Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
File: aZbfqRr5HsxjhBKLGMUDoywoNxM.mft (raw, json)
Hash identifier: earSIguKwU2LOf9g4BkRDXA9/lIoKI/VULr4a5QJKwE=
Subject key identifier: 9A:B4:02:CC:38:07:00:DE:F9:68:38:09:A4:79:25:B7:DA:FB:89:30
Authority key identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
Certificate issuer: /CN=6996dfa91af91ecc6384128b18c503a32c283713
Certificate serial: 019E8DC92ED2BF77A999D041F1D077D5B535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
Manifest number: 01DB
Signing time: Wed 03 Jun 2026 14:00:32 +0000
Manifest this update: Wed 03 Jun 2026 14:00:32 +0000
Manifest next update: Thu 04 Jun 2026 14:00:32 +0000
Files and hashes: 1: Vyqhid55byeG8LolohKo-3zBV4k.roa (hash: 11dk3jNFxCUzgdfOzDadI8TnuPaxlnCKPPEDYhwIvBY=)
2: aZbfqRr5HsxjhBKLGMUDoywoNxM.crl (hash: IArJSRYf/mdZSMf0WZ/YcaVQSkYVmpRmUQ8dyWj59P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:c9:2e:d2:bf:77:a9:99:d0:41:f1:d0:77:d5:b5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6996dfa91af91ecc6384128b18c503a32c283713
Validity
Not Before: Jun 3 14:00:32 2026 GMT
Not After : Jun 4 14:00:32 2026 GMT
Subject: CN=9ab402cc380700def9683809a47925b7dafb8930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:dd:ef:4a:0e:66:26:84:03:5a:8b:75:7a:
9e:f2:82:d1:16:23:d1:68:06:60:29:6a:9b:9e:57:
1f:ad:d8:8e:a7:03:08:15:9a:2e:d1:e8:92:6f:92:
a7:4e:16:00:4c:b2:66:10:9d:cb:28:2c:db:af:8d:
cd:6b:c3:8c:02:77:c3:56:aa:fa:39:06:9a:69:1d:
c8:2e:3e:9d:75:46:59:44:9d:c5:79:4a:4a:b8:9f:
d1:41:44:06:22:85:62:fb:6f:60:76:76:69:cf:82:
e8:ac:e8:10:ef:71:a1:b5:49:ae:ec:06:66:8d:f0:
0a:0f:4b:0b:44:f0:ec:32:3c:75:76:39:58:ca:52:
84:03:44:41:ae:bd:ac:f7:1b:69:2f:bb:41:13:f7:
38:09:05:61:72:b1:1d:fb:92:20:9f:51:e1:5f:3c:
06:ea:5a:03:96:77:73:a4:6b:49:7e:ba:21:e1:b3:
18:15:bc:f9:50:16:a0:2b:39:36:a5:e9:e4:db:38:
31:ee:2d:41:85:0e:dd:af:ae:50:0d:01:48:08:74:
16:3b:b2:0b:b1:91:9a:f3:3f:42:02:e8:0a:dc:29:
00:3a:39:22:1f:54:43:04:09:f0:3c:20:fb:1d:a7:
ad:9b:66:89:1a:04:72:ad:78:52:96:81:00:68:24:
75:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B4:02:CC:38:07:00:DE:F9:68:38:09:A4:79:25:B7:DA:FB:89:30
X509v3 Authority Key Identifier:
keyid:69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:98:3a:cb:f1:7c:7d:37:19:ef:30:db:2d:a5:42:68:24:ef:
3b:a1:8e:61:ca:1b:58:a8:7d:99:6a:15:57:46:93:19:2d:5a:
86:d8:1f:4a:dc:94:ab:80:bd:67:69:82:ad:e9:63:3c:28:85:
31:1e:16:40:99:de:e0:23:15:1d:d5:54:51:f2:2a:ac:9e:42:
86:fb:0f:ef:f2:95:2d:73:15:85:c4:86:61:2f:f3:4a:6f:fb:
71:14:d8:43:45:b9:76:8d:09:5d:bd:d6:dd:4d:86:93:3f:2c:
c9:30:b3:ed:91:17:b5:21:a8:e3:14:f2:94:7f:9e:33:1e:1a:
88:86:9b:98:c1:3d:fb:94:86:b5:91:95:13:f0:2e:c9:1a:56:
c5:0d:7c:2f:15:b3:0b:ff:92:c0:5f:97:6c:36:05:1f:a6:87:
e8:e8:c7:ed:12:33:be:81:11:d3:83:45:f6:71:74:5c:74:11:
85:c5:52:2c:2e:a8:2d:f6:f2:4b:5d:55:2a:5b:88:38:38:65:
f5:f7:3f:6c:17:a0:ab:34:6d:12:aa:c2:18:5b:9b:d0:a9:0e:
0b:e1:91:8b:27:f8:09:ff:9a:9e:3e:b9:f7:44:eb:34:61:37:
ac:69:0d:bf:0f:4a:03:a6:51:20:15:60:f3:bc:03:1f:d6:cc:
26:f8:3b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:57:42 2026 by rpki-client