Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: dpFTzOlUNyPWGYBl/uiDjXaoR0K/kpBSb0w1uat9ccU=
Subject key identifier: D0:A1:CC:99:4F:17:F9:0B:6A:C0:66:6E:81:D5:C3:7C:8D:EB:E3:B5
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 01A13F70B2C47139A7E73843DD0E6646E5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 089A
Signing time: Thu 15 Oct 2026 12:01:52 +0000
Manifest this update: Thu 15 Oct 2026 12:01:52 +0000
Manifest next update: Fri 16 Oct 2026 12:01:52 +0000
Files and hashes: 1: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: mWYwmBgZ8a/E+8Ows2a6LBZ7eEQIvLbWSBWPrWJJqkI=)
2: J2AX-dfSBlxAov2g7XU-SvPTN2g.roa (hash: Ub7s38aHKyVCQB8qIwC3JEAo5wPRv8Jfjm1a8qORU2A=)
3: LTjdrpDRMudIXtNosr-U_ziXt5E.roa (hash: ms8eyl5dUgZvhTOeCMmz+tru6poGukzqv5R3jWSheZE=)
4: UUvzoSv4sOtoM_qTnWEfyZPh36w.roa (hash: OZ3Q2RMBzi2SuPU5m7aab1TJWLxduPklJN4eaFdd9Us=)
5: _gl7Dyg9MbKwtRKgqoZf1V2ga_M.roa (hash: bVhzlBVpBjutI4nxuPvd8OyDBoyWtfgMn/TxHaVpplk=)
6: f7mV16J1wDqR46O1Mb_9h93t8qY.roa (hash: +Ff97Fyap6EGIXgVefHvjx97YPM6vgNVwia4edsbMvU=)
7: w6NI6aLvx4KDIuytptDmPUNw4k8.roa (hash: J4WatUQ1Gg1wlYFtBnYv3nfQa17rcBTANwBndrk06EE=)
8: xm-giN1_4xQkS7oWDMF-PGSR_zs.roa (hash: 0P6Rz44L0zbSop2KodtAJVOn4O7mdpBxYyQArrYs2PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:b2:c4:71:39:a7:e7:38:43:dd:0e:66:46:e5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Oct 15 12:01:52 2026 GMT
Not After : Oct 16 12:01:52 2026 GMT
Subject: CN=d0a1cc994f17f90b6ac0666e81d5c37c8debe3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e3:90:cc:a9:b1:ce:30:9a:48:d7:83:8b:36:
ce:ff:db:da:62:ca:81:35:52:96:e5:f4:7d:1a:bc:
8e:44:a9:aa:48:05:7e:8b:67:de:dc:94:f4:14:d1:
ad:58:72:17:47:32:24:b9:11:9b:46:73:d6:88:1f:
71:c8:a5:7d:ff:ef:0b:82:36:30:1b:b4:19:eb:ee:
52:09:0e:89:e4:c6:fb:35:e2:bb:d0:3d:65:fb:e5:
fc:a5:3b:b5:c8:63:4e:de:8e:a5:13:68:83:27:d1:
24:43:cb:8a:43:8b:35:13:7f:dc:4c:e1:ef:85:65:
9d:fd:6c:e3:bc:7c:98:1b:3d:e9:25:77:e5:e5:d8:
ef:23:fb:ca:d8:05:cb:95:8d:9f:5a:af:bc:0e:99:
91:24:11:c6:25:c0:80:ba:00:31:d9:64:36:37:e1:
c7:ea:8d:48:ed:76:b5:09:66:88:3a:53:0b:95:6b:
56:8d:db:32:53:28:5b:e7:92:b2:5a:81:d4:0a:e3:
cd:88:e4:1c:e5:65:26:12:01:d4:d2:a9:69:8e:7e:
9d:05:ed:43:98:51:3e:b2:68:09:4b:86:b6:cb:08:
2e:a3:b1:14:12:31:54:e4:2f:1c:96:0d:3a:98:61:
67:80:ee:c1:32:f6:67:03:fc:8f:ea:5d:e0:9c:16:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A1:CC:99:4F:17:F9:0B:6A:C0:66:6E:81:D5:C3:7C:8D:EB:E3:B5
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:76:84:49:c4:db:89:a3:ba:50:a2:d6:9f:2f:48:7b:54:2e:
c2:af:e6:95:73:df:49:4d:d6:36:37:7d:a5:61:56:ad:10:e5:
41:36:59:d4:96:48:4a:dd:38:a1:6f:c0:58:b7:f6:f3:ac:72:
ba:3e:56:7b:09:1d:48:67:9f:22:0f:37:5c:25:eb:f7:8d:76:
c7:4d:db:32:ea:1d:6c:f5:6d:a3:6d:01:d0:a5:47:bb:9f:5a:
c6:ea:be:da:94:93:6e:64:52:48:71:d1:a4:de:86:c0:fc:3c:
5c:8d:c4:77:28:2a:24:36:4d:85:08:5e:bb:b0:44:f4:c3:ae:
61:00:6c:8d:68:05:22:c8:d5:a4:2d:3e:9d:5c:eb:42:64:9b:
c3:73:02:69:4a:c7:f6:7e:aa:d4:46:df:b2:52:9c:ed:d0:e1:
9a:74:8e:59:c2:bd:e1:dc:f7:a5:1f:73:f5:93:e4:4b:8d:cd:
04:5e:d8:5d:b1:d3:ac:93:b8:16:7e:4d:2d:f2:c6:45:80:9e:
96:13:10:c4:d7:78:17:24:a9:ca:fc:77:8e:79:42:7a:ba:e8:
02:cd:35:72:0d:fb:32:69:bf:29:ef:e9:9f:87:1e:08:ae:2e:
f1:96:ce:53:51:b2:11:e6:a3:56:12:75:4a:2a:04:d1:6a:4d:
e7:f3:a9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:22 2026 by rpki-client