Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
File: AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json)
Hash identifier: R3yrJ6HfAdxCwf+6tFvYq+hckORdJtL3wSBJEMTK2Ak=
Subject key identifier: EC:F9:B5:C1:97:E3:80:14:62:F3:71:98:1D:58:A2:C7:56:1F:E9:38
Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
Certificate issuer: /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Certificate serial: 019DCF07BD05D3E01AB0C510A07C3E9FE61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
Manifest number: 0326
Signing time: Mon 27 Apr 2026 13:01:23 +0000
Manifest this update: Mon 27 Apr 2026 13:01:23 +0000
Manifest next update: Tue 28 Apr 2026 13:01:23 +0000
Files and hashes: 1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: /koFbTQ5vX3cmLGZ7JI6m9Ij9ohnCFNDgLR/UAtohr4=)
2: nmpgPMBFt9dLqNX0M81_MpAwEgA.roa (hash: 4RQmSgy56Vqmok8SF0GYYTjto7wxmhh7LR4/RfXSDMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:bd:05:d3:e0:1a:b0:c5:10:a0:7c:3e:9f:e6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Validity
Not Before: Apr 27 13:01:23 2026 GMT
Not After : Apr 28 13:01:23 2026 GMT
Subject: CN=ecf9b5c197e3801462f371981d58a2c7561fe938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:e8:12:9c:30:27:64:30:e1:f9:c8:10:92:
7f:40:cd:35:c6:62:b9:2b:d2:90:39:a7:f4:90:20:
eb:cd:e6:15:8f:e9:fd:81:ca:e5:02:0a:41:78:9b:
c3:24:50:4b:7c:48:1c:5a:7c:db:a7:25:9e:eb:70:
ce:33:f7:5a:4d:f5:51:16:e5:e0:be:65:80:ce:24:
21:69:49:8e:4b:f7:0e:99:52:88:e3:77:25:8f:c0:
2c:88:31:bd:04:3e:3a:ae:41:e5:10:2d:bb:5c:bc:
a1:3d:5a:94:1b:a9:8a:7f:e1:3e:44:f9:41:0d:c6:
57:8e:8e:ae:e4:41:7f:f9:97:4f:ca:60:15:ac:d7:
3f:fb:39:c6:43:39:af:a7:b9:78:1f:0e:38:42:9a:
a5:81:6b:54:c0:13:f5:b9:74:65:1d:3e:ab:e3:51:
8c:f0:b7:79:0e:e9:29:fb:7e:d6:5f:58:06:bc:d7:
9f:cb:95:fc:68:e5:5f:85:6c:7a:14:a0:7f:ca:a6:
03:b0:07:d6:6b:49:b3:0b:48:09:c5:7f:f7:eb:ca:
a2:40:e5:cf:25:a0:ac:7e:ad:01:c0:a3:d7:82:8c:
17:25:ed:70:f3:ad:a1:c9:f7:f6:13:38:9f:f3:43:
63:83:ab:cb:2e:f2:4d:cf:83:87:23:79:ef:79:f4:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F9:B5:C1:97:E3:80:14:62:F3:71:98:1D:58:A2:C7:56:1F:E9:38
X509v3 Authority Key Identifier:
keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:10:7c:9f:d5:c1:0d:48:99:76:db:46:e4:4d:98:21:b4:20:
e0:2e:e2:a2:71:76:69:af:68:ae:1b:76:f8:59:08:09:64:ca:
7f:9c:be:53:4c:6d:22:9b:63:b9:cf:56:cc:c9:fe:01:80:a6:
a1:36:e2:b6:be:dd:ff:f8:2f:34:08:ad:7b:fc:fe:19:a7:52:
b3:c9:c1:4c:dc:0a:09:a5:16:e5:50:ad:24:28:4d:65:4e:4e:
d9:71:d9:b9:d1:ba:75:39:2d:8b:80:a3:9f:3c:1b:72:7a:23:
74:7c:70:47:b6:df:aa:00:41:1b:84:c1:a1:5d:29:29:14:b0:
f0:f8:76:40:89:62:25:2f:1a:5c:0c:0e:98:3f:99:a3:ac:88:
0e:da:17:4e:b0:da:2a:55:28:cb:f9:e6:5b:34:a6:1a:0a:7b:
9b:9c:de:21:77:88:41:e5:85:f3:2d:9f:a4:c0:88:05:87:f7:
aa:14:8c:e4:96:36:2a:a8:95:c4:72:38:a9:49:5a:c5:20:56:
bd:66:ab:bc:aa:85:0a:b9:6e:8b:c4:13:69:3e:e5:53:98:6f:
ff:72:d0:c4:52:4d:35:a7:4f:3b:8e:fd:9c:5f:c7:b1:a9:b0:
0d:12:63:6f:08:d3:49:43:f4:1a:35:d3:9f:4d:2b:b2:8d:a8:
5c:b2:75:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:31:11 2026 by rpki-client