Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: iHV/KXepCjH8JomAAvWGalPL8e2nOe1nhDhWSzHrk0o=
Subject key identifier: 41:CC:6F:C5:D6:83:95:B7:7A:F6:80:2E:29:46:FC:36:F4:99:11:25
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 01A026FC91D68B2065A2BB9DEF4B918799CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 1A14
Signing time: Sat 22 Aug 2026 01:01:21 +0000
Manifest this update: Sat 22 Aug 2026 01:01:21 +0000
Manifest next update: Sun 23 Aug 2026 01:01:21 +0000
Files and hashes: 1: CHly21F90uK3t1PTfGR7rzZwk_E.roa (hash: mWrqsrt9qgm67LUNBZ/tu5yn1dKMTJD4Xe31GCUEOfc=)
2: aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa (hash: Orir7PkRZZnMYBwB3ZGIXihY2LtAAjB+kCKoDM/u5+A=)
3: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: BFhoSozQJaXsBbS5k9hhEMtOR1Xd7coIyDZ/4R6N5YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:fc:91:d6:8b:20:65:a2:bb:9d:ef:4b:91:87:99:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Aug 22 01:01:21 2026 GMT
Not After : Aug 23 01:01:21 2026 GMT
Subject: CN=41cc6fc5d68395b77af6802e2946fc36f4991125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:14:b7:ad:73:a2:13:a9:5a:c1:7b:68:dd:
da:5d:d8:22:d8:9a:07:1f:29:92:4b:ec:fc:2f:f1:
c6:5d:cd:31:d1:62:e8:0b:12:85:e8:04:78:cf:b9:
79:b0:5d:4e:11:65:69:7e:bc:92:c0:c6:f7:8e:a1:
bf:12:15:09:bf:8a:4d:f9:31:c7:45:cf:c3:a9:db:
6b:6d:03:f9:29:16:73:54:10:b3:03:e2:18:3c:86:
04:06:5a:ef:21:a2:77:5e:3d:eb:ea:cc:0c:82:09:
d8:36:c6:f7:63:d2:d6:a0:50:e8:95:62:e2:a8:e8:
1d:ee:24:9e:43:59:1e:ec:2d:f1:c4:ab:c7:19:ea:
26:f8:60:73:51:bc:71:73:d5:dd:cc:79:31:fc:a2:
00:34:0b:b9:c1:84:cc:a3:8e:52:1c:48:f9:2d:2a:
86:d4:a2:ad:e4:4e:32:c1:20:7a:52:9e:ae:73:5f:
84:2c:3d:74:ee:31:c3:df:d3:9d:6d:e3:d8:ad:c7:
1f:1a:ec:8e:d2:ae:a6:e7:51:83:75:39:fb:91:7e:
7b:56:2c:a9:e7:91:4f:fc:e1:9a:91:4b:1d:a9:93:
bc:4b:2c:1e:94:20:40:27:f4:55:21:26:ec:f4:92:
d3:a4:8e:c5:30:5d:79:d1:1b:7d:65:20:c1:5d:0b:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CC:6F:C5:D6:83:95:B7:7A:F6:80:2E:29:46:FC:36:F4:99:11:25
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ee:ba:e3:23:eb:1b:3b:37:e9:09:16:aa:64:62:c0:83:47:
4d:68:45:cf:3b:fa:de:c2:ee:87:ed:4e:f9:04:72:44:e3:75:
7d:b7:85:95:95:53:64:fc:ca:b7:cf:12:f8:b5:78:b5:a0:52:
2d:bd:37:df:7a:dc:73:94:b6:2c:11:92:0e:f9:fa:86:85:2d:
72:e6:14:bd:73:f9:e3:68:73:95:7d:03:a1:06:4b:a8:68:5f:
2d:fd:a8:c5:89:47:03:6c:c9:15:4e:6e:61:d7:85:d1:46:de:
2b:4c:f4:86:3e:9d:f6:ce:58:59:de:53:cf:1b:49:1f:72:0b:
ff:a3:66:17:b5:29:f4:f4:2a:5b:33:2b:df:a4:ad:63:e4:f4:
88:4a:95:59:0a:f8:63:95:6f:ad:2a:8e:c0:ad:10:d3:45:b4:
23:ee:21:5a:b3:4e:a5:d0:97:a8:bd:10:57:3c:3d:d4:33:45:
19:33:c2:03:32:73:b3:4c:4a:c8:20:e0:90:d0:ed:9d:4a:58:
a8:92:56:8c:75:20:15:23:4c:b0:e9:50:ed:bc:4a:60:5c:78:
06:a1:1d:d4:df:f6:62:de:55:a7:10:9e:5b:24:56:7f:c4:88:
46:1e:d8:2d:d3:02:05:ba:72:70:ca:27:b6:f5:fc:ac:14:de:
ae:0a:06:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:08:06 2026 by rpki-client