Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
File: AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json)
Hash identifier: a16Q2sxRWC4nGGyc6wZJUGmOszZGxcA7lFdgW5djW4E=
Subject key identifier: 3F:79:80:B9:07:48:19:A6:A6:EE:6F:61:66:A0:3D:0F:08:2D:65:29
Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
Certificate issuer: /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Certificate serial: 019F189DE785DC49FA22A748E4B684E774A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
Manifest number: 0A81
Signing time: Tue 30 Jun 2026 13:00:29 +0000
Manifest this update: Tue 30 Jun 2026 13:00:29 +0000
Manifest next update: Wed 01 Jul 2026 13:00:29 +0000
Files and hashes: 1: 4Vqqb5k4j9r4FD-Q4TgHLzGBoT4.roa (hash: DbSLlNcKnNNqECQ34MGqDl+9nVOY0HjH0tWr/mR4x4I=)
2: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: Hj94EJMeu1jredcgAqshuoqy2jENvwwp/jf00vaobV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9d:e7:85:dc:49:fa:22:a7:48:e4:b6:84:e7:74:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Validity
Not Before: Jun 30 13:00:29 2026 GMT
Not After : Jul 1 13:00:29 2026 GMT
Subject: CN=3f7980b9074819a6a6ee6f6166a03d0f082d6529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:b2:50:fc:ca:46:4a:4f:2d:75:5d:09:71:
ab:e7:ef:a6:0e:22:f2:cc:d4:b5:df:aa:c8:cf:90:
95:ed:98:8e:9a:41:ad:92:f7:0a:c8:16:64:d2:c4:
a4:19:9e:63:af:d9:4b:84:f3:16:bc:aa:e7:2a:e6:
bd:57:69:b6:17:3a:6e:06:c3:02:1d:f6:1a:01:b4:
8d:50:96:e8:29:77:61:75:20:a8:bf:34:da:8e:6d:
89:9c:72:b3:8d:eb:50:10:32:86:fe:5d:d8:d6:65:
6c:dd:24:71:19:94:63:60:61:5e:b2:54:d0:3f:f6:
6f:fc:ef:b1:e9:5d:71:ab:a1:f7:dd:60:70:c3:3c:
62:6f:fe:25:92:84:5f:19:bc:a6:e5:93:28:a0:f6:
69:63:52:31:59:0c:7e:3c:c6:a6:38:5d:96:c2:30:
67:54:32:78:23:0f:a5:91:12:20:e5:ab:c7:f4:dc:
3c:95:95:2b:f0:8b:a7:b8:9c:04:36:7d:2b:58:75:
ff:71:42:72:a1:b6:dd:63:f4:0e:e6:24:be:3b:b9:
cd:e6:8f:24:ec:d5:fe:a3:25:1f:2a:8b:4c:50:40:
ca:98:b9:47:06:03:99:5d:a2:49:cb:b3:44:af:2e:
0e:f6:23:16:56:c0:a2:de:fc:54:fc:80:eb:48:1f:
c8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:79:80:B9:07:48:19:A6:A6:EE:6F:61:66:A0:3D:0F:08:2D:65:29
X509v3 Authority Key Identifier:
keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9e:be:93:25:21:eb:2f:6b:be:3d:ab:1f:78:e0:5e:f7:c0:
90:d9:54:88:7d:7d:36:d4:9e:02:65:9f:93:3f:ac:b6:3c:99:
98:76:a3:11:20:e8:da:74:e6:b6:ed:36:55:b7:3e:3c:92:ae:
e8:85:ed:af:5c:f9:e9:b4:c3:82:08:22:67:97:54:2c:15:0d:
23:39:b7:ed:e5:5e:a4:44:f8:3a:2b:11:6e:0f:39:c1:6c:22:
4f:86:fe:47:39:e5:03:c2:a2:1d:98:fa:a1:ed:9e:9e:b3:51:
61:46:64:42:4a:31:01:c9:be:98:01:b0:d4:b4:23:da:a2:20:
f8:ec:65:4e:a6:19:a8:a7:a4:2e:46:46:a6:91:3e:bf:06:0c:
f4:c5:19:ee:20:8c:c7:ce:bd:24:4b:9a:e5:d1:c8:ff:e9:74:
ef:f4:e4:36:f7:e7:af:88:8e:3e:28:3c:f7:70:6b:76:74:d0:
8f:82:f0:7a:99:7b:ab:9d:2d:ea:c6:36:0d:81:4f:a2:e2:7c:
a8:d3:5a:c0:ec:1e:85:8d:65:46:bb:b4:0f:d2:3b:1e:b6:56:
a7:a9:27:9f:c0:a5:c3:5b:60:f1:ea:f4:4c:5d:0e:ba:d1:05:
46:95:22:77:74:19:0a:ac:9a:19:ae:7c:a9:4d:12:d2:e8:1c:
58:22:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:38:08 2026 by rpki-client