Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier: ctSnqPEFUvYOcspfp/qv1zR3/nOYD+xLy4tAL94HJQU=
Subject key identifier: B8:79:4E:DB:30:33:60:32:D9:36:53:CB:79:5B:0F:A2:85:24:21:56
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 019D37F71D914C46980F9E636DD05BD9EA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number: 1527
Signing time: Sun 29 Mar 2026 05:00:34 +0000
Manifest this update: Sun 29 Mar 2026 05:00:34 +0000
Manifest next update: Mon 30 Mar 2026 05:00:34 +0000
Files and hashes: 1: 7Jk5wu_kJc-zPPGcp7O62JhhrJQ.roa (hash: SK08RqLCGeZwklsNV3oFj4q7+ObIhzDMa6BPNd7d8VI=)
2: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: Tf6LtWtKlZn8WN6V2HlYYL3osSDoOx9/qWlxYzKxmc0=)
3: nFf_xFZifK1O6AxBYllnzUi_i3U.roa (hash: wCPglifyZSCCde6+ZRBNVX/1pM0oJBcsybUWgeFRMfQ=)
4: yQQiLrOw_IC4fSBdg8XdSt3Qv8c.roa (hash: /G23HmdFMWbuOSonlYM0rBeEVBVw1dDwE7uR//SpzMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1d:91:4c:46:98:0f:9e:63:6d:d0:5b:d9:ea:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Mar 29 05:00:34 2026 GMT
Not After : Mar 30 05:00:34 2026 GMT
Subject: CN=b8794edb30336032d93653cb795b0fa285242156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0b:9a:94:33:46:2e:10:54:a9:6d:b5:3d:51:
71:b4:59:9b:5c:db:d9:dd:3a:22:7e:2e:f6:1e:7f:
78:dd:1a:e0:87:ce:95:93:11:81:c7:e6:3b:d5:62:
3a:cf:01:9e:96:f0:39:23:4b:80:60:c5:67:2d:5c:
21:7d:f9:ec:a1:cc:db:ac:e5:34:e5:8c:c2:0f:57:
ea:2e:f3:de:07:f2:f6:1e:4b:80:ef:2b:c4:10:e8:
1a:16:68:2a:7d:c9:c4:e3:1e:0d:41:27:01:c8:8f:
7c:a4:71:33:bb:c1:48:ee:45:c2:0c:b6:7a:25:6e:
ca:be:11:3b:65:1a:5e:0f:b2:11:a3:21:c6:18:9a:
0b:1f:80:c7:df:89:ea:14:e4:b2:a8:1e:36:ef:ae:
e4:0b:98:e6:e2:84:d5:92:e6:94:ad:37:10:1f:5e:
b5:dc:dd:b0:9b:bf:f0:6a:06:a9:4f:70:c3:be:c1:
f1:b6:be:48:c4:18:8a:94:bd:c1:99:de:a1:38:83:
69:d5:04:88:9d:c7:13:4e:ea:c2:a0:f1:43:b7:6d:
6b:4d:f1:71:4e:c6:a6:20:67:ae:f4:c7:2f:51:d8:
1c:d5:1d:ce:e1:68:df:d0:f1:de:92:c2:1b:f7:6d:
ab:6d:c1:bd:a3:e7:63:bf:f4:71:bd:9f:ac:c5:da:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:79:4E:DB:30:33:60:32:D9:36:53:CB:79:5B:0F:A2:85:24:21:56
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e1:5c:94:8f:88:3e:f6:be:89:5e:8e:45:5a:0c:cc:58:57:
9a:c2:08:62:43:de:6d:47:ea:b8:8a:42:43:4d:ad:8e:1d:2e:
8f:4c:22:c3:b9:27:79:4b:d4:e2:f1:b4:dd:c8:4a:71:7a:23:
db:17:50:42:2f:e7:da:43:21:fc:06:56:b2:f1:a5:d3:3e:a0:
a7:ad:49:cb:6d:b3:2c:ad:8f:77:f1:04:32:ea:e4:e7:00:ef:
b4:80:dd:e4:e1:13:04:ac:0f:60:03:09:1e:ff:81:b8:89:04:
5a:e8:d9:b9:e5:83:37:c2:33:f4:0f:fa:d9:36:fb:18:9d:92:
fe:47:f8:e6:f7:38:e0:19:d7:86:f9:8b:72:5e:22:02:9b:27:
4d:f7:e3:e5:32:e3:e5:b9:77:20:d5:79:8c:27:16:b3:fb:25:
d0:cb:7d:5a:3a:c6:d7:8e:c3:af:f6:54:d3:29:d8:2d:d0:b1:
be:84:72:21:6e:36:4a:37:bb:83:82:13:89:79:ba:4c:56:f9:
a7:f8:ac:83:74:c0:0f:85:1b:fe:9b:e0:0a:0d:28:bd:64:20:
ab:4d:b9:ea:f9:89:82:45:12:11:dc:9e:ee:33:bf:d1:3f:28:
f4:66:f4:45:b6:aa:c2:4c:8a:39:9d:cd:fb:c7:dd:50:fd:93:
7b:8a:d3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:47 2026 by rpki-client