Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
File: AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json)
Hash identifier: R+7urpNjudqOGyfm7PyUcRt2bL8CcMs4AXADwnTYXp0=
Subject key identifier: C8:B8:92:4E:2B:7C:58:40:33:1F:26:AB:FB:A5:84:6B:43:62:93:96
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial: 019D39408740E55A0C04E8C708A235DEE861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:00:23 +0000
Manifest this update: Sun 29 Mar 2026 11:00:23 +0000
Manifest next update: Mon 30 Mar 2026 11:00:23 +0000
Files and hashes: 1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: XypnnQZqk0u6ljNLYrsBDBTPV+s3rWqNKV4YQUkmCrc=)
2: anrHbhOJ_sDeOGsZqi6XBsId81s.roa (hash: xMq6I1dSb7bxT2SD4A/tmxqXSuNiBJbAzYXnHtz1Ido=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:87:40:e5:5a:0c:04:e8:c7:08:a2:35:de:e8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Validity
Not Before: Mar 29 11:00:23 2026 GMT
Not After : Mar 30 11:00:23 2026 GMT
Subject: CN=c8b8924e2b7c5840331f26abfba5846b43629396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5a:0d:a2:75:e9:7e:1c:8a:79:4b:ed:d6:f3:
0c:66:9f:c8:32:d5:8c:d0:f6:f4:b3:f1:bf:50:2d:
97:d3:dc:1b:32:4b:fd:99:a8:ce:38:29:6f:77:ca:
ec:a2:08:3e:bb:bd:6b:01:11:33:62:02:f4:7f:6d:
e1:41:80:e8:72:e6:21:7d:2f:66:5d:07:ca:23:ac:
89:62:c6:eb:1f:1a:d8:cf:fb:dc:04:c3:3a:64:14:
a4:89:41:00:6d:43:85:d4:3c:a2:2d:b3:f4:73:bf:
e1:c1:0b:91:9e:ee:e9:a8:98:38:67:2a:a4:0c:bf:
70:e1:0f:80:b9:67:b1:63:d7:cf:a0:7d:a5:1f:ac:
0b:e2:c3:42:05:3e:5b:1b:a7:1c:a5:7e:3d:26:09:
b8:74:8f:c9:5d:f5:df:f3:cb:19:08:cf:4c:08:c2:
3f:f4:f7:45:ca:31:c4:e8:49:4e:85:3c:74:08:cc:
27:6c:69:c4:ad:f1:3f:1d:4f:02:e2:c6:da:d1:17:
e1:c4:5a:c4:7b:9d:70:59:f1:86:1b:88:01:8d:2b:
e6:08:60:19:64:30:65:4c:f5:de:a3:77:2a:b9:cf:
3b:36:3f:cd:50:b1:02:cb:09:60:30:0a:7e:41:b0:
0e:48:6a:77:7d:2b:77:03:3e:0d:b0:01:55:0c:65:
97:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B8:92:4E:2B:7C:58:40:33:1F:26:AB:FB:A5:84:6B:43:62:93:96
X509v3 Authority Key Identifier:
keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:f4:32:4e:92:3c:37:3c:5c:5f:87:25:7e:5a:d4:7f:dd:81:
ea:ca:e5:37:d8:90:70:dc:47:18:84:d5:42:43:d7:52:f6:56:
72:98:e1:eb:a5:ed:51:38:93:02:b8:b7:f5:7a:e2:3d:9f:42:
f6:bb:0d:8f:6e:28:bf:35:b9:7c:ac:bc:f6:52:8f:1e:04:1c:
79:d1:12:6f:3c:fa:60:59:99:88:34:4c:04:b1:eb:70:85:4d:
e5:72:af:a8:2a:7d:b9:f5:4d:3e:3e:ee:3c:d9:89:0e:e6:41:
cf:e2:14:c8:5e:62:8c:b3:db:47:66:0f:89:6f:f1:da:a9:a8:
9a:20:72:35:5d:80:ef:8b:26:27:15:75:b2:8d:ac:4c:fa:13:
c7:5c:10:ba:dc:86:d4:7e:3c:c4:3f:10:3b:aa:1f:a7:e1:83:
0d:5d:a9:d9:06:71:46:65:6c:af:a8:6f:48:87:ea:c9:8d:29:
96:0a:a5:5e:22:05:71:ab:03:e3:4e:9e:7b:d9:7a:90:b0:57:
ba:ac:9a:64:a1:3a:cf:20:76:85:8f:45:ac:50:7a:61:b8:c5:
f0:07:41:b3:61:b0:a7:c4:e3:d5:d9:59:f2:5e:15:ab:f2:18:
75:ba:6f:d9:40:a5:25:5d:5b:ae:a3:06:32:5b:cc:2c:d8:3d:
6d:80:e8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:19 2026 by rpki-client