Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
File: o75019azdkTAG-1V4NsxRkuYYMY.mft (raw, json)
Hash identifier: 1kZ0uWbetABIPy+JrpJB1rNjX1g4G0uZxSxILhON+1o=
Subject key identifier: 19:23:04:C1:40:85:CC:7F:9F:78:8E:2F:82:D6:99:70:DC:E1:DC:A8
Authority key identifier: A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6
Certificate issuer: /CN=a3be74d7d6b37644c01bed55e0db31464b9860c6
Certificate serial: 019CECDD889A33CCFB7D4BC6D2B72EF318D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
Manifest number: 010D
Signing time: Sat 14 Mar 2026 15:01:07 +0000
Manifest this update: Sat 14 Mar 2026 15:01:07 +0000
Manifest next update: Sun 15 Mar 2026 15:01:07 +0000
Files and hashes: 1: GMhL62C15YSxIRu0_i2zJp1sjEM.roa (hash: cXQPeYbdh2/Yw1nnCQtJ0X3/vBmLAl/1YbCv+gD2CRA=)
2: o75019azdkTAG-1V4NsxRkuYYMY.crl (hash: wb4YFCKB0vB8XqVhmlhoSZrhcz3jw9r0+tVqx56rmRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:dd:88:9a:33:cc:fb:7d:4b:c6:d2:b7:2e:f3:18:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3be74d7d6b37644c01bed55e0db31464b9860c6
Validity
Not Before: Mar 14 15:01:07 2026 GMT
Not After : Mar 15 15:01:07 2026 GMT
Subject: CN=192304c14085cc7f9f788e2f82d69970dce1dca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:a5:05:fe:10:21:de:2c:f7:c6:10:70:e1:
bb:3c:92:63:43:0c:21:76:5f:d8:c0:85:73:85:a7:
12:39:ee:8a:6a:3b:67:50:ad:e4:13:0f:78:59:b0:
ed:ac:c1:bf:40:83:5a:45:a2:bf:c4:ef:5e:5a:0a:
82:3c:7b:cc:46:54:6a:3a:8c:29:d5:fb:31:69:cb:
f0:c8:bf:82:00:94:82:e6:4c:dc:12:0e:2a:fd:3f:
99:4d:5b:64:58:cc:e2:ee:ae:9f:9e:c1:7b:32:f2:
af:cd:dc:9d:50:57:95:7b:03:c6:56:05:72:04:da:
3f:37:df:4a:cf:00:7e:ae:e7:9d:d6:10:95:be:35:
12:78:f8:92:08:fc:70:62:fd:5e:83:97:80:71:e2:
61:37:21:89:5b:81:72:57:c1:ae:36:ed:13:66:e5:
b2:ba:ba:0f:04:01:ec:98:8d:92:35:25:ae:e4:e2:
e5:6b:59:23:75:ab:52:2b:9a:16:1f:7c:03:8c:c7:
aa:6a:cf:b7:6a:f9:ac:19:13:b8:32:45:1f:c9:9d:
40:87:48:4d:4a:b6:fa:52:f5:f9:61:9b:3c:9e:56:
fc:b7:56:08:8b:3d:c8:c2:e9:7f:45:f6:90:19:d2:
0a:f5:90:34:6d:57:29:0c:4e:ab:f6:01:fc:ff:ff:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:23:04:C1:40:85:CC:7F:9F:78:8E:2F:82:D6:99:70:DC:E1:DC:A8
X509v3 Authority Key Identifier:
keyid:A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a4:5c:26:24:56:d7:3d:70:3b:14:16:be:10:15:03:f9:04:
de:ff:dd:11:43:99:46:2c:8e:df:ce:d4:f8:3e:81:31:c5:ed:
a9:fc:bf:ea:04:67:81:03:86:ca:dd:ed:a2:a5:50:16:2f:d1:
ba:f2:70:11:9c:c7:23:82:cf:77:83:c9:69:e7:9a:ef:f1:72:
e4:8c:b1:0f:e6:dc:7d:2f:7a:9a:72:67:b5:a2:99:2b:e8:ea:
ec:98:5f:d2:17:26:a2:b4:64:43:b4:71:bf:23:99:85:de:98:
b4:6c:70:95:e9:21:04:10:f4:59:16:2d:8a:8f:33:c5:8b:97:
67:bc:8d:13:9d:88:8a:2d:2f:55:07:ac:34:1e:f9:9e:8a:47:
27:4d:be:de:fe:13:91:48:86:3e:c8:fa:a4:6e:8f:3d:60:dd:
67:c5:46:3d:ad:4f:61:06:3d:1d:44:d3:1c:2d:68:93:a9:9d:
1f:68:6f:72:a5:24:24:82:41:60:d2:07:68:54:4d:fc:03:56:
cd:2c:ad:c7:f7:fa:0d:57:d1:b6:ad:5e:60:16:c1:91:8f:9d:
4a:f5:1d:b1:2c:bf:54:7e:25:41:08:02:3d:df:be:e4:d2:78:
b7:f0:18:08:13:7c:14:92:48:8e:d4:70:ec:45:45:c7:a8:db:
a8:80:8d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 21:56:52 2026 by rpki-client