Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
File: az921hCBSGU2b6pnz8Za0GnHz8Q.mft (raw, json)
Hash identifier: CFPaeUz9hSlzaSroVRrQNnGaxAjzQgisfkSaez2uLg8=
Subject key identifier: 68:2B:69:B4:E9:9E:7B:E5:0F:39:92:9D:11:96:FF:1E:AB:2A:07:07
Authority key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
Certificate issuer: /CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Certificate serial: 019D37C07310C8728AC4FD7EC2D77F7F1BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
Manifest number: 0F6C
Signing time: Sun 29 Mar 2026 04:00:52 +0000
Manifest this update: Sun 29 Mar 2026 04:00:52 +0000
Manifest next update: Mon 30 Mar 2026 04:00:52 +0000
Files and hashes: 1: az921hCBSGU2b6pnz8Za0GnHz8Q.crl (hash: NiedouOGmFWG2qsFDDozMqfRy6gG3/DiBpM8K1kt0KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:73:10:c8:72:8a:c4:fd:7e:c2:d7:7f:7f:1b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Validity
Not Before: Mar 29 04:00:52 2026 GMT
Not After : Mar 30 04:00:52 2026 GMT
Subject: CN=682b69b4e99e7be50f39929d1196ff1eab2a0707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:87:20:49:5b:1e:a2:16:ca:a2:a2:9e:23:
f8:e5:64:b6:f8:1d:50:80:24:7c:7f:6d:4f:ef:f2:
82:ec:31:dc:e7:dc:a4:79:ac:73:89:9a:93:23:75:
19:d5:26:3b:da:df:5f:5d:cd:91:8d:c0:04:e8:d3:
f0:9c:26:24:94:8e:c9:6c:cd:40:31:3e:8f:85:2f:
fc:45:41:a8:8d:04:c1:10:c3:7c:fc:f9:f6:ac:70:
9a:7e:f0:68:a6:45:4b:c7:ff:ae:04:ae:03:aa:fc:
43:7a:4d:72:ec:6a:fd:e5:db:79:c0:23:1a:d6:92:
75:ee:c6:0a:a1:f2:4d:ad:cc:17:c9:d0:db:6b:7c:
f5:0f:e8:c8:fa:c3:8c:22:18:70:d3:49:45:30:c9:
17:85:c8:e9:34:86:24:47:0f:19:cf:e9:94:dc:0c:
fb:bf:ca:fe:18:4b:59:fa:e1:63:54:36:24:54:b1:
bc:6e:59:ab:0f:e8:bb:22:51:60:e6:4d:70:9f:5d:
6b:fa:80:6f:e6:27:73:55:f4:de:bb:f8:49:e1:6b:
75:56:82:a4:d5:34:41:f2:62:7f:fb:6c:7e:d2:11:
ec:73:f9:dd:04:87:77:2b:54:2c:d8:cd:17:1a:22:
8f:12:69:fd:b9:07:86:0b:c9:13:63:c3:aa:2d:ed:
eb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2B:69:B4:E9:9E:7B:E5:0F:39:92:9D:11:96:FF:1E:AB:2A:07:07
X509v3 Authority Key Identifier:
keyid:6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3c:b0:97:3b:a3:9e:e7:e8:25:27:45:cc:a6:d2:16:1e:98:
27:31:d5:5a:23:0d:c6:2f:3d:9c:58:70:31:f4:ee:08:5b:50:
f2:59:3d:5c:a1:a1:1c:00:2c:05:60:53:79:65:38:20:87:62:
72:80:ef:97:a0:a3:32:16:f5:1e:f9:1b:92:e0:06:28:e4:18:
41:d9:39:5a:b5:a6:00:ff:ed:5c:0f:04:26:ea:d7:62:30:4a:
12:ef:b5:64:35:f6:79:40:9e:0a:ec:cf:bc:71:e5:ea:34:91:
e8:41:ba:28:0d:dc:f8:f0:df:56:ac:37:53:2c:d0:eb:36:d0:
db:2f:df:f5:1e:6e:f2:a0:26:8a:17:c8:e5:c6:54:1b:fc:1f:
12:4d:5c:2a:81:0a:22:d4:85:96:c7:42:2d:e8:f4:02:96:60:
c5:d7:5f:3c:b3:4f:b3:a9:4b:94:d0:c7:bf:87:2d:38:ce:5e:
6c:f7:f3:e4:9d:0b:ef:b4:70:02:49:f8:f3:8e:a6:40:1a:c0:
60:f5:3e:4c:22:1a:e1:77:10:bb:4f:7e:42:36:ae:e2:1a:76:
98:f5:08:97:f4:c9:d2:d0:bb:f8:00:e1:e9:46:3d:66:ce:2b:
68:6b:e6:2c:9f:11:9d:f9:b7:3e:66:e4:65:bf:01:ee:c8:c7:
1c:1c:42:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:43 2026 by rpki-client