d:69:a5:
1c:30:33:30:48:c1:99:2a:15:45:0f:a9:8b:5e:4a:
6f:d5:ee:e4:d0:3d:c2:f2:00:f4:10:9e:57:43:6f:
d2:8e:78:a1:ce:8e:79:b0:78:94:da:62:66:ac:94:
95:65:91:81:f8:da:ec:5a:bd:67:a4:70:10:20:b0:
75:ff:0d:23:60:e4:c9:1d:9b:b6:91:3b:39:28:f8:
a1:78:b4:d3:e0:5d:2f:bc:ed:c3:90:2c:46:ad:50:
c3:39:9e:09:c0:41:df:29:2e:f1:e1:d1:4a:c7:46:
46:a5:7e:7c:e9:b1:ad:fe:37:2e:29:da:9e:8e:12:
ee:98:7a:e1:55:0e:fe:01:15:c8:05:41:d5:d2:2e:
b4:ad:cc:e5:db:d1:38:6a:30:75:87:6b:e0:1b:51:
24:b2:d8:1f:25:97:a8:eb:fd:0a:cf:7b:41:ce:5e:
08:04:24:06:bc:19:d5:e3:d9:33:15:cd:05:3e:d0:
88:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:06:9A:D7:A3:83:84:06:36:D7:96:8D:05:1F:E2:6D:18:EB:F4:73
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:d7:66:2a:79:8f:b1:d2:91:e9:50:c5:34:ca:b8:05:0c:2a:
bb:6c:b7:ff:7b:25:80:d6:61:11:37:1f:6b:3f:e7:22:35:50:
46:45:2b:44:74:e8:f1:e1:0a:2c:09:a1:df:03:e3:47:c6:85:
d8:4f:31:ed:d6:15:6a:ae:b1:a0:bd:73:5b:ea:f1:62:73:e5:
b1:7e:68:78:f2:03:97:84:1d:7e:88:30:a8:e3:ce:40:84:ed:
13:76:17:9a:19:08:02:53:13:2f:74:33:fb:ac:4a:9c:8e:b6:
ba:2a:33:c9:22:6d:d8:f4:d8:75:a6:67:2b:e7:a7:03:e3:23:
14:05:0b:ea:a1:c2:f2:54:03:aa:e1:64:a6:46:a9:fd:a9:f3:
47:50:ac:63:fa:06:fd:8f:52:f2:1c:17:92:05:97:8a:ce:74:
83:d8:9f:bb:45:1d:4d:f8:c7:ff:cf:58:06:c5:a1:2e:f8:76:
5f:26:8d:0d:d5:1a:b1:6b:24:00:4d:b7:57:53:5e:89:cf:db:
b4:fc:4b:13:e0:48:1f:21:0a:95:46:a3:a1:d6:df:e1:67:42:
99:bb:36:cf:f4:d3:cb:ff:09:69:79:c8:2b:a8:ae:2c:4f:ef:
23:31:86:5b:20:83:b3:a9:dd:03:84:f0:80:ea:5d:5b:de:81:
f9:e3:53:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ddbs4dYsyvFd8XNn+p9b+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMzFiODdlOTFlYTI3MTA0NmQzMTk5NWU3YTZjMDM4YmYx
YjE0N2MwHhcNMjYwNDE3MjIwMDMxWhcNMjYwNDE4MjIwMDMxWjAzMTEwLwYDVQQD
Eyg4ZjA2OWFkN2EzODM4NDA2MzZkNzk2OGQwNTFmZTI2ZDE4ZWJmNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta/2pWVVxZQ2EdJRmuZhSgppjKOx
OLb8tCC4jhL73U8kZnKgeUODBY+VNOeEqJ8sB83wxTBKGmxbJj0rMPNxAPBLBQn+
9XZtaaUcMDMwSMGZKhVFD6mLXkpv1e7k0D3C8gD0EJ5XQ2/Sjnihzo55sHiU2mJm
rJSVZZGB+NrsWr1npHAQILB1/w0jYOTJHZu2kTs5KPiheLTT4F0vvO3DkCxGrVDD
OZ4JwEHfKS7x4dFKx0ZGpX586bGt/jcuKdqejhLumHrhVQ7+ARXIBUHV0i60rczl
29E4ajB1h2vgG1EkstgfJZeo6/0Kz3tBzl4IBCQGvBnV49kzFc0FPtCINQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8Gmtejg4QGNteWjQUf4m0Y6/RzMB8GA1UdIwQY
MBaAFAMxuH6R6icQRtMZleemwDi/GxR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYTI0ZjYtYzVhMC00MGJmLWFiYjYt
OGRhNTM3M2E2YTZkLzEvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xYTI0ZjYtYzVhMC00MGJmLWFiYjYtOGRhNTM3M2E2YTZk
LzEvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxNdmKnmP
sdKR6VDFNMq4BQwqu2y3/3slgNZhETcfaz/nIjVQRkUrRHTo8eEKLAmh3wPjR8aF
2E8x7dYVaq6xoL1zW+rxYnPlsX5oePIDl4QdfogwqOPOQITtE3YXmhkIAlMTL3Qz
+6xKnI62uiozySJt2PTYdaZnK+enA+MjFAUL6qHC8lQDquFkpkap/anzR1CsY/oG
/Y9S8hwXkgWXis50g9ifu0UdTfjH/89YBsWhLvh2XyaNDdUasWskAE23V1Neic/b
tPxLE+BIHyEKlUajodbf4WdCmbs2z/TTy/8JaXnIK6iuLE/vIzGGWyCDs6ndA4Tw
gOpdW96B+eNTcQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:21:42 2026 by rpki-client