Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
File: AZaQhdv67lorEfXMh_WddBh4vR4.mft (raw, json)
Hash identifier: CU14VXrpYJvAn+a8Uyc/U0HSl/Hg1BmfLuI9yvAmIgQ=
Subject key identifier: 1B:CD:C1:7E:F4:26:BE:1C:D2:CA:9C:CF:95:CE:16:4D:88:39:A8:CD
Authority key identifier: 01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
Certificate issuer: /CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Certificate serial: 019D37F7061D9425049C3ACD3495AF1FED7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
Manifest number: 038C
Signing time: Sun 29 Mar 2026 05:00:28 +0000
Manifest this update: Sun 29 Mar 2026 05:00:28 +0000
Manifest next update: Mon 30 Mar 2026 05:00:28 +0000
Files and hashes: 1: AZaQhdv67lorEfXMh_WddBh4vR4.crl (hash: hdb8nqscAnzemqKbUp556eATocnVeCJJk4NPRj4jvCs=)
2: mrgQvPT5f81LqdW8fBMupeJKuJU.roa (hash: xHnIDJmAiiC8Js7rQ2nzM4B4BoLoJOSKWWF32wLisBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:06:1d:94:25:04:9c:3a:cd:34:95:af:1f:ed:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Validity
Not Before: Mar 29 05:00:28 2026 GMT
Not After : Mar 30 05:00:28 2026 GMT
Subject: CN=1bcdc17ef426be1cd2ca9ccf95ce164d8839a8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b9:9a:56:86:ef:b0:99:25:df:8d:a4:2f:8b:
cd:65:7f:26:4e:e1:be:cd:c0:c2:27:46:5b:59:24:
ea:56:78:4c:51:a7:72:ff:7a:4a:0c:3a:58:49:7f:
33:cc:92:54:8c:99:76:43:4a:23:bc:8d:b8:0d:8c:
42:cf:47:59:27:53:8c:57:5a:c6:a8:19:fb:85:91:
0f:2d:5e:ca:db:7b:0e:86:9d:d1:87:de:b0:4e:bd:
c1:e9:95:79:b2:b5:27:1a:6e:b3:00:93:6f:c3:e9:
c0:80:6a:5f:14:e5:c9:b2:30:23:c6:e9:b2:bf:c9:
da:4c:d2:4b:37:12:75:07:93:c5:45:77:06:c6:c6:
ef:a3:21:0c:a7:0d:50:c2:97:61:50:f4:43:b9:31:
6f:75:60:e1:f9:70:17:2a:93:0b:6b:de:3f:c6:55:
e5:17:04:44:47:0b:3a:1f:87:0a:65:59:30:c7:0f:
b1:be:69:e7:c7:3a:db:e5:ef:e7:24:fb:d8:7b:c0:
24:66:d0:da:7b:04:74:eb:88:40:95:a9:c7:76:e1:
2b:4e:f4:31:da:d2:65:50:5e:91:9d:62:9e:ab:0a:
65:4d:6e:9b:01:94:81:43:98:f6:d3:64:88:34:f1:
83:8f:16:0d:b5:2d:81:4b:9e:28:b9:65:8a:26:e2:
5e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CD:C1:7E:F4:26:BE:1C:D2:CA:9C:CF:95:CE:16:4D:88:39:A8:CD
X509v3 Authority Key Identifier:
keyid:01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:12:8c:a9:45:21:d9:2d:b4:f8:17:ee:7c:26:d8:6e:3b:42:
fe:23:a6:82:24:2a:e5:95:47:93:c4:2b:5e:49:26:7c:9b:55:
81:00:1b:c8:79:2c:00:cd:dd:3e:96:20:a7:85:5f:9e:5b:ed:
78:76:36:37:a4:9b:46:c4:f7:ed:74:5f:e0:86:1e:f2:af:c6:
0c:94:94:22:d2:f9:1d:2b:e3:3f:86:39:58:6a:9a:a0:6b:51:
bb:05:c3:43:45:cb:2e:5a:f4:ca:b4:36:a6:7f:0f:78:71:00:
fa:7b:44:9c:17:f4:20:ce:0d:d3:88:00:e7:2c:67:47:45:d6:
4d:57:a2:27:a4:d0:36:98:69:49:fe:ad:02:81:99:20:9c:2c:
ce:f4:f5:b1:86:65:2b:d7:3d:55:27:9a:db:39:f5:e6:31:3f:
4a:67:05:25:08:cb:c2:68:c3:58:08:d2:dd:70:98:c5:78:37:
f9:bb:10:1a:cf:4d:d9:d9:40:6e:be:76:75:82:2c:e9:a4:d6:
8f:3c:cb:11:1b:9f:9f:be:f5:97:ee:94:9d:51:63:94:86:bc:
4c:9d:e9:e7:c1:70:7d:19:ee:28:1b:11:55:65:12:5d:6e:97:
85:8d:2e:11:23:ef:36:00:9a:22:f2:48:f2:8a:b7:d3:7f:b5:
89:b8:54:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039wYdlCUEnDrNNJWvH+18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTY5MDg1ZGJmYWVlNWEyYjExZjVjYzg3ZjU5ZDc0MTg3
OGJkMWUwHhcNMjYwMzI5MDUwMDI4WhcNMjYwMzMwMDUwMDI4WjAzMTEwLwYDVQQD
EygxYmNkYzE3ZWY0MjZiZTFjZDJjYTljY2Y5NWNlMTY0ZDg4MzlhOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrmaVobvsJkl342kL4vNZX8mTuG+
zcDCJ0ZbWSTqVnhMUady/3pKDDpYSX8zzJJUjJl2Q0ojvI24DYxCz0dZJ1OMV1rG
qBn7hZEPLV7K23sOhp3Rh96wTr3B6ZV5srUnGm6zAJNvw+nAgGpfFOXJsjAjxumy
v8naTNJLNxJ1B5PFRXcGxsbvoyEMpw1QwpdhUPRDuTFvdWDh+XAXKpMLa94/xlXl
FwRERws6H4cKZVkwxw+xvmnnxzrb5e/nJPvYe8AkZtDaewR064hAlanHduErTvQx
2tJlUF6RnWKeqwplTW6bAZSBQ5j202SINPGDjxYNtS2BS54ouWWKJuJesQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvNwX70Jr4c0sqcz5XOFk2IOajNMB8GA1UdIwQY
MBaAFAGWkIXb+u5aKxH1zIf1nXQYeL0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVphUWhkdjY3bG9yRWZYTWhfV2RkQmg0dlI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jNDA0ZGEtMDRlNS00NWVkLTkwNzIt
NjY3ZDk3NGY4YjE0LzEvQVphUWhkdjY3bG9yRWZYTWhfV2RkQmg0dlI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jNDA0ZGEtMDRlNS00NWVkLTkwNzItNjY3ZDk3NGY4YjE0
LzEvQVphUWhkdjY3bG9yRWZYTWhfV2RkQmg0dlI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRKMqUUh
2S20+BfufCbYbjtC/iOmgiQq5ZVHk8QrXkkmfJtVgQAbyHksAM3dPpYgp4Vfnlvt
eHY2N6SbRsT37XRf4IYe8q/GDJSUItL5HSvjP4Y5WGqaoGtRuwXDQ0XLLlr0yrQ2
pn8PeHEA+ntEnBf0IM4N04gA5yxnR0XWTVeiJ6TQNphpSf6tAoGZIJwszvT1sYZl
K9c9VSea2zn15jE/SmcFJQjLwmjDWAjS3XCYxXg3+bsQGs9N2dlAbr52dYIs6aTW
jzzLERufn771l+6UnVFjlIa8TJ3p58FwfRnuKBsRVWUSXW6XhY0uESPvNgCaIvJI
8oq303+1ibhUVg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:58 2026 by rpki-client