Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
File: AZlprHWrzVlo8Yng1F272rKYK9o.mft (raw, json)
Hash identifier: D7sFtB82uf99a2s/j159Vzgl1U/7v+eYoKDJW8ti8qg=
Subject key identifier: 5E:8E:E4:95:98:DA:5F:B3:37:74:7C:B3:8D:67:64:C4:6B:13:AD:67
Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
Certificate issuer: /CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Certificate serial: 019CE523B98EA2681A075453D052236E1DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
Manifest number: 1872
Signing time: Fri 13 Mar 2026 03:00:49 +0000
Manifest this update: Fri 13 Mar 2026 03:00:49 +0000
Manifest next update: Sat 14 Mar 2026 03:00:49 +0000
Files and hashes: 1: AZlprHWrzVlo8Yng1F272rKYK9o.crl (hash: phdHfTu+yfFHr6qnWRXxNfcKYB5Mi5153Rtd5PINS8Y=)
2: CLVE2ArKTKuMwqjgL6kLvpMa_Ys.roa (hash: tIo5FHnfrZxqKjhlajxymyYkWYG/2B5IHrz0gcQBa60=)
3: W--jVPfUroL2WCIzigXr1GqZOnI.roa (hash: UTAIdellgv03HP/v9WQ+IXDsq9xLXdefSeBgIX0nlz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:b9:8e:a2:68:1a:07:54:53:d0:52:23:6e:1d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Validity
Not Before: Mar 13 03:00:49 2026 GMT
Not After : Mar 14 03:00:49 2026 GMT
Subject: CN=5e8ee49598da5fb337747cb38d6764c46b13ad67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:16:e8:e4:b1:8a:99:8e:a8:8e:37:84:44:
b3:b6:43:67:1b:3d:49:3e:ad:d2:51:c5:ac:51:33:
be:95:81:19:5b:ea:7a:09:62:20:1d:4d:d1:cb:24:
c9:53:fa:8a:64:a5:78:d1:0c:ff:63:a8:0b:f3:50:
e7:a4:06:42:7b:79:de:5b:29:c3:82:0c:76:30:39:
a7:65:20:dd:ed:a3:d2:f9:89:e7:21:b5:69:ec:cc:
da:75:63:c8:50:ee:6d:f3:8e:1e:ee:16:da:e9:d9:
76:ca:eb:16:5d:17:88:7b:c0:6a:7e:a3:5d:0d:73:
a4:dd:4a:20:9b:7c:16:72:9f:2a:f4:db:50:c0:41:
17:ba:a4:72:7d:cd:1f:b6:92:b6:c1:30:6b:4e:1d:
a7:78:5b:f1:db:3a:df:b7:a8:28:df:df:e2:ef:2f:
1e:79:4b:85:d9:4b:88:6e:bb:7d:0a:89:2f:06:59:
29:e9:55:2b:df:28:01:6b:57:cb:03:af:2d:02:e1:
50:b4:62:60:d1:d4:85:58:ec:35:07:a5:6c:db:ea:
06:9b:07:a7:c7:0b:da:d0:b9:f5:6f:51:7a:20:39:
18:d2:d7:22:11:0c:cf:94:c1:e9:cf:b3:64:fc:b1:
21:f7:f1:b0:78:0d:84:bd:68:63:0f:59:4a:27:9f:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8E:E4:95:98:DA:5F:B3:37:74:7C:B3:8D:67:64:C4:6B:13:AD:67
X509v3 Authority Key Identifier:
keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:17:87:87:b1:c2:31:dc:e7:fa:e7:29:7f:53:9b:d1:02:02:
e0:05:f1:c0:ed:29:34:a8:7f:3c:51:27:bd:8b:27:fd:88:0c:
fc:7b:84:3e:78:14:e2:94:5e:2a:9c:ee:73:91:2f:41:bc:48:
97:41:33:4e:bc:72:28:ab:82:50:43:55:df:4a:42:08:b4:b4:
3a:c7:5c:17:76:02:eb:f3:28:75:82:90:a5:60:d7:a6:bb:2b:
84:03:a6:8f:a5:47:a0:95:01:97:da:d3:13:bc:10:3c:29:e5:
ff:5a:85:60:ba:0a:e0:bd:a7:fc:4e:be:de:a9:3d:c5:4b:3e:
6f:df:23:69:ce:8a:12:ef:b8:80:45:ea:89:ce:64:15:ba:30:
5b:dd:c2:b5:27:d7:2a:b1:a0:d0:93:73:e0:53:4f:84:34:bb:
2d:f6:f3:8c:40:56:c5:c1:92:68:77:e4:4a:3b:94:fb:ed:c2:
8c:8d:84:43:a5:94:a2:28:96:53:ae:09:4b:8b:94:6a:5b:93:
7e:32:cb:2f:c8:57:be:9f:e2:83:c9:6a:a3:2c:84:9b:9c:40:
67:83:36:10:d0:52:aa:b8:10:d5:f2:15:8d:d3:30:29:25:41:
41:cc:dd:ed:3b:49:79:cc:47:a0:52:cb:e1:6e:94:db:65:c7:
ba:32:3c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:37:25 2026 by rpki-client