Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
File: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft (raw, json)
Hash identifier: PxLfKP22857yA8jj11kVqw26R8pBTviyBmu+xHkQY1s=
Subject key identifier: BB:8B:6D:18:0C:70:A4:EE:E6:5E:C8:61:0A:39:9F:FC:5C:72:00:02
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 019DCDF48701E64EA3BBFC4481D0C3204B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
Manifest number: 0C41
Signing time: Mon 27 Apr 2026 08:00:47 +0000
Manifest this update: Mon 27 Apr 2026 08:00:47 +0000
Manifest next update: Tue 28 Apr 2026 08:00:47 +0000
Files and hashes: 1: 1vE6-KH4MdU7N2hv_um52mZD9OU.roa (hash: F9xU+2/qqKu1d965ooJJSZMmafwKTsHI7SAoZJI74E8=)
2: APfc6JNEU6PdULzFR5BxZMOlk6o.roa (hash: Hd78Iessw8olpkO1cT25elJbp1Ay+8DdMA34bYWrxMs=)
3: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl (hash: GUmrwKAXQ5ljRKm3v9wFwVHKcjFTvmZ3XOlW6fcpVWI=)
4: DELZK5MwczuVxzj3X4of5HLO9Vw.roa (hash: GLmFQqmMgF4LsrUkccEanCYe2QvwLzSjgMEN7Qp7IPs=)
5: L9GldWcZhP-VtwQ-IrVBJjRxbvQ.roa (hash: i/vLhAVFm6Bpc/WiiZN81LZdAjQFDptqMqTGBS6saY4=)
6: MO2X-hKSVMmkU2wdt5M6rkMSJsQ.roa (hash: qgMxb6qJVo4sk1tLNRwm1PF/2ClIOldHiE0/SLkAAbQ=)
7: frbnQVPA6AMYX2oD_gTcyZulwfY.roa (hash: N+i+LJivHuJoPXNh9pH2cdBw0saTiGMUT1bVhtTAkgs=)
8: pttNsriY8yChB9BrtVjJhNIJyPY.roa (hash: tXY2XaK++NV5rGr1J0Fs5zNa7PQ/vWbv79WLgy93nbY=)
9: z_HTT3a31vAkFtPvUQtcTev0iQU.roa (hash: +OTmOuEmOD6LWIpLkfhzeYNBT0QjMtJvvZDBWFxGkTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:87:01:e6:4e:a3:bb:fc:44:81:d0:c3:20:4b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Apr 27 08:00:47 2026 GMT
Not After : Apr 28 08:00:47 2026 GMT
Subject: CN=bb8b6d180c70a4eee65ec8610a399ffc5c720002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:da:d3:91:db:7d:f6:cb:8e:92:16:49:8c:45:
f7:1f:a1:e8:6f:01:63:e8:dc:42:0a:be:65:da:a7:
30:6c:36:9a:04:60:1f:92:ed:10:5f:25:67:fd:81:
44:82:cb:3e:98:3d:57:e1:c5:2f:d6:a8:78:04:1c:
d6:61:e3:2d:70:b0:90:be:14:55:62:0b:3a:9c:88:
17:8b:c7:19:c4:50:06:b1:b6:82:ed:02:5c:6c:cd:
b8:7b:0f:13:03:f8:94:ae:e2:c3:41:37:4a:c6:d7:
1f:94:86:88:3f:68:d6:78:74:64:cd:be:fc:a2:a1:
0d:d3:13:bb:6a:97:0f:bb:2b:8d:e5:36:19:0d:08:
a8:63:d0:9c:20:f1:41:89:c2:2d:86:7d:0d:d5:37:
72:48:76:e3:36:37:f9:ce:9f:f0:86:23:eb:00:1e:
0e:41:4b:44:8b:3f:da:8e:d5:ef:f8:d8:5d:e9:b9:
23:ef:73:e8:f5:79:d7:00:af:86:f8:fa:f6:37:8e:
4c:0a:f9:f3:8b:17:c8:81:85:bf:b8:ad:ed:f6:70:
63:ad:08:af:83:18:d0:3d:76:57:94:5c:79:bb:22:
1a:e5:1d:8a:35:67:6b:bb:9a:68:31:3e:1c:7a:41:
75:d7:04:b0:bf:a7:43:34:2a:8c:ab:e7:b1:11:e8:
d7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8B:6D:18:0C:70:A4:EE:E6:5E:C8:61:0A:39:9F:FC:5C:72:00:02
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:43:08:0b:a5:28:f5:10:e6:f2:c5:dc:c3:e9:32:9a:b9:ed:
ea:b4:55:61:73:3f:8f:20:b9:51:23:8c:1b:23:73:7b:c5:d2:
d8:2f:3f:4c:90:18:9e:b7:4e:2f:e4:6b:67:e1:49:c0:87:a2:
33:ee:9a:d2:cb:2e:cf:9d:e2:e2:cf:f0:fc:05:eb:dd:04:ac:
1d:12:e5:70:4e:1c:e9:8f:a8:ef:7d:00:ab:fb:a6:85:e9:3f:
6b:06:f5:e6:ac:28:92:dc:ef:7f:d5:9b:ac:cd:bc:00:e3:35:
8b:3f:71:ed:6e:23:47:9f:6f:97:5f:1e:ab:2c:2a:e5:0d:e1:
d6:17:1a:21:3d:fb:b5:9e:35:ba:e3:a2:28:73:61:90:67:ca:
de:85:55:4d:1c:d3:1a:c5:d3:d3:a5:40:17:ed:1d:d4:b1:c7:
d4:50:c8:ac:78:70:51:52:8d:55:05:15:f3:88:4f:71:75:2f:
3e:d0:27:b3:95:6a:1e:86:33:d7:93:82:a2:07:df:db:d3:b4:
6f:3a:bc:dd:0b:ae:5b:df:0c:aa:20:6c:06:c3:d7:1e:ac:ea:
ff:2b:7d:e8:1c:f3:ab:ab:91:a5:93:63:78:17:26:12:fb:41:
43:c7:eb:78:49:e2:46:b8:d5:46:95:5e:ae:73:73:43:79:83:
d6:2d:95:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:44:30 2026 by rpki-client