Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: Uu5qFzeurOQFvuQp2o+91C29qm7yaxkyBR4bxyjLOD0=
Subject key identifier: 72:2A:62:40:80:1D:86:68:6D:27:1A:35:79:3F:DA:69:C5:36:A7:99
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 019D37C08DECD379C8FBA8BE8CD6E1477D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:59 +0000
Manifest this update: Sun 29 Mar 2026 04:00:59 +0000
Manifest next update: Mon 30 Mar 2026 04:00:59 +0000
Files and hashes: 1: CHly21F90uK3t1PTfGR7rzZwk_E.roa (hash: mWrqsrt9qgm67LUNBZ/tu5yn1dKMTJD4Xe31GCUEOfc=)
2: aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa (hash: Orir7PkRZZnMYBwB3ZGIXihY2LtAAjB+kCKoDM/u5+A=)
3: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: IRUTA2dc7Ci1nJ2iLYxiqRqr8PDjVn/bru2B5/qF4Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:8d:ec:d3:79:c8:fb:a8:be:8c:d6:e1:47:7d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Mar 29 04:00:59 2026 GMT
Not After : Mar 30 04:00:59 2026 GMT
Subject: CN=722a6240801d86686d271a35793fda69c536a799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:26:d8:95:67:b3:ca:74:cb:b5:2c:f9:3a:
4f:af:47:e1:1d:34:44:b4:28:76:95:1b:75:2c:33:
f5:cc:d0:77:09:7c:7c:46:c4:b5:77:bb:12:4a:37:
ab:0c:14:91:c6:96:04:0d:f3:ee:35:35:bb:a9:e4:
af:a1:38:0e:5c:8f:51:81:38:66:bf:13:f9:88:ec:
1c:fb:80:df:ff:12:2d:ec:bc:c1:4a:28:39:ec:fb:
78:0f:84:a2:94:f3:26:fe:1c:3e:58:fa:54:d6:57:
34:34:8f:4b:97:eb:f1:05:c4:3c:f8:c9:4e:14:c7:
19:27:ef:95:4b:7d:ce:4b:b7:ee:2c:8d:78:60:4e:
4b:e5:16:a6:14:54:0b:b0:ad:12:10:5f:0d:01:ee:
b4:69:8e:d2:c9:44:75:35:92:c1:b3:07:a6:6d:4d:
c8:48:e6:30:5a:80:2a:ed:30:98:cd:74:88:be:e5:
78:da:d0:3c:11:58:3e:64:6f:cc:92:3b:e6:14:a9:
cb:e1:9d:73:02:06:c1:d3:bb:c1:e0:db:45:63:bc:
02:5a:2b:77:b4:f8:6c:01:74:ff:33:c9:4a:07:a3:
14:1b:0a:c9:2d:58:57:ae:73:02:c0:28:ee:bd:a3:
f5:4d:3d:21:2c:ef:32:62:34:fc:a1:35:10:88:65:
c5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2A:62:40:80:1D:86:68:6D:27:1A:35:79:3F:DA:69:C5:36:A7:99
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7d:49:f9:30:c7:9b:d0:ec:60:d4:8b:be:34:b9:a8:ae:fe:
26:cf:18:b1:ca:dd:50:4e:96:f0:02:fa:97:ec:5c:d3:a0:c5:
48:4d:42:a9:1b:d0:31:ce:eb:fb:6a:bc:f9:57:39:f9:d6:cf:
a0:5d:3d:32:df:50:ca:6f:70:39:07:58:ce:27:d7:6f:3b:69:
31:a7:a6:9f:8d:38:fb:17:9c:be:91:cc:ce:96:c5:81:5f:fd:
c6:e3:a5:f7:0b:42:ec:ec:35:29:20:c4:38:f9:4f:16:7e:54:
87:c8:42:af:10:80:a9:78:2e:12:45:4d:41:38:a2:b5:46:7f:
54:04:79:3a:40:1b:8d:b6:51:54:18:77:f3:3d:9b:b5:f6:5f:
1d:e6:2c:98:80:c2:dd:18:d7:a6:63:74:de:68:f5:ac:a5:4e:
5f:04:3c:a1:a6:01:f9:0e:50:78:0c:8b:7d:cd:5c:d3:6a:0b:
15:cc:96:dc:27:c7:a8:19:e4:aa:49:ae:8e:b2:e5:e4:f8:77:
50:38:8a:fc:e4:0f:5f:3c:1a:64:bc:e5:74:5a:b8:84:0a:80:
1a:8a:10:6f:a3:b8:18:84:4c:a6:e5:30:82:12:77:40:c7:c2:
62:33:4b:a5:6f:05:32:13:cf:d3:27:16:07:ed:8b:84:6a:21:
c8:48:9c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:53 2026 by rpki-client