Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
File: AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json)
Hash identifier: 9K2b3oHtZWwnYN7cpSLm83Hi0FzReI6WepJva74yvSw=
Subject key identifier: 84:1F:A3:4F:E6:CD:31:B2:AB:0C:4E:B7:12:CB:FA:2C:2C:DA:22:73
Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
Certificate issuer: /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Certificate serial: 019DD0F551620D3970624CDB0BB98165CE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
Manifest number: 0327
Signing time: Mon 27 Apr 2026 22:00:31 +0000
Manifest this update: Mon 27 Apr 2026 22:00:31 +0000
Manifest next update: Tue 28 Apr 2026 22:00:31 +0000
Files and hashes: 1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: 3vnmJfKGlAqzVjdT9DF7OEP1EraynFpDQOLdasYers0=)
2: nmpgPMBFt9dLqNX0M81_MpAwEgA.roa (hash: 4RQmSgy56Vqmok8SF0GYYTjto7wxmhh7LR4/RfXSDMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:f5:51:62:0d:39:70:62:4c:db:0b:b9:81:65:ce:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Validity
Not Before: Apr 27 22:00:31 2026 GMT
Not After : Apr 28 22:00:31 2026 GMT
Subject: CN=841fa34fe6cd31b2ab0c4eb712cbfa2c2cda2273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:a9:aa:43:cc:4a:49:42:38:d3:ef:47:33:
3b:a1:e1:de:3f:8e:0e:f3:c4:f3:23:83:40:ac:3f:
58:0c:85:34:d7:4f:ba:9c:f3:e4:e5:69:14:16:58:
3c:8a:3b:a4:53:55:70:af:d8:8c:4f:6f:f7:d7:b1:
1d:6d:9c:0b:69:ef:89:ac:2f:2f:9a:e0:14:c4:3f:
47:66:53:27:5b:23:c7:cd:e1:b6:16:56:bc:95:e0:
6f:7b:2e:a2:65:e5:ef:9c:8f:90:24:07:16:65:9f:
03:03:5b:52:0e:0f:24:98:1a:ba:da:43:9b:c2:6b:
29:bd:b9:80:a6:ec:04:68:62:84:4a:59:4c:ba:2c:
c4:61:c4:f3:b5:77:61:a1:06:7c:7c:5e:b6:0d:fa:
67:16:d4:4f:4d:79:74:65:0a:ff:66:34:f9:25:3b:
8e:31:6a:a2:ea:7b:59:19:7d:c0:c2:b3:8c:e0:fa:
2d:29:d9:ec:a3:c1:42:66:34:e8:7d:7c:62:98:88:
c3:a7:88:bf:b6:f3:70:29:05:e7:72:a8:99:03:99:
8a:eb:60:9e:5b:6a:ff:a4:6e:25:29:52:72:0f:5a:
d0:13:05:0b:7e:e2:99:56:3e:49:8f:37:d2:08:22:
45:87:3c:ad:ea:31:66:c1:73:b6:4d:e2:6a:55:fe:
fb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1F:A3:4F:E6:CD:31:B2:AB:0C:4E:B7:12:CB:FA:2C:2C:DA:22:73
X509v3 Authority Key Identifier:
keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8c:21:91:35:89:98:93:c5:e3:7b:ce:cd:2e:4a:78:ba:9b:
23:41:29:82:bf:04:1d:5c:82:b5:d7:bb:ad:4d:a8:2f:be:47:
ab:5b:9b:4c:a8:b6:51:36:4d:96:b8:34:f1:00:88:ce:94:53:
32:18:e9:8f:2e:b6:8c:ef:0c:4f:69:ea:9e:17:f6:fb:59:d5:
f6:b9:15:ea:83:57:cd:6e:c5:af:48:0e:d0:13:40:a1:5b:9b:
77:b1:cb:68:ad:25:a1:b5:22:db:85:de:c1:c1:86:c9:a2:56:
a8:cf:19:7e:af:97:ae:2f:c8:43:ab:a5:3c:97:67:3c:d0:b8:
9b:03:69:6f:99:79:46:6d:21:61:1a:8a:d2:7e:1b:58:5c:d5:
5d:60:89:f8:ca:71:92:8f:28:40:e6:2d:a7:5a:8d:fe:11:27:
ee:83:fa:23:ed:91:b8:7c:31:0b:c8:87:bc:b0:b6:8e:b5:13:
9b:e6:9b:d3:7c:ee:97:fb:58:6b:2b:ad:d8:f2:bd:96:31:9e:
5a:f1:6a:2f:3d:23:e0:37:9a:9f:99:83:e1:39:0d:a0:25:03:
7f:68:07:09:5a:48:d3:de:f7:1a:3d:ad:c4:da:38:6d:dc:2c:
a5:28:f0:74:50:4e:d2:5a:06:33:06:cf:76:c4:1c:8a:c8:d5:
e4:d2:b8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:46:00 2026 by rpki-client