Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
File: o75019azdkTAG-1V4NsxRkuYYMY.mft (raw, json)
Hash identifier: EH/CYDaXWHwbn4K4mw0/UuvumMG1KSYlNvtHTFNnOkU=
Subject key identifier: 25:DF:66:96:E5:4F:B8:B2:B1:91:66:70:64:D6:6A:E9:E6:5D:C1:47
Authority key identifier: A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6
Certificate issuer: /CN=a3be74d7d6b37644c01bed55e0db31464b9860c6
Certificate serial: 019CAD22A9EA1641BD92A74632E08A532442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
Manifest number: EC
Signing time: Mon 02 Mar 2026 06:00:55 +0000
Manifest this update: Mon 02 Mar 2026 06:00:55 +0000
Manifest next update: Tue 03 Mar 2026 06:00:55 +0000
Files and hashes: 1: GMhL62C15YSxIRu0_i2zJp1sjEM.roa (hash: cXQPeYbdh2/Yw1nnCQtJ0X3/vBmLAl/1YbCv+gD2CRA=)
2: o75019azdkTAG-1V4NsxRkuYYMY.crl (hash: 555ubkStzAnIi/3uo0382rD5kfoE4qI9qQ+IlUekLQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:a9:ea:16:41:bd:92:a7:46:32:e0:8a:53:24:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3be74d7d6b37644c01bed55e0db31464b9860c6
Validity
Not Before: Mar 2 06:00:55 2026 GMT
Not After : Mar 3 06:00:55 2026 GMT
Subject: CN=25df6696e54fb8b2b191667064d66ae9e65dc147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:19:bd:d7:3b:8c:05:98:e8:c2:b9:b3:1e:
d6:dc:ba:16:63:5a:0d:7d:bd:b7:8d:43:6b:f0:3a:
e9:4e:eb:39:1e:7f:0a:72:86:8e:e1:d9:5f:12:f1:
3d:49:c0:79:5b:43:62:e5:e3:18:a1:64:6b:0c:7c:
fb:b7:55:e2:23:31:3e:68:0f:98:4d:82:90:a5:31:
20:86:57:5c:23:b0:de:87:77:c6:f9:10:19:09:9e:
3d:2c:19:ab:24:c0:29:a5:d4:84:de:df:28:80:ad:
be:23:5a:1d:6e:dd:c6:78:4b:a8:a3:b8:70:ac:f1:
da:8a:e4:31:2e:ce:d1:13:ae:bb:93:3f:4e:2e:83:
d6:f9:c4:54:20:d2:93:8a:75:aa:81:96:3f:71:30:
7a:9d:7a:3a:84:68:33:87:90:b0:f4:20:87:cf:22:
f8:bf:0c:1d:f0:8b:9c:ea:6a:d3:3f:7f:1b:14:09:
9c:da:1f:b5:f3:f7:da:5d:05:db:bf:d8:cb:cd:4d:
91:a8:a6:9e:e9:27:e8:3b:2e:3d:aa:1a:a2:39:40:
54:64:85:ff:30:23:d7:f1:57:12:2a:0d:8a:67:3e:
12:5b:91:03:17:0f:02:fa:e9:f4:cc:83:42:c7:fd:
cc:46:00:0b:32:37:fc:a6:6c:62:30:30:77:df:ce:
36:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DF:66:96:E5:4F:B8:B2:B1:91:66:70:64:D6:6A:E9:E6:5D:C1:47
X509v3 Authority Key Identifier:
keyid:A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:75:10:70:06:77:15:f7:a8:81:6d:d7:e1:ed:4d:e0:7b:a1:
91:8f:e6:b6:4f:50:19:4e:fc:c5:99:ba:cd:8c:84:34:a5:db:
f1:3b:74:08:26:b6:9a:ce:12:20:78:15:a6:0d:7a:ba:0b:8d:
bc:6a:bf:2c:f2:2f:3d:cf:17:a6:7d:3d:8d:d3:10:6a:7c:f0:
62:b9:b1:37:c2:3b:54:fe:d3:2b:63:5b:74:e6:b7:f3:3d:4c:
a0:86:fb:3e:58:04:b0:b0:ac:f2:86:17:5f:fb:0f:d1:dd:4b:
19:89:8d:77:73:a1:31:e2:25:97:20:c1:f7:d1:77:9c:05:be:
5e:e3:d7:74:58:52:54:ca:60:a3:9a:ee:a3:a2:0c:f1:b6:32:
fd:5e:42:fc:4d:d6:8a:f2:3b:a0:4a:a9:24:3e:91:db:d2:8f:
44:30:ed:37:df:f4:db:86:b5:a8:46:17:bb:16:ac:6b:4c:c3:
59:db:ce:4a:b2:ce:75:4c:70:67:af:37:a0:29:f5:86:18:c9:
d5:2a:7a:bf:9c:c7:24:0e:d3:e6:7e:80:f1:39:bf:f3:7f:68:
07:28:89:84:cf:3b:b9:12:8b:82:31:3f:16:b4:47:94:2c:6b:
08:87:8e:42:4e:63:41:91:96:ac:c3:07:a1:bf:34:09:cb:7e:
06:c5:bf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:11 2026 by rpki-client