Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
File: o75019azdkTAG-1V4NsxRkuYYMY.mft (raw, json)
Hash identifier: NyCYuxmYK2cAC2RmFL0AyRZQPR2U596sYd3ksr8DQPE=
Subject key identifier: 28:54:E7:6B:71:9E:D4:23:89:E4:6A:C7:F4:0D:61:81:0A:EE:E0:24
Authority key identifier: A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6
Certificate issuer: /CN=a3be74d7d6b37644c01bed55e0db31464b9860c6
Certificate serial: 019D9E1B7B4B105652C60EDB7B904443A84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
Manifest number: 0169
Signing time: Sat 18 Apr 2026 01:01:34 +0000
Manifest this update: Sat 18 Apr 2026 01:01:34 +0000
Manifest next update: Sun 19 Apr 2026 01:01:34 +0000
Files and hashes: 1: bo9Ko4HgF0NGY0x7JNh4-GVgDJo.roa (hash: tUVeOTBTPwteXhY4vj03N/tGfiCI5pAsvZ6bGoHFfww=)
2: o75019azdkTAG-1V4NsxRkuYYMY.crl (hash: lack9YjgM8K+RjGQSYfgIl1+rUUq/oo2w+Gugpjamc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1b:7b:4b:10:56:52:c6:0e:db:7b:90:44:43:a8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3be74d7d6b37644c01bed55e0db31464b9860c6
Validity
Not Before: Apr 18 01:01:34 2026 GMT
Not After : Apr 19 01:01:34 2026 GMT
Subject: CN=2854e76b719ed42389e46ac7f40d61810aeee024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:52:89:41:fe:a6:db:81:45:63:77:d7:88:
c2:23:15:a7:fa:c7:28:ce:24:1d:99:d2:89:c0:f1:
b9:51:66:c2:68:36:aa:fe:e3:e0:8e:c8:70:1b:e3:
14:7a:92:ca:cd:bf:c9:1e:b3:f1:c3:53:25:7b:a5:
1a:5b:2e:50:9f:a7:10:f2:ea:1a:b1:2d:bc:4c:69:
b5:05:56:7c:83:73:c4:ea:05:b0:11:2b:dc:c1:49:
3d:ce:25:ea:c1:0a:52:1c:61:d5:d4:67:5d:a2:0a:
23:17:89:3a:7e:8f:b8:d6:cf:99:1c:c8:db:28:3b:
10:fc:c5:e9:d5:30:81:f8:32:60:00:2d:c4:66:35:
19:33:fe:06:8c:38:95:58:d7:0c:47:4d:9d:66:87:
95:19:e8:93:5e:66:f1:1b:39:52:e5:75:d9:66:bf:
18:d1:ef:5b:cd:f7:f6:11:6d:aa:2f:0a:dc:9c:54:
03:b9:ab:54:c1:60:15:64:81:7d:b6:7d:2c:67:13:
51:c3:2f:c2:27:be:a6:9b:c3:f0:7b:dd:b7:d0:67:
ef:c0:eb:0f:06:d6:2f:01:74:dc:3f:94:ba:ac:58:
07:25:a8:e1:f0:22:f9:30:13:26:df:fe:81:23:da:
c2:cc:0b:4b:4a:a7:3f:fe:29:42:39:ce:f5:28:7b:
e8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:54:E7:6B:71:9E:D4:23:89:E4:6A:C7:F4:0D:61:81:0A:EE:E0:24
X509v3 Authority Key Identifier:
keyid:A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:d4:0a:cf:06:79:60:05:5c:8d:ef:a0:a8:b7:8b:87:1a:bf:
c2:7f:f5:6f:d5:36:2d:92:22:35:3d:ac:b0:0c:43:4e:b0:ff:
69:c7:b4:03:3f:c7:a4:78:1c:db:64:9e:c7:1c:af:33:41:2d:
bf:6e:44:0d:b9:56:85:ee:ff:fd:99:15:69:c1:79:02:7b:79:
e8:88:b6:63:ea:fa:7c:2f:a0:aa:83:a4:f7:8b:ff:02:d9:3c:
77:a0:83:2d:04:aa:b0:e5:6a:2e:31:2b:97:af:47:66:34:e8:
c4:be:63:ec:1a:7a:85:69:d8:03:10:39:ec:e1:e4:08:63:fa:
4d:b9:60:51:01:3f:51:ee:37:1f:04:c2:3d:e9:d6:93:8f:04:
20:b9:06:1a:30:5e:a6:7b:f8:d0:6e:10:c2:a6:3f:84:f4:df:
c5:03:05:e6:ba:ea:cc:c5:e3:eb:b2:c6:12:a6:73:3c:31:26:
10:a9:4a:b0:48:88:f1:21:dd:d8:d0:3f:d3:90:9d:5a:50:e3:
79:78:58:bf:0b:70:49:fd:9b:31:8f:dd:03:14:ce:4a:d6:75:
a7:67:d6:5d:96:8c:47:fc:b2:9e:5c:c6:ef:d5:26:34:77:15:
c0:f9:b4:ad:a1:b9:12:15:83:9d:71:d9:f7:45:6c:b5:9e:4a:
61:7d:6c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:38:13 2026 by rpki-client