Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File: AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier: qOt1wSu5ByBEunsTa2qJ2jBXwlPx6bam2+iDtMwFKzM=
Subject key identifier: 85:24:5D:71:C7:97:D8:05:A9:94:11:5E:04:A0:D3:CD:AE:6D:B1:B9
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer: /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial: 01A13FDDE322FBC76258268AEF2E872662D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 14:01:08 +0000
Manifest this update: Thu 15 Oct 2026 14:01:08 +0000
Manifest next update: Fri 16 Oct 2026 14:01:08 +0000
Files and hashes: 1: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: kBdXoCKsSY1QDC/9upassMviAx+CzDc4yAOr92okyfw=)
2: VeD0j8DDk8aNazB8XjlyUYtBGB4.roa (hash: 3r6wr0pUmwD48d+/WPFhEsF0b5taens/OvioZS+8fGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:dd:e3:22:fb:c7:62:58:26:8a:ef:2e:87:26:62:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Validity
Not Before: Oct 15 14:01:08 2026 GMT
Not After : Oct 16 14:01:08 2026 GMT
Subject: CN=85245d71c797d805a994115e04a0d3cdae6db1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:42:67:02:21:f5:fb:4f:a0:7a:42:7b:35:
df:22:41:a7:ad:70:a0:a2:b7:a2:5b:f3:07:1b:f7:
76:07:f7:fc:fc:c0:05:07:95:2f:ae:fa:d7:88:f0:
1b:20:2d:66:0e:9b:ca:f0:fb:ab:25:72:1b:e7:45:
55:4c:a4:84:37:89:85:9d:30:3c:1a:c7:49:eb:31:
c6:9c:85:a2:f0:42:44:d3:77:9e:93:26:00:cd:6a:
99:dd:9b:72:b0:58:2e:10:9e:f7:a6:50:53:ec:29:
d6:5a:1d:8a:62:f1:e0:21:b9:f7:bb:2f:8b:74:ff:
3b:56:44:b5:c6:44:fc:c2:8e:f9:2b:17:cf:c6:6f:
ed:45:d9:9d:c4:7f:c4:aa:f0:4e:9d:9b:96:7a:be:
3b:9a:e6:6d:90:e6:55:0d:39:20:61:97:0a:bc:28:
24:88:d9:14:04:c3:05:ca:18:d6:9a:62:11:46:0b:
d0:e8:71:f2:d7:dc:ae:6d:1e:04:82:dc:8d:32:b9:
41:c7:b1:b0:f3:04:15:17:ca:9d:aa:3d:35:07:27:
0b:1c:64:95:26:da:04:11:1f:c6:73:de:7f:c4:ed:
e1:ec:55:fe:c8:8c:80:90:41:2f:2c:44:c9:ac:72:
65:88:bd:b3:f8:a1:a0:99:f7:16:f3:cd:17:be:da:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:24:5D:71:C7:97:D8:05:A9:94:11:5E:04:A0:D3:CD:AE:6D:B1:B9
X509v3 Authority Key Identifier:
keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4b:30:6b:65:0c:11:fd:4c:16:f4:9e:3a:c2:b1:53:4f:5b:
e8:4e:57:6c:eb:18:67:96:93:0a:ef:45:d1:8f:12:0e:0c:99:
b0:cf:35:14:99:9d:bd:ad:5b:0d:06:47:df:60:12:21:2a:3d:
e4:68:46:63:55:21:e2:9b:43:33:4c:61:42:b8:20:cf:ce:ad:
d4:92:be:f9:4b:95:49:d2:c1:62:10:6e:5a:ae:d9:13:02:17:
01:8c:69:ba:a2:41:7a:05:46:1f:5e:1d:d5:84:b7:5d:b0:ea:
19:ca:40:9b:46:36:b6:13:58:cc:bd:18:4a:1a:51:a3:e0:de:
e7:9e:e5:c2:0d:29:65:a9:10:8f:2c:77:ba:4b:95:bc:72:5a:
fb:c3:0c:2e:7e:64:17:0b:09:40:68:e9:f0:b5:a7:74:3f:1f:
24:70:58:ac:18:bf:df:81:4f:93:87:dc:48:e9:fb:48:16:09:
c2:41:4c:12:f1:1f:08:b7:61:3c:49:c4:cf:50:a3:ad:bc:a4:
2c:9f:db:cb:54:4f:ad:a7:e3:e6:08:7a:18:c5:37:68:3e:4d:
81:ac:9d:60:ff:58:f2:61:66:78:be:7a:c0:1c:ab:72:3b:45:
6e:e9:bc:0a:1d:e5:e0:78:99:ce:b0:5f:69:00:a3:d6:99:0b:
a1:20:02:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:52:29 2026 by rpki-client