Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: PCpHkY6Z33mQAGbJ6behDsO/SqJP6IcjalPuqoDKJXY=
Subject key identifier: AE:F7:95:23:F6:BA:5A:70:0C:7A:C2:C1:03:9C:D1:99:99:F6:CC:8C
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 01A137487F90ECE35C257DA7ECBAAFE25522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 1AA1
Signing time: Tue 13 Oct 2026 22:01:00 +0000
Manifest this update: Tue 13 Oct 2026 22:01:00 +0000
Manifest next update: Wed 14 Oct 2026 22:01:00 +0000
Files and hashes: 1: CHly21F90uK3t1PTfGR7rzZwk_E.roa (hash: mWrqsrt9qgm67LUNBZ/tu5yn1dKMTJD4Xe31GCUEOfc=)
2: aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa (hash: Orir7PkRZZnMYBwB3ZGIXihY2LtAAjB+kCKoDM/u5+A=)
3: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: ngPw7tCkr85qbbqTqsvziiQXtI5u0Ht4PrW5RqOrXnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:48:7f:90:ec:e3:5c:25:7d:a7:ec:ba:af:e2:55:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Oct 13 22:01:00 2026 GMT
Not After : Oct 14 22:01:00 2026 GMT
Subject: CN=aef79523f6ba5a700c7ac2c1039cd19999f6cc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:06:65:e2:e0:8a:75:c8:4c:9d:97:24:f1:
51:8a:99:0d:43:bd:37:59:ce:cd:83:63:04:dc:3d:
96:2b:46:8b:1f:45:08:ee:f7:82:35:a7:ca:35:56:
9b:47:11:a4:22:e3:73:f8:f4:05:63:1b:db:d7:72:
ac:aa:67:c5:1b:fa:b4:c3:8d:c3:1f:08:05:b7:ab:
90:2a:fb:a8:8c:35:9a:a5:1b:2e:1d:d3:ac:ff:ea:
b1:06:44:3d:c8:75:1c:d9:f9:d7:aa:9e:74:b4:05:
51:23:f3:dc:7f:d9:c7:df:a5:ee:6f:70:7e:a1:83:
25:d2:78:ac:ea:63:96:9a:55:bb:10:2e:cb:c0:c6:
a2:f9:ef:60:c6:1a:d4:3c:5e:43:68:20:6b:b5:b1:
f0:d4:2e:71:6a:62:5b:36:36:91:41:57:05:33:db:
46:0c:36:4c:b1:ed:84:20:5b:0d:40:5c:60:40:0f:
ce:b6:b8:c7:b2:35:b1:1a:87:cf:ff:86:06:94:9c:
fb:72:99:4d:fb:f7:7c:a8:d8:76:91:42:ac:20:69:
2a:7b:72:29:a2:be:ea:ea:62:30:90:cb:74:95:53:
88:24:2a:c3:06:1b:b9:50:1b:9d:af:f1:7f:da:16:
b3:fe:10:c0:de:17:f9:09:47:bb:f9:0f:30:66:ad:
88:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F7:95:23:F6:BA:5A:70:0C:7A:C2:C1:03:9C:D1:99:99:F6:CC:8C
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:53:ed:f4:30:f3:72:30:c6:b6:57:62:58:47:39:34:34:a2:
49:6a:24:9a:36:1c:31:56:64:3b:98:38:3e:a4:c8:9f:ac:4b:
79:d8:59:7f:05:78:2e:76:b9:82:2b:9e:3e:8b:3b:03:aa:7b:
89:a3:e9:a5:aa:09:fb:5a:9b:d0:7b:b9:ae:a1:81:76:40:90:
80:aa:94:4e:89:27:bf:39:30:86:10:46:36:8c:5f:f8:fd:34:
d5:85:f9:e9:c3:fa:8b:1d:45:b4:b4:ce:35:eb:41:83:70:19:
1e:d3:d0:9f:eb:5c:d8:17:57:da:e2:16:81:16:07:2a:a1:79:
08:90:5b:7c:a1:0c:fa:4b:a4:4c:a7:6c:eb:01:67:d2:de:99:
d3:0d:17:2c:a6:da:35:05:69:c6:fc:68:a6:02:aa:6f:68:6e:
1a:c5:15:55:81:e8:67:ad:8a:37:4c:34:c8:2d:fd:a0:23:70:
ed:3c:04:d3:9b:79:9c:dd:95:8b:03:45:25:ed:0e:5d:42:81:
13:cc:5d:7d:fa:87:63:a8:a6:e2:60:fb:e7:5c:13:23:45:1a:
20:1d:9d:f9:00:8a:93:60:77:52:af:75:6f:94:f4:a4:c3:e1:
36:01:d5:e2:84:4c:0c:e9:40:a6:4a:d1:e9:0e:e9:f0:e1:d1:
36:6e:79:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:52:16 2026 by rpki-client