Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
File: azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json)
Hash identifier: /BcDw6N49Hg3FSp13EG5oXVq1jg9QSgBp1jIVPeFlCw=
Subject key identifier: 62:85:B2:E2:47:B0:A7:02:2A:2C:51:6B:E9:7E:5D:4A:F7:EB:6B:CA
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Certificate issuer: /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial: 019D37C01B2AD57B7536729BCEACE77A5974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 04:00:29 +0000
Manifest this update: Sun 29 Mar 2026 04:00:29 +0000
Manifest next update: Mon 30 Mar 2026 04:00:29 +0000
Files and hashes: 1: BhiORD-UuUDBrhyIYI_DoUYPlI8.roa (hash: JTlV8Y8e4tmlDr8mHk2b5u6aD2TaQXFvARgJc495HDg=)
2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: eCTfERPyReu7qlQsC1ViG1IUHNBle6yNJPLk5Gj+yIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:1b:2a:d5:7b:75:36:72:9b:ce:ac:e7:7a:59:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
Validity
Not Before: Mar 29 04:00:29 2026 GMT
Not After : Mar 30 04:00:29 2026 GMT
Subject: CN=6285b2e247b0a7022a2c516be97e5d4af7eb6bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:0e:70:3e:21:dd:06:e8:c4:ec:32:7b:6a:
e0:95:7f:c2:a8:a8:20:8f:9b:f2:8f:65:4e:a2:a5:
e5:44:cb:d5:a9:11:50:67:44:51:c9:a5:07:43:2e:
10:5e:60:94:c6:80:63:a9:aa:de:85:6c:ac:3e:e7:
f0:96:68:c4:cd:b1:4c:d2:2b:c4:21:b5:57:ca:23:
2d:29:3f:11:f2:6b:87:57:6d:7d:18:63:e6:4f:b3:
1b:f0:40:83:79:5a:13:f4:53:3f:b8:91:df:ef:10:
45:10:07:a7:5b:17:43:56:24:bc:38:f5:31:9f:f5:
f3:d8:17:84:c0:33:d3:47:f3:bb:30:ee:bc:32:eb:
6f:eb:47:ed:65:cf:ae:90:20:88:61:e6:0c:fd:19:
6f:b3:32:93:0c:73:c3:e2:44:76:b0:a4:42:29:aa:
40:2d:a8:32:a6:06:97:61:13:8a:5c:08:c0:97:18:
39:f5:02:23:56:e9:94:e5:10:50:d1:d0:82:92:bc:
53:99:f8:e2:97:96:5a:f1:82:fb:d1:ce:e5:81:69:
b7:bb:fd:ca:b6:e7:c2:a1:6b:e4:28:75:50:05:62:
90:47:e7:47:4a:ed:bc:31:b0:a0:84:7f:e2:26:a8:
e3:c9:7e:30:2b:89:c9:7c:45:c0:27:33:ad:b9:f4:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:85:B2:E2:47:B0:A7:02:2A:2C:51:6B:E9:7E:5D:4A:F7:EB:6B:CA
X509v3 Authority Key Identifier:
keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:22:b5:c9:61:4c:5f:b6:bc:e1:63:93:75:cb:e5:a2:78:b8:
3c:17:e4:5d:a9:1a:9a:c2:85:f0:a2:21:66:47:c9:38:10:c2:
b1:fd:d3:eb:d5:07:97:ce:bf:cf:ae:42:9b:fd:9a:8c:72:b7:
31:06:b3:9b:e5:18:4e:51:2e:39:72:8c:8b:90:19:d1:1c:25:
94:36:ce:d5:5e:cc:53:c6:e9:f9:9d:3b:83:cb:6a:82:c6:47:
21:7e:f8:3d:03:0b:8d:95:bc:94:dd:fc:de:55:56:75:79:6c:
f9:24:4c:dd:65:23:f1:34:85:5f:a7:5c:4b:87:11:84:8a:7a:
1e:e2:b8:f7:71:b6:c8:16:91:d6:da:5b:36:d4:2d:33:20:82:
83:3d:84:04:54:88:d5:b1:d6:73:9a:81:96:17:11:f8:9b:f1:
77:a6:65:c9:a3:79:1d:d0:a4:4b:37:e0:52:d5:94:ad:e4:2e:
df:1f:24:d2:83:b3:bd:1d:4f:34:76:11:14:b0:04:fc:5a:e6:
90:89:56:5d:3c:e9:59:8f:82:a4:73:e9:a4:2c:22:a1:98:48:
20:d1:c9:42:27:10:2f:4f:c4:64:b1:4d:61:d6:00:14:28:19:
4a:3f:cf:97:19:e9:91:26:51:2b:f5:a3:31:71:31:dc:9e:0a:
00:17:28:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:52:25 2026 by rpki-client