Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
File: o75019azdkTAG-1V4NsxRkuYYMY.mft (raw, json)
Hash identifier: 6gzGyKCIQGEBcrC/whdigW/38i1MxCWvQrHp8tqQIbU=
Subject key identifier: 8E:51:94:8A:48:44:82:12:3D:E2:CB:F7:6B:42:5B:79:1A:53:C3:07
Authority key identifier: A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6
Certificate issuer: /CN=a3be74d7d6b37644c01bed55e0db31464b9860c6
Certificate serial: 019DD61D104F4F43705A6CAAD317F3105B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
Manifest number: 0186
Signing time: Tue 28 Apr 2026 22:02:02 +0000
Manifest this update: Tue 28 Apr 2026 22:02:02 +0000
Manifest next update: Wed 29 Apr 2026 22:02:02 +0000
Files and hashes: 1: bo9Ko4HgF0NGY0x7JNh4-GVgDJo.roa (hash: tUVeOTBTPwteXhY4vj03N/tGfiCI5pAsvZ6bGoHFfww=)
2: o75019azdkTAG-1V4NsxRkuYYMY.crl (hash: GwN0qMcw2nN1uHDLitkyKvnB2WGtXd3hyhACSgqs918=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d6:1d:10:4f:4f:43:70:5a:6c:aa:d3:17:f3:10:5b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3be74d7d6b37644c01bed55e0db31464b9860c6
Validity
Not Before: Apr 28 22:02:02 2026 GMT
Not After : Apr 29 22:02:02 2026 GMT
Subject: CN=8e51948a484482123de2cbf76b425b791a53c307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:0c:d1:4f:22:8d:58:d9:23:3a:83:35:08:
0d:36:a2:5c:d5:ee:a8:59:66:91:33:98:73:c5:62:
34:19:69:07:3e:ff:be:cc:91:81:0d:f6:e8:81:75:
33:fd:fd:6e:6a:1a:03:6c:35:e5:20:5e:19:5d:bf:
94:ac:21:f6:5b:b1:60:69:5c:2d:ed:94:32:a2:43:
50:9a:14:81:5c:d9:f8:09:2a:7d:6e:3e:d5:8d:67:
19:bc:d8:09:5f:f0:7e:65:33:31:5a:04:33:33:46:
a6:c3:84:01:61:56:69:52:7d:dc:7d:9d:70:a9:14:
b9:38:fa:eb:e2:c9:e8:c3:8f:9b:d1:af:8e:85:b1:
72:e9:87:c5:32:1e:31:51:40:cb:e8:b4:68:29:02:
af:49:bf:a4:be:8a:f6:65:36:6b:e5:be:ee:6a:6c:
4d:c9:4c:d3:d9:fe:ae:12:48:96:0a:95:c4:96:78:
9d:ee:86:ae:c0:aa:a6:04:28:3d:de:94:59:f8:62:
d8:3f:09:e8:72:18:e1:cb:af:fa:d5:0d:22:d8:97:
20:1f:c3:93:1f:b0:82:ad:22:de:61:f7:e0:11:42:
e9:b1:dd:81:19:fe:60:07:09:5c:f4:ac:36:0b:e9:
ca:57:57:21:63:91:03:4c:9a:92:cb:fd:b9:47:47:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:51:94:8A:48:44:82:12:3D:E2:CB:F7:6B:42:5B:79:1A:53:C3:07
X509v3 Authority Key Identifier:
keyid:A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f3:91:1b:55:01:c5:78:e0:59:dd:b1:b0:71:3f:53:ea:68:
f3:b7:41:45:a2:6e:40:4c:22:cf:68:92:79:c0:cf:38:2b:d2:
c4:03:9a:75:ce:5d:80:dc:d4:cd:9a:41:ba:6c:f0:00:16:3c:
b0:91:36:b3:98:f2:01:f8:ce:33:87:3c:50:75:5e:fd:fa:84:
bb:5a:8b:a0:2d:92:43:49:64:a7:36:58:40:00:95:ef:bd:fb:
43:42:8a:19:b5:4f:16:5f:c2:9c:df:0e:ea:01:b4:e2:30:45:
55:09:1b:32:68:d8:5a:2d:49:f2:dc:18:0f:fd:64:d5:e3:0a:
4e:2a:36:96:fa:e0:ec:8d:59:8b:df:b7:f5:0b:0b:74:8b:67:
7b:8c:49:48:cc:a3:3b:f2:00:8e:bf:d4:75:47:5c:00:29:75:
f1:cf:59:21:b7:13:a9:37:d4:4a:76:69:a5:14:33:79:32:71:
14:da:88:8c:a5:75:66:11:a7:46:38:f8:2a:76:5e:25:a9:e4:
43:b8:98:01:e8:7d:fa:7f:8f:17:02:41:ab:b4:b1:d9:1f:b7:
42:68:fc:c2:9d:53:b6:88:fa:fb:07:8b:ad:7c:3e:17:d8:7f:
15:6c:96:a6:7f:69:ff:f3:f6:b3:f1:8c:f9:8b:5f:a8:2e:bb:
19:11:b9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:03:49 2026 by rpki-client