Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
File: o75019azdkTAG-1V4NsxRkuYYMY.mft (raw, json)
Hash identifier: WrPiI/+utZ3I/yucROa/W1Nq9u8OOh6xdSqDR068Anw=
Subject key identifier: 03:2F:47:AB:A2:F7:AF:AD:CA:75:7A:37:4E:E8:94:E0:FD:33:B5:A3
Authority key identifier: A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6
Certificate issuer: /CN=a3be74d7d6b37644c01bed55e0db31464b9860c6
Certificate serial: 019EC3A4E28C7A4EE2456C907EDAF58DF1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
Manifest number: 0201
Signing time: Sun 14 Jun 2026 01:00:23 +0000
Manifest this update: Sun 14 Jun 2026 01:00:23 +0000
Manifest next update: Mon 15 Jun 2026 01:00:23 +0000
Files and hashes: 1: bo9Ko4HgF0NGY0x7JNh4-GVgDJo.roa (hash: tUVeOTBTPwteXhY4vj03N/tGfiCI5pAsvZ6bGoHFfww=)
2: o75019azdkTAG-1V4NsxRkuYYMY.crl (hash: 9uedxjYBbk7iXIl7NmM35Phiwv3690b6j+82YDVLi6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a4:e2:8c:7a:4e:e2:45:6c:90:7e:da:f5:8d:f1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3be74d7d6b37644c01bed55e0db31464b9860c6
Validity
Not Before: Jun 14 01:00:23 2026 GMT
Not After : Jun 15 01:00:23 2026 GMT
Subject: CN=032f47aba2f7afadca757a374ee894e0fd33b5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:4d:5d:2e:c1:34:bd:38:91:82:aa:30:9f:
cc:4b:87:64:db:31:6b:23:db:2a:ad:8b:89:08:ac:
79:29:49:92:4b:d4:dc:90:9c:fc:e3:01:04:f1:3b:
55:84:ff:2f:01:d1:d2:5d:e2:ff:a2:4d:7e:14:b2:
11:78:1b:b5:e6:f5:df:61:9a:e8:9f:65:7d:d5:12:
68:98:6d:8c:e0:f0:59:c9:60:61:35:7f:b0:d0:e0:
25:e3:49:79:83:6b:fd:0c:f4:5c:37:b7:70:6c:a4:
5c:c1:45:ec:f3:fa:79:d0:54:c4:e5:2a:4e:02:3f:
4e:18:75:b3:9a:22:84:79:ea:a5:98:86:c2:19:68:
40:03:58:33:55:bf:e2:f9:ae:60:4d:99:04:6f:ed:
4f:80:e1:46:01:19:8a:8b:02:de:24:0e:63:8f:00:
b3:b1:76:2e:40:30:a7:de:6a:68:cc:05:70:2a:bd:
c2:0a:b5:10:bd:44:55:42:cf:0a:18:0a:cf:92:1e:
34:19:3f:ae:2e:76:e4:40:b5:ee:c1:9d:36:eb:98:
57:d6:ea:13:3e:c4:d9:fd:25:13:52:e9:f7:ae:c0:
f2:59:7c:47:ae:bf:ec:82:af:08:48:ee:0e:9f:4d:
04:eb:c5:b8:01:30:2b:c7:84:79:7e:ed:2c:7f:5b:
00:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2F:47:AB:A2:F7:AF:AD:CA:75:7A:37:4E:E8:94:E0:FD:33:B5:A3
X509v3 Authority Key Identifier:
keyid:A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:24:01:36:bd:bd:1a:f7:2e:f1:35:c2:23:59:a3:b4:32:62:
d3:79:b8:38:3b:cc:ae:23:8d:f1:e6:c1:24:40:b5:9a:9b:f4:
83:78:18:fc:db:98:c2:15:52:02:05:42:3b:29:ba:4b:75:e5:
51:8d:55:a3:02:af:39:97:23:c9:8a:ef:c5:78:8d:20:4a:e6:
0c:01:30:25:b9:09:ae:22:fd:eb:82:2d:73:67:4e:98:40:83:
22:18:02:65:67:a2:49:a0:04:d5:2c:c8:55:39:44:81:c8:17:
ca:fd:81:71:88:9a:5b:16:04:16:e4:1b:c3:ad:53:1f:7c:2b:
e9:92:7f:0d:9a:58:87:2d:26:d2:55:1e:02:2b:4f:9e:28:23:
cf:be:21:35:c1:70:ff:7b:35:ec:fa:93:58:47:80:7e:64:e4:
69:cb:12:2c:e4:f9:0a:f7:dd:eb:10:d9:83:e9:0a:d0:39:42:
f9:e2:a6:17:e2:d6:07:f6:b9:e7:76:42:d9:db:48:a6:cf:8a:
f2:e2:51:02:70:ab:00:82:be:e5:5b:e3:a2:8b:3e:f9:b2:48:
04:99:ff:57:7b:32:b6:84:24:16:36:4f:59:a9:f0:1b:6d:b2:
8d:41:ef:63:e0:70:da:18:df:93:b4:6b:d9:dc:cb:22:24:ad:
ec:8e:00:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:40 2026 by rpki-client