Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
File: AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json)
Hash identifier: y6dewSJpzn9EECfnwk9gyFGdf+Ye0B4qHQjKv7wSha0=
Subject key identifier: 14:3F:85:3B:F1:6F:6B:16:82:02:12:09:94:3A:94:03:C6:7B:39:39
Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
Certificate issuer: /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Certificate serial: 019D37C00A651CCE00077D55D58FAADA3B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
Manifest number: 0988
Signing time: Sun 29 Mar 2026 04:00:25 +0000
Manifest this update: Sun 29 Mar 2026 04:00:25 +0000
Manifest next update: Mon 30 Mar 2026 04:00:25 +0000
Files and hashes: 1: 4Vqqb5k4j9r4FD-Q4TgHLzGBoT4.roa (hash: DbSLlNcKnNNqECQ34MGqDl+9nVOY0HjH0tWr/mR4x4I=)
2: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: 3dd8LEBv0LJvqJKOu4uKonllTCoXdYgljLqJsIhzRNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:0a:65:1c:ce:00:07:7d:55:d5:8f:aa:da:3b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Validity
Not Before: Mar 29 04:00:25 2026 GMT
Not After : Mar 30 04:00:25 2026 GMT
Subject: CN=143f853bf16f6b1682021209943a9403c67b3939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:1f:8a:1a:22:fd:1d:d3:03:88:9e:37:e9:
29:a6:c2:51:55:eb:8f:a1:92:67:af:6a:31:f5:0f:
00:72:1e:66:9b:70:7b:2b:94:53:82:e7:38:ac:b9:
60:3a:a8:3c:99:39:57:8a:0c:20:26:d1:c9:c8:66:
e0:70:91:a0:20:ac:4c:b9:0b:02:69:e8:e4:1f:53:
81:74:0d:7c:93:1c:1d:3f:73:32:cc:c0:ee:a0:7a:
5e:57:7d:58:7b:58:02:a8:99:81:2d:00:dc:c2:01:
46:e0:e3:bc:f4:86:15:16:02:f1:8c:fd:4b:b7:d7:
a6:e6:79:39:84:59:fd:0c:bd:3c:2b:bb:d7:e0:c5:
4b:ae:fb:ef:69:b1:f4:2c:40:43:38:f2:ae:1c:7f:
3e:c9:81:41:21:23:42:1c:21:00:bd:27:70:63:7d:
e1:15:c1:5d:da:48:de:31:2a:a5:c1:c9:bb:76:17:
2e:7c:43:56:5b:be:ee:30:27:0b:31:d8:fa:5c:d7:
ed:87:82:38:bb:25:4e:ab:e9:3c:3f:23:b3:96:67:
3a:70:e4:34:77:ae:d2:45:7b:d1:11:90:60:07:82:
bb:41:9a:27:6a:db:be:b9:11:19:f4:64:8b:50:f9:
61:34:f2:f2:2d:fe:72:d6:d5:1a:71:5a:68:62:d7:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3F:85:3B:F1:6F:6B:16:82:02:12:09:94:3A:94:03:C6:7B:39:39
X509v3 Authority Key Identifier:
keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ce:70:5d:8b:91:17:69:08:62:91:bc:06:0b:cd:e3:9c:3c:
9e:a4:03:0e:ba:44:dc:42:91:09:19:8f:33:27:ae:c3:a4:ad:
f6:5b:0a:a0:f7:c3:76:f2:5a:85:c3:e1:3f:7a:09:08:fb:3e:
0c:54:20:6f:af:c9:53:95:84:7e:76:56:e8:71:da:32:fd:52:
ec:09:9a:db:08:9d:d7:b5:67:55:76:40:05:2b:3a:5e:53:36:
c7:58:45:f6:ec:7e:bb:93:7f:c3:96:ab:17:fd:36:d3:28:36:
2c:2f:8f:ed:f1:2b:24:d9:6d:b5:1f:9b:8c:ac:18:a8:1c:5c:
df:dc:48:3c:13:ca:65:60:ec:6f:da:53:48:44:fa:3e:c6:7a:
a3:00:4f:12:b8:69:f8:b7:13:40:26:5c:48:12:11:e0:54:f6:
8b:26:f1:a1:ad:d8:67:17:88:93:46:00:db:7a:cb:8f:9d:5b:
7a:cf:54:db:7f:31:a8:dd:ad:4d:6b:66:6f:7a:a1:2c:09:b6:
70:2a:50:78:97:8e:78:80:ed:8a:3d:94:7a:43:61:4b:7c:d2:
8b:51:50:64:80:5e:12:6f:c4:23:50:e0:64:f4:f7:a8:60:7e:
09:75:02:9c:6a:6e:24:cd:cf:e8:eb:25:b7:62:1f:05:b8:fd:
3c:06:22:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:05 2026 by rpki-client