
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
File: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft (raw, json)
Hash identifier: 9TAPdNuo0szF8FFmW0HRDT/Qy/ebZyzwnjmxkoqkqPI=
Subject key identifier: 8F:01:3B:48:96:8A:D3:AC:98:6C:48:53:D9:CF:A7:41:6F:B5:8A:9E
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 019CE25996A4310A6EFFE024BDCBEE5673F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
Manifest number: 0BC7
Signing time: Thu 12 Mar 2026 14:00:47 +0000
Manifest this update: Thu 12 Mar 2026 14:00:47 +0000
Manifest next update: Fri 13 Mar 2026 14:00:47 +0000
Files and hashes: 1: 1vE6-KH4MdU7N2hv_um52mZD9OU.roa (hash: F9xU+2/qqKu1d965ooJJSZMmafwKTsHI7SAoZJI74E8=)
2: APfc6JNEU6PdULzFR5BxZMOlk6o.roa (hash: Hd78Iessw8olpkO1cT25elJbp1Ay+8DdMA34bYWrxMs=)
3: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl (hash: XrZdRfkk37mNl2ekHcSLL0R72lRF/F9ReJYGw6GFph8=)
4: DELZK5MwczuVxzj3X4of5HLO9Vw.roa (hash: GLmFQqmMgF4LsrUkccEanCYe2QvwLzSjgMEN7Qp7IPs=)
5: L9GldWcZhP-VtwQ-IrVBJjRxbvQ.roa (hash: i/vLhAVFm6Bpc/WiiZN81LZdAjQFDptqMqTGBS6saY4=)
6: MO2X-hKSVMmkU2wdt5M6rkMSJsQ.roa (hash: qgMxb6qJVo4sk1tLNRwm1PF/2ClIOldHiE0/SLkAAbQ=)
7: frbnQVPA6AMYX2oD_gTcyZulwfY.roa (hash: N+i+LJivHuJoPXNh9pH2cdBw0saTiGMUT1bVhtTAkgs=)
8: pttNsriY8yChB9BrtVjJhNIJyPY.roa (hash: tXY2XaK++NV5rGr1J0Fs5zNa7PQ/vWbv79WLgy93nbY=)
9: z_HTT3a31vAkFtPvUQtcTev0iQU.roa (hash: +OTmOuEmOD6LWIpLkfhzeYNBT0QjMtJvvZDBWFxGkTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:59:96:a4:31:0a:6e:ff:e0:24:bd:cb:ee:56:73:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Mar 12 14:00:47 2026 GMT
Not After : Mar 13 14:00:47 2026 GMT
Subject: CN=8f013b48968ad3ac986c4853d9cfa7416fb58a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:d9:0a:a4:dd:ce:99:11:6a:8d:90:b0:5e:
00:84:76:a1:41:06:b6:37:74:0e:2e:13:b4:12:db:
8b:d5:e6:43:2e:19:15:21:79:b3:e0:a3:35:fe:3d:
ea:60:fe:12:32:dd:0a:b1:34:d0:2e:60:47:9c:91:
8e:68:55:e1:94:f4:ef:a4:12:a0:ad:26:74:e8:75:
27:f6:c6:0e:c4:1c:08:2a:2e:46:ad:a2:cb:1b:0c:
88:3a:60:51:63:8e:9a:5e:82:fd:9c:9a:c1:d0:7d:
5a:13:05:5a:13:71:1d:e9:4f:6d:3f:ea:a1:66:b3:
2f:59:98:2d:9e:03:d6:0d:d6:80:9d:57:5f:a2:7b:
11:37:52:48:e3:da:52:00:ca:5b:88:d2:fd:58:a6:
b5:ad:bb:5f:91:e3:74:c7:17:c6:26:d7:77:c4:c7:
b7:ec:61:63:2d:c1:d6:e3:96:9a:17:ca:b4:72:b6:
46:bd:cf:62:8e:fe:87:92:07:4c:6e:11:66:d0:a1:
10:14:fd:94:a9:1c:31:33:f0:17:3c:13:db:1f:3b:
77:27:85:87:5b:58:89:73:da:1e:e8:e7:e0:c3:3c:
11:9c:87:a6:6f:b2:fe:42:33:26:65:df:1c:aa:24:
fb:49:c3:f0:72:dd:f1:41:ec:41:c5:5b:5b:e3:a6:
cb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:01:3B:48:96:8A:D3:AC:98:6C:48:53:D9:CF:A7:41:6F:B5:8A:9E
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:06:de:f3:9a:31:f8:d6:84:93:ee:1d:47:fe:ac:c8:da:54:
11:7d:0a:9e:66:e6:fb:99:9a:e1:5b:37:51:79:8b:3b:b7:36:
ab:73:60:bf:46:59:04:f5:e8:e2:6c:cd:b6:bc:ca:7e:17:d6:
bc:4e:8d:53:64:12:12:0b:84:1b:9c:5f:90:b1:b9:a6:52:58:
01:55:73:5e:84:f1:f5:9a:1c:90:fb:ca:24:30:1d:64:49:1c:
0e:69:15:95:7c:a0:35:1a:0b:ed:d1:8a:40:81:61:5c:20:b1:
7a:92:0d:a5:b8:77:c8:d1:61:c7:07:e5:9d:9e:a0:63:ce:01:
b2:aa:76:1a:fa:30:47:89:14:e7:4e:50:ed:a1:e5:de:2b:4e:
9f:f9:b3:a4:ee:d5:d8:3d:36:b6:22:4d:92:3b:eb:a9:e7:f4:
b9:52:0f:72:52:c3:3c:9e:f7:25:f2:6c:16:a6:28:e6:f8:8b:
57:b9:8f:b1:96:6c:81:98:13:a9:5f:83:62:82:e9:eb:fc:f5:
c8:2d:35:0e:bf:33:be:da:f7:d2:71:cd:90:0f:50:25:9e:86:
e9:61:77:b7:03:30:a8:6e:bf:1e:a0:91:b4:36:fc:80:4e:cc:
32:a9:c9:47:f0:e3:0c:13:52:69:78:66:cd:d7:2f:f5:72:02:
78:7d:99:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:27:26 2026 by rpki-client