Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
File: azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json)
Hash identifier: jMVClDUS1/yavi4Gwk2dN1NDVYp21YbbVJyrWMjeqWg=
Subject key identifier: A4:0B:5A:25:97:18:40:D0:6B:9E:51:C9:53:DB:09:DB:27:D4:02:96
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Certificate issuer: /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial: 01A18A526610CFC6C8987A816899FB4B92E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
Manifest number: 1AD2
Signing time: Fri 30 Oct 2026 01:00:18 +0000
Manifest this update: Fri 30 Oct 2026 01:00:18 +0000
Manifest next update: Sat 31 Oct 2026 01:00:18 +0000
Files and hashes: 1: BhiORD-UuUDBrhyIYI_DoUYPlI8.roa (hash: JTlV8Y8e4tmlDr8mHk2b5u6aD2TaQXFvARgJc495HDg=)
2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: dnncICdXkfkXKrGnVragXtOUj6vOE668IQ6rhyRPgHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:52:66:10:cf:c6:c8:98:7a:81:68:99:fb:4b:92:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
Validity
Not Before: Oct 30 01:00:18 2026 GMT
Not After : Oct 31 01:00:18 2026 GMT
Subject: CN=a40b5a25971840d06b9e51c953db09db27d40296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:40:e1:3a:8b:dc:69:0f:0a:f1:3d:4b:88:
d3:14:77:60:5c:a8:bc:64:1d:90:a1:e7:93:5a:d5:
eb:07:2f:96:61:88:d7:6f:75:9c:c8:c2:a3:46:3b:
46:8d:9e:0e:50:27:0a:d8:e6:bb:41:15:0c:4b:96:
54:1d:f6:8b:9e:ec:78:45:8e:a2:66:4a:e4:fe:23:
03:33:18:07:e4:69:e4:6c:89:61:85:6d:08:8e:e9:
f0:98:27:5a:f3:f4:d2:46:51:ce:ee:9a:55:84:a7:
58:68:94:9b:b1:13:11:35:38:d6:43:7c:f6:2c:33:
2e:7d:70:04:40:df:c0:d4:b9:32:40:39:22:b3:08:
44:be:6c:fc:04:7e:b2:d3:9b:db:77:61:fa:cf:6b:
7b:4f:f3:b8:d9:12:6a:54:05:74:9f:a4:8d:9f:cb:
87:e5:32:0c:01:3b:bb:a6:d6:35:7f:db:85:92:a4:
a4:54:42:d4:7c:54:de:ba:a6:d0:53:d7:34:ad:34:
5f:6a:13:f0:07:02:93:fc:9d:f4:10:73:3c:20:e9:
9f:16:01:e1:13:de:9e:24:dd:4f:d8:80:a0:85:fd:
51:9e:f9:ff:b6:81:75:83:37:89:6b:9f:b6:17:05:
6d:10:9d:86:0b:5e:21:03:35:4a:ba:2f:5f:e1:7c:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0B:5A:25:97:18:40:D0:6B:9E:51:C9:53:DB:09:DB:27:D4:02:96
X509v3 Authority Key Identifier:
keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a5:05:65:e7:09:74:2d:90:49:7f:3d:50:1b:bd:57:37:3b:
0d:14:8f:77:07:26:0e:d5:7c:9d:c1:6c:09:25:39:14:0f:f8:
0f:02:04:e3:30:e0:65:d8:0c:4b:95:6d:8d:f3:a9:98:82:36:
7c:f8:9c:8a:46:01:5b:3b:35:b4:b5:41:e5:05:b0:c5:e9:3f:
1c:f1:95:f6:f3:46:5a:3d:b0:91:b6:18:29:33:1c:e1:f4:3d:
e1:6e:3d:bb:0d:45:df:8d:47:14:e8:f2:74:bb:c9:eb:be:70:
4e:ca:78:d8:8d:08:0f:ae:96:53:3e:3d:ba:f3:65:88:8b:00:
5e:a1:6d:8f:49:32:0f:62:16:8e:23:ad:07:a5:a6:6d:87:2f:
0a:e3:13:1c:2d:8b:68:8a:d8:2f:66:47:9f:09:c9:21:10:4c:
4e:08:82:d8:31:f8:17:81:18:aa:d7:56:02:00:4a:05:f6:6d:
6e:9a:1f:2a:61:57:8c:c8:78:97:96:64:6a:ef:4e:1c:56:67:
2c:f5:19:85:54:77:ab:49:b3:b9:5d:45:26:07:b9:db:fd:b0:
35:37:70:b0:0c:7d:a5:6a:15:33:61:00:ba:c9:af:b0:7c:1d:
be:59:41:95:56:85:d6:1c:2b:3a:f2:17:f2:6f:b6:39:ba:ff:
a7:b4:d4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:09:24 2026 by rpki-client