Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
File: o75019azdkTAG-1V4NsxRkuYYMY.mft (raw, json)
Hash identifier: kZMAsJGYBPWSVT+pSwCi7OJ/q/Swz19ADNsFHD3SzeI=
Subject key identifier: FF:CA:B9:10:33:B1:71:BE:F9:DA:88:91:4D:71:B6:E0:A8:C1:4B:9B
Authority key identifier: A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6
Certificate issuer: /CN=a3be74d7d6b37644c01bed55e0db31464b9860c6
Certificate serial: 019EBDDA4E38D8CAC72BE8DB8FA9A511BCD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
Manifest number: 01FE
Signing time: Fri 12 Jun 2026 22:01:01 +0000
Manifest this update: Fri 12 Jun 2026 22:01:01 +0000
Manifest next update: Sat 13 Jun 2026 22:01:01 +0000
Files and hashes: 1: bo9Ko4HgF0NGY0x7JNh4-GVgDJo.roa (hash: tUVeOTBTPwteXhY4vj03N/tGfiCI5pAsvZ6bGoHFfww=)
2: o75019azdkTAG-1V4NsxRkuYYMY.crl (hash: ys6J0T4cMRhsDlmZJlfNmf1uqv7Z6RpVT+2YBRNKg4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 17:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:4e:38:d8:ca:c7:2b:e8:db:8f:a9:a5:11:bc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3be74d7d6b37644c01bed55e0db31464b9860c6
Validity
Not Before: Jun 12 22:01:01 2026 GMT
Not After : Jun 13 22:01:01 2026 GMT
Subject: CN=ffcab91033b171bef9da88914d71b6e0a8c14b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:cc:86:c4:a4:a0:76:20:64:b0:d8:e2:e2:
43:9d:87:59:d5:47:78:a7:ee:8d:6d:30:2f:c9:87:
62:50:57:0d:83:31:20:74:e1:cc:4f:f6:a9:45:df:
37:50:83:81:65:a0:7a:94:c3:e9:de:1c:3a:c9:f1:
37:1e:94:95:8a:89:8c:c6:55:e2:1a:bd:79:4b:b8:
97:9b:22:c1:91:89:45:de:2a:55:4d:d9:37:b7:e0:
c2:b0:b8:ab:9c:1a:7b:f9:0d:e2:38:21:85:59:7a:
e5:98:15:aa:e3:10:04:c0:21:9f:29:76:a3:73:1c:
4d:11:0e:e5:e8:00:0a:3c:d6:d6:eb:50:2c:cf:3b:
60:ff:64:58:bd:94:61:82:62:45:28:ca:98:ab:98:
39:17:9d:17:c0:b0:7d:c0:d1:6a:8e:9e:72:67:d4:
10:9d:85:52:88:08:21:8f:e7:fb:fe:22:c0:91:40:
38:6a:1a:ba:1e:85:b1:11:94:ca:ee:02:d0:96:84:
57:33:37:02:aa:77:2f:fc:c4:cc:b6:52:f0:02:02:
aa:01:6d:1b:03:02:9a:b9:2b:59:5e:cb:08:90:2b:
00:85:d8:a7:be:f2:f4:9f:5d:fc:bb:c5:e4:02:98:
54:1a:b4:28:74:02:65:50:aa:27:d7:77:4f:8f:70:
5b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CA:B9:10:33:B1:71:BE:F9:DA:88:91:4D:71:B6:E0:A8:C1:4B:9B
X509v3 Authority Key Identifier:
keyid:A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:10:9b:61:63:4b:a0:df:a8:5c:c3:75:89:9e:df:11:1e:64:
06:c3:e4:97:19:89:c1:b2:a8:a0:8a:83:61:ad:36:66:98:9e:
a2:4e:a3:87:7a:47:ce:39:00:11:e5:44:35:f3:cb:de:a8:e3:
da:4e:da:c9:9d:6a:0a:b7:6b:ab:79:a9:1c:98:12:b8:d2:31:
e5:8a:db:ce:d5:ca:b7:1a:d5:73:58:81:01:09:e0:43:1e:bd:
63:8c:b0:99:7c:7a:ad:39:5a:a1:53:57:5c:fa:1b:30:90:79:
a2:25:45:ac:f7:3a:9d:9f:b9:d6:d0:fa:fe:f3:c5:90:62:fe:
05:63:33:84:7c:da:92:0b:93:a1:be:38:c5:ee:b7:23:41:33:
f4:cb:da:f4:c4:9f:b8:2b:c3:76:36:8e:3c:30:5c:03:da:0f:
c5:bf:e4:b3:2c:05:3f:29:2a:fd:59:9c:aa:e4:18:35:26:4a:
fa:90:aa:b2:c7:81:90:e7:a9:fa:1d:89:7e:40:54:d6:dd:fa:
a2:42:c9:24:40:93:c9:62:cb:d8:52:19:96:79:6e:59:78:65:
a7:6f:b5:ba:eb:00:7f:6d:77:aa:ff:a5:ad:df:44:00:31:cb:
e0:aa:0c:05:33:ac:f9:d3:bb:d1:f7:29:e9:55:43:58:fc:8c:
96:f2:98:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:29:19 2026 by rpki-client