Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier: laM1R6GPE4wJvI0VSBt9vfn812L5KfSWyv3YA1v1i3c=
Subject key identifier: F9:90:9C:13:28:C8:83:05:FA:83:E6:41:19:8E:33:ED:50:56:4B:E5
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 01A0569EC55A88F769166E0365A3053867F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number: 13E0
Signing time: Mon 31 Aug 2026 07:00:40 +0000
Manifest this update: Mon 31 Aug 2026 07:00:40 +0000
Manifest next update: Tue 01 Sep 2026 07:00:40 +0000
Files and hashes: 1: 7bTTYk_Oq_ZApCkkIYsewzN1n20.roa (hash: WwMfICexdyPcR8HhkOfl7+rmvQQnanKC9rFr0nbj7UI=)
2: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: dO7X7dR4lN44I/15Gq3sHfZyJYCNl81cn454n/0vb7A=)
3: wsRYfWg6DsSzH9Q3tVso7U8el9Q.roa (hash: Xq2nLBLB6mAPwQgJf30OZP4onb0gGELFmiDalFNQA4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:9e:c5:5a:88:f7:69:16:6e:03:65:a3:05:38:67:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Aug 31 07:00:40 2026 GMT
Not After : Sep 1 07:00:40 2026 GMT
Subject: CN=f9909c1328c88305fa83e641198e33ed50564be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:a2:db:b2:cf:df:d1:65:f9:a0:b5:b3:32:
92:03:46:a8:1d:21:b9:df:a1:b0:6a:0f:b6:c5:7e:
74:4c:60:ae:63:e3:31:a0:21:77:cf:3b:6e:7c:85:
fb:89:8b:5a:41:c2:82:db:a0:52:bc:13:05:a4:bc:
b1:e0:1e:bd:fc:2f:39:fc:c5:e6:64:1b:59:26:71:
0b:ee:a9:b0:5b:00:6c:23:5a:98:91:3d:93:ef:a3:
82:38:8e:04:2f:e5:e9:58:0e:69:53:24:fa:fb:1f:
14:fc:09:45:cf:d0:84:ef:ee:af:be:4a:e6:76:cf:
ee:7e:a8:00:22:aa:ec:9e:31:4a:4d:e7:fa:4f:90:
ee:52:cf:62:57:36:5a:0d:f5:9d:ad:3c:b3:71:27:
fd:3b:2f:17:b7:ce:65:a1:ce:46:3d:49:3e:88:b4:
fd:dd:7d:3f:37:a6:3d:c8:ed:26:0c:13:81:53:d6:
55:ed:dc:c4:b9:a5:ef:22:98:f8:b7:6e:48:a1:70:
aa:37:ff:cd:84:ec:1e:fd:2f:b6:84:86:b0:91:b6:
ae:1d:63:72:b9:fd:f4:f8:9c:91:4e:d2:60:5c:70:
ed:3e:79:26:c2:49:0d:73:7e:c9:18:93:84:9e:28:
85:a1:cc:f8:8d:71:a6:f2:e0:34:dc:0a:c3:9c:25:
d3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:90:9C:13:28:C8:83:05:FA:83:E6:41:19:8E:33:ED:50:56:4B:E5
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2f:6b:64:98:09:d2:40:a9:ea:d7:80:55:4a:e3:91:1b:61:
ac:b4:c7:25:f2:a2:ec:a0:24:b2:63:6d:4a:19:b3:74:a3:ad:
eb:93:0f:11:42:6c:5d:51:e9:be:2b:26:54:63:1c:5f:61:db:
d5:9a:16:82:5c:c7:c3:a5:8f:95:bd:d7:db:d5:68:29:35:c0:
74:fb:3c:c7:69:83:52:04:4a:43:2d:b9:ec:aa:77:e0:87:ba:
4b:90:96:99:a3:b2:2b:91:bc:4b:a4:c9:cd:71:bf:d7:f9:64:
2c:e2:c2:ef:45:89:51:49:58:98:a4:08:a2:bd:0b:04:1e:4b:
30:71:45:ee:ed:73:6d:20:cc:ef:5f:51:f7:72:1d:e8:ef:22:
60:b1:88:cb:21:0a:8f:4e:74:4a:81:fb:02:0c:fb:f3:12:ad:
5a:66:a3:10:f9:55:16:4b:2a:6c:98:f6:ae:15:b4:a5:d4:36:
cc:9d:61:4b:45:60:91:22:19:87:05:e0:38:84:95:f8:24:73:
17:98:25:c0:eb:b6:fe:c1:87:62:26:b1:47:23:80:ce:a5:dc:
f5:4c:b4:3b:17:7f:4b:68:04:5b:9c:51:aa:e7:a2:8a:1b:b1:
6c:1c:1d:53:9e:e0:18:37:72:3c:3f:91:d0:c6:45:37:b3:a1:
cf:e8:39:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:09:59 2026 by rpki-client