Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
File: AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json)
Hash identifier: nUlpQmKGJ2lFqnqmpbOX1TzaQr3NewDO2sjKfBzMq/4=
Subject key identifier: 13:83:F8:B2:3D:52:55:23:1D:02:BF:D0:79:3E:3B:A2:EF:B6:B6:CB
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial: 01A1DEDE8DCFC19A2DEF2E9A07A99BA1D741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 11:01:29 +0000
Manifest this update: Sun 15 Nov 2026 11:01:29 +0000
Manifest next update: Mon 16 Nov 2026 11:01:29 +0000
Files and hashes: 1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: 17hNE4joA1icVEQUeQLTMFX0Hnbey7r+RZPPZX1eZPo=)
2: anrHbhOJ_sDeOGsZqi6XBsId81s.roa (hash: xMq6I1dSb7bxT2SD4A/tmxqXSuNiBJbAzYXnHtz1Ido=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:8d:cf:c1:9a:2d:ef:2e:9a:07:a9:9b:a1:d7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Validity
Not Before: Nov 15 11:01:29 2026 GMT
Not After : Nov 16 11:01:29 2026 GMT
Subject: CN=1383f8b23d5255231d02bfd0793e3ba2efb6b6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:27:23:b9:03:a5:59:a1:d8:ee:0b:32:fd:
52:ff:7a:1f:75:ea:98:d0:bb:c5:b8:80:fd:71:0a:
9e:ac:42:ad:89:64:b1:c3:be:7b:f8:d3:3c:1b:9e:
09:64:d6:b1:f2:0d:49:a4:55:f2:81:bc:43:a0:73:
f7:4f:06:ea:c8:50:bc:3e:bb:c6:40:95:5f:13:7a:
55:90:91:f8:fc:28:1a:36:a2:b2:6b:fa:03:5c:13:
ab:95:71:ed:15:62:74:f7:f4:1f:66:65:67:fd:4a:
cb:d5:2b:05:3c:18:47:0d:6d:c6:c2:e7:f6:30:54:
af:3c:d2:eb:ad:87:a8:46:08:17:f9:67:ff:bb:7f:
81:8a:a9:83:88:3f:6b:02:3e:4e:0f:8b:ad:b7:d2:
96:9f:d2:6e:25:66:6e:ec:1a:cf:19:6b:ee:23:23:
b0:93:b1:27:89:91:63:3c:c2:6f:8a:0b:5b:dd:fe:
9f:ca:7d:f2:19:5e:96:e1:69:06:00:88:8f:e4:a4:
c7:b7:c1:34:cb:95:a0:16:a1:8d:52:e0:40:6b:7d:
55:7c:f7:08:1d:eb:e0:33:dc:d7:65:e4:de:b0:cd:
ae:5e:0e:d8:57:1c:a7:5e:da:d2:66:94:4a:f9:22:
8c:14:80:b1:01:62:80:9b:df:9a:77:dc:4d:bc:ce:
0d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:83:F8:B2:3D:52:55:23:1D:02:BF:D0:79:3E:3B:A2:EF:B6:B6:CB
X509v3 Authority Key Identifier:
keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0a:53:81:5c:14:e2:a7:04:18:4b:6d:2b:b6:3c:b5:c3:ba:
4b:bc:56:b1:bd:f1:fa:ef:58:66:4d:e0:3d:45:31:bc:e6:6b:
ea:03:b1:d1:dd:a1:5f:d3:90:71:20:48:e1:8b:7e:0b:95:cc:
de:28:71:71:ee:db:12:8a:68:7a:40:c6:f7:af:bf:64:b0:08:
dd:e6:ad:5b:51:a5:0c:33:db:2b:44:7f:da:c5:62:f7:50:24:
e5:b4:8b:f2:e6:f3:78:98:3d:49:d2:7e:d9:3d:2b:0e:05:b3:
5e:31:df:f3:66:2b:93:e8:c8:7a:0d:20:e0:87:08:54:bf:49:
b5:d5:ed:f5:f4:b4:43:e5:57:6f:fe:8d:40:cb:76:7c:93:d7:
00:dc:a1:fb:20:70:bf:33:fc:48:54:ad:9d:77:1c:57:96:aa:
83:72:1e:37:a4:17:f9:bd:5a:50:48:e8:33:8f:35:5a:29:44:
a6:c0:07:98:05:f2:0d:a1:19:e0:f8:f7:df:db:3c:e3:4a:be:
9e:43:ee:19:72:25:0d:6f:1d:73:3f:77:5e:15:38:fe:21:13:
17:63:b5:1e:43:27:a5:47:9a:b2:23:71:0e:89:6a:88:ee:d1:
40:dd:0a:ac:31:00:3a:2c:eb:f8:8e:28:26:d7:4b:1a:d2:38:
22:6d:ab:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:19:59 2026 by rpki-client