Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
File: aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json)
Hash identifier: b0saxNiLsZrAkbMR2VEBAZ/sSZbWcyq7qS2/cSCEm0o=
Subject key identifier: 96:13:21:E0:AA:BC:68:74:97:F7:02:86:99:2A:F7:14:57:F5:89:66
Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
Certificate issuer: /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Certificate serial: 019CEA4A92871C654EB1ED839B04CF0EE860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
Manifest number: 10FC
Signing time: Sat 14 Mar 2026 03:01:21 +0000
Manifest this update: Sat 14 Mar 2026 03:01:21 +0000
Manifest next update: Sun 15 Mar 2026 03:01:21 +0000
Files and hashes: 1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: QI9CCjYJQqY2odGF2ggYgSSn05wJxV76L8LzFCNGGrk=)
2: uxIFoYaci_ec-DO8z0hezY7ktq4.asa (hash: SDJifCzUIO+4H118O2u0CQ5c1Yer68j64MbpD0n6+XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ea:4a:92:87:1c:65:4e:b1:ed:83:9b:04:cf:0e:e8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Validity
Not Before: Mar 14 03:01:21 2026 GMT
Not After : Mar 15 03:01:21 2026 GMT
Subject: CN=961321e0aabc687497f70286992af71457f58966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5d:f0:45:d6:20:cf:c2:db:c0:24:7d:47:a5:
9b:35:c6:0e:78:7d:d4:79:dc:4d:45:e2:32:19:63:
37:15:d0:1e:c3:fb:12:6d:6d:2a:4e:11:cd:d7:ad:
7a:26:c9:fe:2d:2a:8f:da:7b:5e:56:7a:82:20:ef:
aa:a2:32:eb:a2:89:51:81:54:20:7c:c1:a2:78:94:
cd:35:4b:ec:a0:8d:4e:d7:b2:a3:02:11:b2:a3:bc:
d5:5c:06:7b:a6:22:a8:46:a7:df:a2:a9:31:df:86:
67:7c:60:68:c4:90:69:1f:b0:9e:19:50:ad:3e:66:
4a:a7:4d:df:7d:5b:49:e1:db:7c:93:92:ac:c0:13:
62:5c:01:89:11:0d:72:f2:08:59:cb:39:40:51:e4:
5f:c3:96:81:31:b8:b9:fd:b1:73:c6:c6:41:f2:aa:
df:c3:df:91:32:74:ff:c9:4f:f7:33:ef:9d:22:0f:
09:e9:99:9f:e5:37:dd:32:64:52:b6:5e:72:60:77:
ff:37:c5:f8:51:aa:35:93:e2:20:3d:ae:e1:e2:87:
f5:d9:0f:49:e7:a3:ea:b1:3a:d4:3b:24:ac:a9:07:
45:96:df:e2:37:5b:1c:66:34:73:13:6f:fa:06:59:
50:3b:f9:ec:75:57:84:cc:a7:47:ef:cf:c1:e3:f2:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:13:21:E0:AA:BC:68:74:97:F7:02:86:99:2A:F7:14:57:F5:89:66
X509v3 Authority Key Identifier:
keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:54:a8:29:ba:fc:45:c3:1a:f6:98:fc:af:eb:a4:67:ae:bb:
ce:e5:44:4f:65:97:55:2b:c8:38:5e:c1:c3:11:dc:84:9f:4b:
6b:60:ac:e4:10:28:8e:e0:65:e0:77:e4:19:6c:11:e1:c4:9d:
9e:2a:16:0c:37:39:90:d0:ed:d5:bc:bb:e9:45:78:5c:ca:0e:
f4:21:ff:01:a1:c2:18:51:ca:94:11:02:b6:42:32:a9:9d:3b:
fd:42:a9:33:6b:96:5c:93:a6:a0:ca:f2:fc:77:bb:66:24:14:
dd:7a:33:37:b6:f7:7c:74:37:03:9d:50:2f:a3:74:e6:3b:be:
c1:9e:5c:5f:e9:79:b5:ef:97:6d:6a:17:2b:64:66:48:c9:88:
ca:d5:99:05:5d:7c:d6:18:92:6b:d3:a9:ec:72:4c:ee:14:11:
08:a3:07:56:e1:00:22:db:74:99:c5:41:cc:b3:e3:68:66:9d:
db:c2:c7:9c:5e:dc:7d:17:9f:34:28:3c:16:14:64:79:49:ec:
9b:5c:82:0f:7d:42:4f:44:e1:09:38:b9:07:36:7a:1d:cb:ac:
af:60:09:63:a4:9f:0d:05:a7:39:7a:c2:08:1e:fc:36:e1:1f:
0d:0f:b5:44:65:e9:94:c7:80:1f:e0:56:fb:68:16:1a:ba:a0:
d2:97:16:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 10:29:23 2026 by rpki-client