Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: 4fOQIvQBzEys10G5r8JMg7xOxtbUEFoAESxU+KbsW28=
Subject key identifier: E8:F7:D1:28:1E:81:36:5F:CE:E0:6B:52:E2:F6:6F:EF:33:9B:45:D1
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 019E2B15964CCA74E7F926623A61258AAFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 190D
Signing time: Fri 15 May 2026 10:01:35 +0000
Manifest this update: Fri 15 May 2026 10:01:35 +0000
Manifest next update: Sat 16 May 2026 10:01:35 +0000
Files and hashes: 1: CHly21F90uK3t1PTfGR7rzZwk_E.roa (hash: mWrqsrt9qgm67LUNBZ/tu5yn1dKMTJD4Xe31GCUEOfc=)
2: aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa (hash: Orir7PkRZZnMYBwB3ZGIXihY2LtAAjB+kCKoDM/u5+A=)
3: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: tmmVK1hlvVqTFa/uVvcp2D2RmRKdQmaxDw9u/UPObkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:15:96:4c:ca:74:e7:f9:26:62:3a:61:25:8a:af:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: May 15 10:01:35 2026 GMT
Not After : May 16 10:01:35 2026 GMT
Subject: CN=e8f7d1281e81365fcee06b52e2f66fef339b45d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e2:a9:9b:bd:db:6c:9c:ef:1f:02:f8:dc:53:
f4:9a:7c:36:ae:01:b9:16:35:46:ea:69:5a:36:04:
38:9b:f9:f6:cf:29:5b:3e:c6:05:7d:71:98:22:ed:
00:51:5d:34:bf:2c:ab:54:4a:a7:66:94:cc:b4:05:
ab:72:55:a9:d1:01:41:90:c8:e1:16:36:73:5d:8b:
cb:fb:85:f7:1b:ca:ec:0a:1a:71:f0:aa:e5:19:f5:
96:da:3d:4c:10:b7:93:9d:cc:6c:00:33:0d:fc:e1:
61:32:3b:0a:18:2f:c8:c7:7a:0c:de:68:65:34:f0:
1e:e0:49:fa:00:f3:7c:67:ad:0b:54:36:b1:23:b3:
6e:9d:c1:3f:df:27:59:9a:a3:0b:53:19:c3:fa:3c:
8c:d2:e5:b8:72:16:ff:86:9d:7e:dd:c1:ae:fc:c3:
a8:04:53:b5:46:b6:1c:76:6c:6b:ce:8a:91:58:5b:
92:84:db:a8:2d:19:a2:28:8e:69:50:a4:38:36:18:
1e:49:20:a4:52:9a:11:bf:c2:5b:a6:8b:12:7f:77:
de:7a:27:71:12:60:5b:4d:7f:27:4b:8a:d5:23:9e:
ce:21:de:b1:89:b6:9c:08:39:26:0a:f8:40:d5:a5:
a2:58:64:c1:a8:b9:44:2b:25:a3:13:ff:c5:87:c3:
bb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F7:D1:28:1E:81:36:5F:CE:E0:6B:52:E2:F6:6F:EF:33:9B:45:D1
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9a:9e:e4:55:cd:42:4f:f9:e0:6d:90:90:ae:6f:ab:f7:3f:
d9:a5:57:f3:b0:ca:cf:c7:19:f0:54:09:91:c4:08:07:02:d2:
0f:ae:f8:6c:5b:74:ef:47:7a:32:28:f9:f2:2d:3d:fc:83:b6:
a9:1d:4a:82:42:be:a5:e0:99:78:ee:c7:d3:da:15:52:47:12:
62:6f:fb:55:ec:de:47:c1:87:93:39:77:bd:e7:d1:ab:ac:14:
d0:54:5b:28:49:b6:3a:34:6d:77:c2:63:f9:36:03:bd:11:c1:
14:6e:d5:cd:c3:b0:3d:c9:22:a6:a2:1d:98:60:f0:b8:98:29:
86:97:f6:36:76:6c:27:8b:4c:18:ed:56:0b:05:f0:af:77:c5:
2e:9d:7f:db:89:34:1c:b3:11:23:4a:7b:2a:2d:28:a8:12:2a:
21:a1:71:f8:03:28:a9:78:68:f4:70:b1:7c:52:4f:7b:52:8e:
ca:18:15:62:be:86:ea:f7:37:31:18:79:11:d6:19:ff:43:df:
43:70:74:5e:29:03:a8:4c:e2:98:53:02:e1:4e:48:b4:52:be:
e8:8f:ba:72:5c:d9:9d:23:5a:a4:34:ca:df:7f:1b:b4:80:10:
1e:44:a1:32:d9:6e:3c:3d:75:25:2f:72:2b:50:90:a3:2d:48:
fd:30:7b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:41:51 2026 by rpki-client