Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: b77HlUEeM5xkcdKyUuOdrJdXJKCGsoFmVsO/D29BULs=
Subject key identifier: 4A:D2:DC:4F:3C:BA:82:84:3D:F2:E1:5B:EE:C7:81:A7:2A:3B:D2:EF
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 019E916FAE92AF8E880CDD5A4BD8DAFAD686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 1943
Signing time: Thu 04 Jun 2026 07:01:15 +0000
Manifest this update: Thu 04 Jun 2026 07:01:15 +0000
Manifest next update: Fri 05 Jun 2026 07:01:15 +0000
Files and hashes: 1: 3wUwuQwTXV5aCQTU82rWSfa5LEM.roa (hash: ZLeq9/wF1aUOdaHthHWe1UDHIfSGZmqtBr5YatoHrhk=)
2: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: ecQLTKxs9saOMyrwo9Cv4VF3lyu7zGcyPvYo23j9WKI=)
3: t4a_vp8lFfYuPnrFd74HGQFrjpA.roa (hash: 1yVWZO4hYvbD4qGSevogaiCjdCYYHYrdz/g3xPGLVFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:6f:ae:92:af:8e:88:0c:dd:5a:4b:d8:da:fa:d6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Jun 4 07:01:15 2026 GMT
Not After : Jun 5 07:01:15 2026 GMT
Subject: CN=4ad2dc4f3cba82843df2e15beec781a72a3bd2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:1c:37:a6:e1:20:c8:e6:55:a1:ef:d3:46:
f3:6f:87:d7:c3:96:8b:3f:e7:d0:c2:1c:d9:8d:7d:
c8:bb:27:31:65:3a:66:ed:42:df:05:f4:c0:d9:a8:
e0:dc:60:89:f0:83:c0:1b:d8:40:50:61:19:44:15:
04:1f:6a:dc:16:4a:af:1a:d1:ae:84:70:76:03:db:
0a:ec:77:01:fe:8d:e4:e0:e4:77:51:9e:1d:a2:69:
46:52:a7:66:e7:af:b5:24:80:ae:f5:2d:91:57:f1:
e2:42:01:66:77:5b:45:a9:59:77:48:45:55:29:ec:
00:cf:54:4c:df:b6:1b:32:c4:67:34:71:b2:77:5d:
a9:01:b4:14:2c:f8:43:d6:c4:3f:ea:05:12:f2:64:
10:6b:59:d2:9b:12:76:34:e4:54:63:0e:4b:90:19:
9e:65:e2:c7:a1:e8:20:19:4b:b8:44:4c:38:75:35:
59:1a:c4:d6:47:6e:72:11:12:8d:be:a9:44:1a:c4:
ae:f6:53:84:26:02:ca:45:f9:1e:4f:bb:34:34:bf:
ec:7f:6e:ef:56:82:0c:75:0a:19:3a:30:cb:6b:76:
73:02:94:06:91:18:1c:59:3e:5e:68:63:0d:ef:70:
41:19:6b:3b:cb:4e:70:22:e9:a2:cb:9b:34:c9:6f:
7c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D2:DC:4F:3C:BA:82:84:3D:F2:E1:5B:EE:C7:81:A7:2A:3B:D2:EF
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e7:de:ed:45:03:91:b1:0f:4e:68:53:82:41:89:e4:5f:7e:
f6:b1:6f:8c:6c:f2:68:72:4f:9a:9a:12:64:08:d5:30:f1:6c:
1f:1b:46:0f:2f:38:0c:be:ab:9f:0f:4a:58:6f:2d:6d:06:65:
21:e3:99:2c:95:49:8a:c6:b4:e5:d1:76:1a:0f:91:94:72:74:
98:bc:78:2f:d6:f4:f7:08:5c:a8:de:4d:64:20:70:09:35:42:
e7:2e:45:cc:f5:c9:72:a3:02:8d:5d:2a:31:10:a1:25:c1:5a:
1a:6f:9b:80:b6:48:60:ec:f0:1c:d6:d2:bf:b4:d5:ea:19:3c:
b2:f4:20:ba:ce:6f:45:f1:cb:47:71:ca:7b:93:95:de:6d:f9:
f4:87:91:d0:88:f6:54:94:a2:e3:21:49:50:74:ca:f4:d6:89:
09:2a:40:5b:9d:33:e6:9f:34:b9:3a:17:11:f1:ea:ef:d6:8b:
b6:cd:44:7a:ba:d6:37:2d:88:0b:87:53:d0:61:25:d9:9f:71:
75:36:42:7b:ed:3a:40:7a:c5:ce:d7:51:9a:22:df:aa:d0:70:
1c:65:bb:2b:07:a0:7c:4d:58:37:bb:8f:7c:4a:97:b4:74:74:
4a:22:f6:30:fd:36:7b:72:ec:59:03:8e:cc:e8:e3:d0:d0:a9:
ee:54:08:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:18:53 2026 by rpki-client