Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
File: AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json)
Hash identifier: Fn/DmCZuKrMhg4Zyh90YFEBEjENV3p9/nTKYFRr3XG0=
Subject key identifier: D2:84:B2:DB:C5:8E:26:87:FA:C9:33:17:B7:94:3E:E2:5E:26:60:CB
Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
Certificate issuer: /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Certificate serial: 01A0024AEF7BF0CCD098D4E66BE4B0863C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
Manifest number: 0AFA
Signing time: Fri 14 Aug 2026 22:01:00 +0000
Manifest this update: Fri 14 Aug 2026 22:01:00 +0000
Manifest next update: Sat 15 Aug 2026 22:01:00 +0000
Files and hashes: 1: 4Vqqb5k4j9r4FD-Q4TgHLzGBoT4.roa (hash: DbSLlNcKnNNqECQ34MGqDl+9nVOY0HjH0tWr/mR4x4I=)
2: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: wTJ/2jTQUktLDp5Aq9q2iMpmmFmq/UMmhXAtOSZEogo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:ef:7b:f0:cc:d0:98:d4:e6:6b:e4:b0:86:3c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Validity
Not Before: Aug 14 22:01:00 2026 GMT
Not After : Aug 15 22:01:00 2026 GMT
Subject: CN=d284b2dbc58e2687fac93317b7943ee25e2660cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:13:27:e5:2e:64:c2:ad:d3:9b:94:e7:d9:b8:
8f:0d:73:ad:e1:aa:3a:fd:a1:13:d6:87:7e:3b:bc:
7e:f6:47:50:6e:fb:c2:f6:da:bd:44:87:34:37:a6:
53:06:18:9f:9c:81:d4:ac:d5:90:6d:e7:5a:b9:27:
a3:b0:98:3f:53:2f:ca:f8:f0:e3:34:f6:49:b5:a6:
b0:0d:0c:ec:5b:70:da:b4:a2:48:a6:77:0b:48:62:
6a:db:ab:cb:86:ed:45:06:ef:58:00:c3:a5:c2:8d:
06:ed:27:c2:b3:8a:5f:b7:44:94:a5:f6:64:2a:20:
24:d5:3e:b5:21:7a:ef:b0:94:a0:e7:15:06:d3:27:
6d:eb:f8:1d:38:6b:6d:cd:7f:92:1c:31:22:a3:70:
1a:5f:bf:79:49:fb:51:22:ff:32:d4:02:bd:ed:59:
9d:bc:86:75:ed:25:7b:a2:8e:ba:83:58:7d:e9:22:
4e:30:a3:94:f6:cf:f7:1c:27:8d:74:4e:96:45:25:
c3:9c:cf:96:94:f6:32:01:dd:63:84:c8:f8:41:65:
cd:f3:91:78:50:d2:01:77:69:c8:fe:96:9d:3e:e0:
20:d4:09:a9:1e:c1:d0:c0:06:63:08:57:68:df:37:
c7:c7:bd:36:95:c1:7d:c2:69:b9:8e:a9:01:c6:2a:
d4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:84:B2:DB:C5:8E:26:87:FA:C9:33:17:B7:94:3E:E2:5E:26:60:CB
X509v3 Authority Key Identifier:
keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:63:58:58:57:d6:51:f1:ae:72:8f:10:a0:99:a4:db:10:92:
5e:0b:d4:16:47:21:0a:8b:a9:d6:e6:a3:e0:82:5d:2d:e0:3e:
2b:82:f0:cf:4f:f8:a2:24:b0:24:52:d3:c1:96:ae:09:1b:90:
47:67:17:15:03:b8:23:95:39:53:fd:9c:3b:70:1a:77:a1:4f:
d5:19:bc:da:18:6d:b5:c6:52:eb:0b:09:6d:ca:1d:e5:68:4e:
14:0f:8f:df:01:39:ae:65:8f:4e:0a:d2:52:fd:d0:56:c1:7b:
a8:ca:4d:95:87:ce:1c:c2:7e:54:53:1b:e8:ab:31:69:e0:c0:
2e:d6:e9:4f:42:fc:69:8f:c7:20:b1:3a:dd:3b:2c:17:b9:51:
7d:98:22:aa:f2:fe:73:b5:9d:19:58:5f:c1:62:14:c8:67:e5:
41:33:56:e5:30:3d:e1:40:a2:08:4a:fb:ed:ed:24:f1:51:b7:
a0:ed:b6:fe:9a:34:9d:62:42:1c:1a:a8:31:85:af:de:1d:93:
62:e9:b5:84:94:df:8e:c7:63:08:5f:ee:a6:f7:0c:5e:30:04:
06:0d:f1:28:ae:1d:d0:2c:01:12:cc:d0:f6:ee:d8:ee:90:4f:
fa:e6:2c:e2:71:f2:76:6c:df:04:dd:9f:16:8b:22:20:25:ed:
ce:2c:af:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSu978MzQmNTma+SwhjwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTRhYjlhOGY0YTIwZTgyOWRkNDU3NWE4OGM4MTI1YzFj
OGE2N2YwHhcNMjYwODE0MjIwMTAwWhcNMjYwODE1MjIwMTAwWjAzMTEwLwYDVQQD
EyhkMjg0YjJkYmM1OGUyNjg3ZmFjOTMzMTdiNzk0M2VlMjVlMjY2MGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hMn5S5kwq3Tm5Tn2biPDXOt4ao6
/aET1od+O7x+9kdQbvvC9tq9RIc0N6ZTBhifnIHUrNWQbedauSejsJg/Uy/K+PDj
NPZJtaawDQzsW3DatKJIpncLSGJq26vLhu1FBu9YAMOlwo0G7SfCs4pft0SUpfZk
KiAk1T61IXrvsJSg5xUG0ydt6/gdOGttzX+SHDEio3AaX795SftRIv8y1AK97Vmd
vIZ17SV7oo66g1h96SJOMKOU9s/3HCeNdE6WRSXDnM+WlPYyAd1jhMj4QWXN85F4
UNIBd2nI/padPuAg1AmpHsHQwAZjCFdo3zfHx702lcF9wmm5jqkBxirUgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKEstvFjiaH+skzF7eUPuJeJmDLMB8GA1UdIwQY
MBaAFAGUq5qPSiDoKd1FdaiMgSXByKZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpTcm1vOUtJT2dwM1VWMXFJeUJKY0hJcG44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xY2ZlNWMtMDU0Ni00NDgyLTkzNWEt
Y2IzODYzNThkMTUxLzEvQVpTcm1vOUtJT2dwM1VWMXFJeUJKY0hJcG44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8xY2ZlNWMtMDU0Ni00NDgyLTkzNWEtY2IzODYzNThkMTUx
LzEvQVpTcm1vOUtJT2dwM1VWMXFJeUJKY0hJcG44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWNYWFfW
UfGuco8QoJmk2xCSXgvUFkchCoup1uaj4IJdLeA+K4Lwz0/4oiSwJFLTwZauCRuQ
R2cXFQO4I5U5U/2cO3Aad6FP1Rm82hhttcZS6wsJbcod5WhOFA+P3wE5rmWPTgrS
Uv3QVsF7qMpNlYfOHMJ+VFMb6KsxaeDALtbpT0L8aY/HILE63TssF7lRfZgiqvL+
c7WdGVhfwWIUyGflQTNW5TA94UCiCEr77e0k8VG3oO22/po0nWJCHBqoMYWv3h2T
Yum1hJTfjsdjCF/upvcMXjAEBg3xKK4d0CwBEszQ9u7Y7pBP+uYs4nHydmzfBN2f
FosiICXtziyv9w==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:25 2026 by rpki-client