Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
File: AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json)
Hash identifier: ZxYdfWUJbgyx94ZMz59D2g6uvZRwrreocS3HAeOuDkE=
Subject key identifier: D6:57:C7:05:4B:66:CE:95:8E:8C:9A:2F:2B:0A:D7:39:80:6B:C7:96
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial: 019D99CFC992440B2652F55BD35862F0A340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 05:00:24 +0000
Manifest this update: Fri 17 Apr 2026 05:00:24 +0000
Manifest next update: Sat 18 Apr 2026 05:00:24 +0000
Files and hashes: 1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: W12c7z/ryMI+nC13nskYAbHJE9Gh3S2R9SEczn7cSvw=)
2: anrHbhOJ_sDeOGsZqi6XBsId81s.roa (hash: xMq6I1dSb7bxT2SD4A/tmxqXSuNiBJbAzYXnHtz1Ido=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:c9:92:44:0b:26:52:f5:5b:d3:58:62:f0:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Validity
Not Before: Apr 17 05:00:24 2026 GMT
Not After : Apr 18 05:00:24 2026 GMT
Subject: CN=d657c7054b66ce958e8c9a2f2b0ad739806bc796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:66:4b:88:d6:a3:63:02:93:f0:d4:52:19:
4f:27:ae:4e:66:d6:08:18:ec:d5:15:3f:98:9e:fa:
16:91:0c:9c:e4:67:48:12:44:e8:a0:a9:de:b6:0f:
18:db:f8:96:62:99:27:4b:70:68:85:4a:af:7c:7e:
b6:50:c8:3c:b6:9e:77:15:4f:89:0c:2a:ac:0b:c6:
ee:58:5d:2e:4f:6c:44:4c:a3:0c:b8:cf:36:ae:ac:
96:4b:13:e9:41:2d:55:60:10:52:c5:d1:09:94:b0:
d4:4d:0c:39:39:3a:75:27:8b:e5:58:fb:c3:2b:e9:
ec:05:dd:69:1c:76:12:0f:fe:0a:43:8f:27:ef:b8:
36:7b:9a:47:f1:e6:98:a6:ac:1d:40:21:5f:55:26:
f9:47:84:c6:6f:99:c6:14:89:e7:6d:73:2d:e5:2f:
cf:30:91:62:42:01:9f:fe:e7:8c:6c:85:56:cd:fb:
8f:70:15:b7:18:6c:d0:f9:e7:8b:24:d2:5f:82:b2:
04:50:9f:ab:f7:67:2f:26:d7:fd:e2:4b:2e:53:d4:
d5:82:5b:50:a8:5d:1b:07:48:d5:af:cc:f9:e8:8d:
87:4f:79:4a:a6:80:8d:24:83:c7:bb:11:f6:29:1a:
05:45:46:79:2f:fd:c1:03:bb:9d:8d:69:5b:bf:4e:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:57:C7:05:4B:66:CE:95:8E:8C:9A:2F:2B:0A:D7:39:80:6B:C7:96
X509v3 Authority Key Identifier:
keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:73:d3:ca:de:58:d3:02:d6:94:50:db:f0:bf:50:ea:4c:25:
b1:36:d3:0b:1e:d3:8a:ca:a3:ff:66:d5:0d:e4:ec:04:58:4a:
bf:64:7d:82:9e:d6:c1:e8:b6:3c:5c:36:60:bc:41:83:2d:de:
3d:ee:26:ff:9f:e3:2d:07:8b:aa:40:1d:ed:ce:18:6f:cb:43:
53:2d:5d:ab:f8:f9:95:9a:7d:4e:45:fc:21:46:03:9a:b8:24:
5f:21:b5:33:9c:cf:ef:74:f5:8b:e7:07:53:c0:d1:cd:2c:4f:
ce:24:0a:b0:63:64:b3:0d:74:66:45:ee:83:b4:ee:8f:53:56:
1e:00:68:d3:a1:c6:5e:81:20:75:37:54:97:f2:77:47:a0:49:
96:20:2c:67:4c:92:63:22:d0:76:83:2b:f5:57:d1:3f:35:2a:
3a:b0:31:64:b5:e2:38:03:5c:ac:35:4a:55:de:30:9d:d3:d5:
92:24:95:33:1e:11:3e:44:bb:5b:48:bd:9b:9a:df:26:8d:29:
ec:de:62:8e:80:45:6b:00:3c:4b:af:cb:9b:ed:3b:94:30:c0:
b0:ba:d7:03:f5:c3:52:2b:2b:f7:66:24:0b:43:3b:40:67:32:
db:7d:f2:c0:72:cb:27:77:d0:d6:ce:35:93:41:b8:21:e9:3e:
fc:47:c8:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz8mSRAsmUvVb01hi8KNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTliZmJiMzMxZjI3MDkzMmVmM2Y4MmYwM2FkZDBjMGIy
ZjE1NzIwHhcNMjYwNDE3MDUwMDI0WhcNMjYwNDE4MDUwMDI0WjAzMTEwLwYDVQQD
EyhkNjU3YzcwNTRiNjZjZTk1OGU4YzlhMmYyYjBhZDczOTgwNmJjNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9VmS4jWo2MCk/DUUhlPJ65OZtYI
GOzVFT+YnvoWkQyc5GdIEkTooKnetg8Y2/iWYpknS3BohUqvfH62UMg8tp53FU+J
DCqsC8buWF0uT2xETKMMuM82rqyWSxPpQS1VYBBSxdEJlLDUTQw5OTp1J4vlWPvD
K+nsBd1pHHYSD/4KQ48n77g2e5pH8eaYpqwdQCFfVSb5R4TGb5nGFInnbXMt5S/P
MJFiQgGf/ueMbIVWzfuPcBW3GGzQ+eeLJNJfgrIEUJ+r92cvJtf94ksuU9TVgltQ
qF0bB0jVr8z56I2HT3lKpoCNJIPHuxH2KRoFRUZ5L/3BA7udjWlbv05ukQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZXxwVLZs6VjoyaLysK1zmAa8eWMB8GA1UdIwQY
MBaAFAGZv7szHycJMu8/gvA63QwLLxVyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYt
Yzc1NzFlZTFkOTliLzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYtYzc1NzFlZTFkOTli
LzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQnPTyt5Y
0wLWlFDb8L9Q6kwlsTbTCx7Tisqj/2bVDeTsBFhKv2R9gp7Wwei2PFw2YLxBgy3e
Pe4m/5/jLQeLqkAd7c4Yb8tDUy1dq/j5lZp9TkX8IUYDmrgkXyG1M5zP73T1i+cH
U8DRzSxPziQKsGNksw10ZkXug7Tuj1NWHgBo06HGXoEgdTdUl/J3R6BJliAsZ0yS
YyLQdoMr9VfRPzUqOrAxZLXiOANcrDVKVd4wndPVkiSVMx4RPkS7W0i9m5rfJo0p
7N5ijoBFawA8S6/Lm+07lDDAsLrXA/XDUisr92YkC0M7QGcy233ywHLLJ3fQ1s41
k0G4Iek+/EfIaQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:50 2026 by rpki-client