Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: o6b9Ep+NqPtUpw2381WESw7vgsORksrFa4MRR0wVFOs=
Subject key identifier: 94:C0:C4:E3:20:83:75:2D:5D:6F:06:2F:FD:62:9A:48:76:60:FA:25
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 019F2811C822933AC9115E7EBE424C94E6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 1990
Signing time: Fri 03 Jul 2026 13:01:21 +0000
Manifest this update: Fri 03 Jul 2026 13:01:21 +0000
Manifest next update: Sat 04 Jul 2026 13:01:21 +0000
Files and hashes: 1: CHly21F90uK3t1PTfGR7rzZwk_E.roa (hash: mWrqsrt9qgm67LUNBZ/tu5yn1dKMTJD4Xe31GCUEOfc=)
2: aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa (hash: Orir7PkRZZnMYBwB3ZGIXihY2LtAAjB+kCKoDM/u5+A=)
3: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: Wo83ajJwRNnF56+kXPuWFVrRHVX/axhOp9ah2krbaHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:11:c8:22:93:3a:c9:11:5e:7e:be:42:4c:94:e6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Jul 3 13:01:21 2026 GMT
Not After : Jul 4 13:01:21 2026 GMT
Subject: CN=94c0c4e32083752d5d6f062ffd629a487660fa25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:57:2d:fe:70:9d:33:00:04:d4:7d:82:13:
5d:38:e8:04:fa:81:c0:70:7e:4e:2a:45:6e:90:0c:
97:7b:d6:ad:55:9f:17:a8:ca:11:16:7f:4a:b3:7a:
4c:af:f8:c7:e9:c7:1a:74:90:35:45:8b:8e:c2:92:
56:85:c8:e5:aa:a2:6b:9d:e3:cb:eb:60:6b:43:b5:
12:14:2f:3e:48:de:0f:dd:46:c5:bb:be:68:d8:9d:
18:1f:d8:fa:de:4d:9a:74:4e:5c:72:1f:c3:31:4c:
f4:d3:94:37:3f:ba:9a:7e:8a:53:97:4c:4d:aa:2e:
4f:e7:cb:02:fc:83:93:2a:98:ef:7f:89:3a:8e:d7:
09:6f:9b:6b:35:7f:b0:1e:ab:d9:86:bd:4b:51:47:
22:fb:47:1c:26:10:d6:ad:da:6c:48:fe:f7:e0:61:
e2:a6:dd:fc:69:06:58:4d:22:25:7f:a8:95:d9:56:
66:94:94:32:2a:9c:9f:ab:ab:f5:4f:e2:ed:20:84:
cb:4a:40:84:ca:63:6c:6f:61:1a:11:ff:ff:9f:f9:
83:ee:9b:83:98:35:71:f0:c8:03:26:88:2d:11:16:
01:33:cf:16:8f:ab:ce:a7:a9:90:bc:d5:d0:32:bd:
8c:92:46:84:97:a3:9f:e9:e4:77:42:61:42:0d:b7:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C0:C4:E3:20:83:75:2D:5D:6F:06:2F:FD:62:9A:48:76:60:FA:25
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c9:19:f1:de:29:dd:e6:cf:fd:d2:4d:c1:d4:9a:b6:f4:15:
9f:a3:a7:1b:f9:1b:3a:52:0d:58:fa:48:ba:8e:c3:8c:c0:26:
98:62:0a:ba:90:3c:b9:35:4e:85:e1:5d:e4:b3:8e:16:60:b3:
4b:b3:09:8c:8e:04:03:c6:20:3a:e2:c8:36:62:15:84:09:2f:
3d:0f:e2:55:7c:0b:9e:5a:f0:f7:88:17:5d:4f:5f:c9:ca:44:
f8:ec:e9:f2:82:36:de:9d:da:a4:86:6e:e2:5d:99:24:ae:36:
44:e1:49:a1:ba:8f:ed:11:7c:19:01:14:34:a4:cc:06:89:7a:
c6:e1:be:d3:25:e4:63:20:a5:d9:92:16:cd:31:90:44:fd:de:
70:bd:98:7f:4f:34:f3:fb:da:c9:63:a6:51:dd:28:2d:42:76:
fa:4f:7e:1a:5c:96:83:3c:3f:1c:64:26:98:de:bd:74:3e:2f:
31:4d:09:04:89:1f:12:a4:b6:58:c0:81:0b:d9:88:bd:3c:8e:
3b:3c:0e:94:1d:c7:0d:f8:fb:1f:aa:84:0f:b2:85:70:9f:67:
cd:e3:81:20:3f:8d:b1:ec:84:6b:09:a6:9f:38:30:af:0c:9c:
7e:1f:bf:1e:39:ef:33:db:aa:b4:69:2a:d7:97:5d:7b:d4:55:
d2:44:e5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:45:24 2026 by rpki-client