Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
File: azZigAPagkZT2aWJdfaf0rwQa3E.mft (raw, json)
Hash identifier: qUWB7bQUEjPq8fKOvq4sGx/vF7m92TEEkTVppYV9WdQ=
Subject key identifier: 86:45:E7:4A:EC:52:A5:33:87:24:BF:2B:E7:5B:9E:DA:75:64:5F:77
Authority key identifier: 6B:36:62:80:03:DA:82:46:53:D9:A5:89:75:F6:9F:D2:BC:10:6B:71
Certificate issuer: /CN=6b36628003da824653d9a58975f69fd2bc106b71
Certificate serial: 01A0B5094A5DB11BF528B8B073AC01D2BA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
Manifest number: D7
Signing time: Fri 18 Sep 2026 15:01:19 +0000
Manifest this update: Fri 18 Sep 2026 15:01:19 +0000
Manifest next update: Sat 19 Sep 2026 15:01:19 +0000
Files and hashes: 1: azZigAPagkZT2aWJdfaf0rwQa3E.crl (hash: dUJqs+FeH6f+QjvKHIrme8qGpuj1mkdarO/PdtKqNsI=)
2: xv_mfH_vDLg1Q5L8BpAH47O17uo.roa (hash: DoTOjlCGKN2DqHejuNWU2055DZZTGt7Dy1dJF/wtwJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:09:4a:5d:b1:1b:f5:28:b8:b0:73:ac:01:d2:ba:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b36628003da824653d9a58975f69fd2bc106b71
Validity
Not Before: Sep 18 15:01:19 2026 GMT
Not After : Sep 19 15:01:19 2026 GMT
Subject: CN=8645e74aec52a5338724bf2be75b9eda75645f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:eb:e9:23:00:38:fd:56:df:d4:0b:3e:af:
d9:8b:56:03:bb:60:42:00:14:b3:73:85:f4:59:45:
6e:18:95:6f:41:0d:df:5f:79:50:6c:ae:be:99:85:
8e:9b:0e:b7:2c:0d:40:bc:c2:1b:f2:d6:87:08:41:
fa:2c:93:cf:08:2a:0f:ea:ba:2a:6c:80:94:75:89:
82:c3:33:0a:2d:39:50:54:a5:b1:9f:43:54:80:5e:
be:78:9c:fe:23:77:da:a5:9e:12:ab:44:a0:70:84:
1a:64:14:7e:ac:4c:30:7d:df:90:3e:8a:cc:4b:60:
c0:4d:0c:e5:ac:b7:d4:84:23:e1:ab:bf:97:54:1c:
9e:95:b5:ca:94:00:ff:96:e6:7e:e9:17:03:38:3c:
c6:57:85:97:4f:e9:af:78:b7:e3:54:45:b3:b1:e1:
0e:59:ea:72:4d:4d:85:e4:4c:6f:8f:21:f1:03:ad:
b3:cd:c7:51:f0:eb:5f:7e:85:cb:bc:97:67:8b:ad:
c2:08:26:93:68:c8:29:de:7b:8c:41:be:50:b5:cf:
96:16:db:b0:e5:14:7b:88:ae:c1:df:5f:c3:0b:b2:
3f:de:de:ed:5a:fc:8e:97:7d:14:8c:ae:e0:f0:cb:
19:09:a9:97:92:c2:4d:71:9b:5d:57:dc:ca:97:31:
06:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:45:E7:4A:EC:52:A5:33:87:24:BF:2B:E7:5B:9E:DA:75:64:5F:77
X509v3 Authority Key Identifier:
keyid:6B:36:62:80:03:DA:82:46:53:D9:A5:89:75:F6:9F:D2:BC:10:6B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:38:29:9c:85:bf:e5:e8:6c:77:cc:af:df:32:6a:2d:6c:11:
64:61:dd:a5:09:c9:ad:ae:46:07:1c:f9:ea:8d:0e:92:b7:d6:
90:e4:f1:d5:d8:93:24:9f:f6:5e:03:50:41:f3:93:72:02:a3:
18:5e:07:f8:ab:10:43:08:64:47:a9:cd:1c:40:8f:e6:1b:fb:
4d:92:e0:51:2e:7d:1e:8f:83:17:c4:6f:b8:87:61:3d:b2:b3:
8a:4b:79:03:ba:19:11:97:bb:4b:0b:a3:2d:bf:2d:af:f9:d3:
b1:f1:c3:d6:f7:a4:32:d3:2d:3a:b6:18:70:26:18:32:44:4d:
03:a2:dc:d4:01:d9:6f:9d:70:79:3a:bb:f7:f0:98:93:dd:4c:
5a:a6:10:f6:ec:d8:75:10:d0:ab:dc:a6:43:2d:fe:e4:6b:ca:
6d:65:54:d5:8b:d5:9a:12:d8:03:9e:6f:00:e9:da:48:a8:84:
dc:d6:d6:4c:9a:06:ce:19:fb:87:38:0c:f2:36:db:05:f3:6b:
88:dc:73:ea:50:d0:13:b6:2b:f4:db:a5:a7:3e:8a:05:57:3c:
80:01:08:3f:b3:9e:25:36:ef:bd:50:17:86:00:03:ab:43:c6:
e6:3c:c1:69:d2:e5:ef:67:00:00:4f:3d:7b:e1:bb:1f:1c:5d:
97:49:29:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:58:42 2026 by rpki-client