Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
File: aZuxClVyF1sDo8fL--k4t7FEGsA.mft (raw, json)
Hash identifier: /tizSfQV4KbJ91UGhYDiYnKGdy8DpQDK9t2ESgDWeks=
Subject key identifier: CA:71:40:0E:73:BE:1D:A3:B9:52:5D:24:49:55:A4:C5:32:85:3C:2D
Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Certificate serial: 019D3752721FFE0CC064EB19386C62AC2A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
Manifest number: 09E9
Signing time: Sun 29 Mar 2026 02:00:43 +0000
Manifest this update: Sun 29 Mar 2026 02:00:43 +0000
Manifest next update: Mon 30 Mar 2026 02:00:43 +0000
Files and hashes: 1: 1-Vth4z2v9uFJG-6e6yAh4OoK6zE.roa (hash: c8s0rn9oSVHOm4SDzolaenn55CGT9XGpo6G1tmj95qA=)
2: aZuxClVyF1sDo8fL--k4t7FEGsA.crl (hash: nhTmAY5rtEaw5UR5j6eQcO6yuK0gETBQTU/s1DKJtc8=)
3: mTtfV_YCvYk6ujcAUY5ExBi65Ig.roa (hash: 55gorD5hIJrNCpzlN8lg/I0nrXrYfHRLnChQmmITdMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:72:1f:fe:0c:c0:64:eb:19:38:6c:62:ac:2a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Validity
Not Before: Mar 29 02:00:43 2026 GMT
Not After : Mar 30 02:00:43 2026 GMT
Subject: CN=ca71400e73be1da3b9525d244955a4c532853c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:e1:8a:a9:b7:ca:05:d5:21:40:10:10:cf:
13:68:03:e2:39:c3:09:e7:76:8f:fb:da:b1:b3:e8:
34:6d:17:8b:26:4f:00:38:a3:ee:50:9b:b3:5a:d5:
18:3f:c7:7f:6d:90:c9:23:86:b7:bb:b8:71:df:bc:
be:3f:e4:eb:13:2b:0b:4a:85:16:e2:88:0b:cf:d2:
68:56:ea:af:dc:06:64:3d:ad:74:92:a0:7e:c3:34:
e3:a5:5e:0f:dd:13:ec:83:8d:d0:03:97:ec:3c:d7:
de:0b:b1:41:54:5b:f6:7b:a0:ec:2d:c5:ed:37:1c:
a3:88:0a:b3:51:44:d2:a3:bc:54:f7:00:c0:a3:0a:
03:37:1b:61:23:f7:49:a5:e2:31:c5:2b:87:92:2c:
bb:5d:73:ce:49:84:1b:17:f9:1d:49:40:48:9a:ef:
82:16:53:61:c3:a0:0d:23:d9:e1:f6:3f:8c:2a:b6:
ff:99:ae:e5:be:44:c6:18:da:c4:f4:10:5c:bf:a9:
94:57:dd:81:d2:3c:9a:5d:a6:a3:ae:85:16:ca:0c:
80:34:cc:fa:ed:85:5c:92:1d:f0:17:b9:9c:a7:85:
af:fe:6a:11:24:82:a9:9d:35:bb:5b:43:bc:df:71:
04:1d:68:bc:1b:35:1f:0a:74:2a:9a:fe:81:18:0e:
d4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:71:40:0E:73:BE:1D:A3:B9:52:5D:24:49:55:A4:C5:32:85:3C:2D
X509v3 Authority Key Identifier:
keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6c:63:34:d1:6d:15:6b:10:a3:3a:d6:51:e3:1f:39:d5:ad:
d7:c6:06:00:f2:46:e5:16:08:10:9e:af:94:2c:5a:a1:66:fb:
8f:8b:66:1c:a9:73:62:e0:31:ce:62:44:97:86:be:fa:38:72:
2b:02:2c:aa:ad:d0:00:57:48:d2:b1:a8:3c:e5:11:19:91:bd:
d1:e9:c8:38:49:47:5e:37:c3:aa:ba:99:a6:d4:01:b5:84:f1:
b5:6d:f2:6e:4b:ea:1b:a9:79:2b:5e:4d:3f:6d:5c:72:37:2e:
b9:dc:b0:3b:bb:1b:73:8a:e5:ae:6a:f5:ae:ec:58:77:28:e6:
ac:31:6a:24:2c:79:8c:de:1a:d0:7c:bd:f1:bc:0d:b6:c2:1d:
e1:0d:5a:ff:58:d1:66:03:39:aa:e2:ca:00:6e:d4:b8:43:7c:
60:cb:5b:11:5c:57:61:f8:5f:4d:f7:65:63:9b:20:51:64:65:
67:60:9c:4b:da:46:08:4d:8f:a8:7a:4b:77:b7:97:53:57:b8:
90:c0:53:15:92:91:c4:e7:43:9c:65:a0:db:c1:c5:22:d7:7e:
eb:68:12:a6:09:dc:c4:79:60:de:63:ec:1a:e7:81:b3:2d:37:
6f:2f:33:aa:08:be:b9:9f:97:9c:77:6c:b0:69:e4:82:1e:d5:
c5:7a:fe:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UnIf/gzAZOsZOGxirCoxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OWJiMTBhNTU3MjE3NWIwM2EzYzdjYmZiZTkzOGI3YjE0
NDFhYzAwHhcNMjYwMzI5MDIwMDQzWhcNMjYwMzMwMDIwMDQzWjAzMTEwLwYDVQQD
EyhjYTcxNDAwZTczYmUxZGEzYjk1MjVkMjQ0OTU1YTRjNTMyODUzYzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBvhiqm3ygXVIUAQEM8TaAPiOcMJ
53aP+9qxs+g0bReLJk8AOKPuUJuzWtUYP8d/bZDJI4a3u7hx37y+P+TrEysLSoUW
4ogLz9JoVuqv3AZkPa10kqB+wzTjpV4P3RPsg43QA5fsPNfeC7FBVFv2e6DsLcXt
NxyjiAqzUUTSo7xU9wDAowoDNxthI/dJpeIxxSuHkiy7XXPOSYQbF/kdSUBImu+C
FlNhw6ANI9nh9j+MKrb/ma7lvkTGGNrE9BBcv6mUV92B0jyaXaajroUWygyANMz6
7YVckh3wF7mcp4Wv/moRJIKpnTW7W0O833EEHWi8GzUfCnQqmv6BGA7UzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpxQA5zvh2juVJdJElVpMUyhTwtMB8GA1UdIwQY
MBaAFGmbsQpVchdbA6PHy/vpOLexRBrAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iZmEwN2ItODdjMi00NTJhLWJkMGMt
OGFhZTQzMDYzYmNhLzEvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iZmEwN2ItODdjMi00NTJhLWJkMGMtOGFhZTQzMDYzYmNh
LzEvYVp1eENsVnlGMXNEbzhmTC0tazR0N0ZFR3NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmxjNNFt
FWsQozrWUeMfOdWt18YGAPJG5RYIEJ6vlCxaoWb7j4tmHKlzYuAxzmJEl4a++jhy
KwIsqq3QAFdI0rGoPOURGZG90enIOElHXjfDqrqZptQBtYTxtW3ybkvqG6l5K15N
P21ccjcuudywO7sbc4rlrmr1ruxYdyjmrDFqJCx5jN4a0Hy98bwNtsId4Q1a/1jR
ZgM5quLKAG7UuEN8YMtbEVxXYfhfTfdlY5sgUWRlZ2CcS9pGCE2PqHpLd7eXU1e4
kMBTFZKRxOdDnGWg28HFItd+62gSpgncxHlg3mPsGueBsy03by8zqgi+uZ+XnHds
sGnkgh7VxXr+ZQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:36 2026 by rpki-client