Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
File: AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json)
Hash identifier: QmkClIQj6fNfsDWGNqOSyjp82nHc5pPTQnY2PtdhuWw=
Subject key identifier: 3C:3D:0E:03:42:88:B8:A7:C9:10:F3:BC:03:67:BA:89:0C:C4:A4:68
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial: 019CAC46B928ACE76D09C5E5B2ED383F4A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:00:41 +0000
Manifest this update: Mon 02 Mar 2026 02:00:41 +0000
Manifest next update: Tue 03 Mar 2026 02:00:41 +0000
Files and hashes: 1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: Yejl7C4uzW6HxI+DePpmn6JX2F1lsGVJdKzQFAB6YhE=)
2: anrHbhOJ_sDeOGsZqi6XBsId81s.roa (hash: xMq6I1dSb7bxT2SD4A/tmxqXSuNiBJbAzYXnHtz1Ido=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:b9:28:ac:e7:6d:09:c5:e5:b2:ed:38:3f:4a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Validity
Not Before: Mar 2 02:00:41 2026 GMT
Not After : Mar 3 02:00:41 2026 GMT
Subject: CN=3c3d0e034288b8a7c910f3bc0367ba890cc4a468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:a0:02:e2:87:83:c2:41:25:69:48:be:4e:
5e:cf:ba:e0:d5:96:20:dd:9f:43:86:4e:06:19:53:
5a:fa:08:4f:ce:a7:b4:9c:70:57:89:a7:6f:c2:29:
e5:44:bc:06:bc:fa:8d:c1:f9:cf:09:d6:d5:8e:a0:
65:d8:0a:8b:95:fc:7c:e7:3b:59:49:e3:c3:0e:2a:
93:f4:9f:92:8e:8a:09:ed:36:6e:b1:47:70:54:3c:
77:0d:a0:46:59:49:bf:ec:fa:f8:65:e4:0d:04:46:
d0:d2:2e:4c:90:c3:c6:25:75:ef:80:1d:1e:57:cb:
51:f8:b3:5e:2c:d0:3a:1a:5c:2d:01:c0:b4:c1:4d:
95:dd:a1:27:4e:2e:6b:0e:4e:cd:89:d5:ad:9e:2f:
e7:a2:16:32:79:8b:d9:64:31:94:86:21:6e:b1:12:
86:9c:46:8c:a8:5f:9b:d0:37:d0:c7:48:d6:86:f1:
4b:c2:d5:43:a5:45:9f:27:14:53:33:ea:a8:22:fb:
5d:2f:f4:3a:4c:02:b7:24:7a:22:cb:e2:19:ab:81:
dc:aa:46:a5:24:f4:be:51:42:ac:3a:3d:1e:2f:01:
48:ac:2b:3b:b0:6e:8f:6e:b6:bd:26:43:93:55:7b:
6d:12:44:04:0a:fd:a7:f3:c6:9f:12:28:33:a4:85:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3D:0E:03:42:88:B8:A7:C9:10:F3:BC:03:67:BA:89:0C:C4:A4:68
X509v3 Authority Key Identifier:
keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:66:ce:38:64:27:0e:56:94:fc:75:f7:d2:6c:33:cf:2f:0d:
67:08:c5:a2:37:5b:d0:ed:e7:d5:36:5d:af:52:30:d5:37:96:
3e:a1:d5:18:29:9d:36:b8:e4:8a:7c:03:2e:1d:c0:a7:cd:f2:
b2:02:f8:01:d8:07:15:34:46:9e:21:2f:c3:ff:cd:51:85:0c:
c7:c1:bd:90:b5:46:bb:a7:79:8d:93:68:78:b7:83:6b:2e:6c:
eb:a4:70:e0:e3:b4:1c:64:2b:70:38:96:d3:f9:86:c7:90:a4:
1c:7b:9d:5e:c2:72:b9:00:09:e6:58:86:e9:94:57:52:8d:00:
4f:1e:7d:1a:b3:5a:3b:9b:18:e1:5a:64:2c:43:64:5f:e3:74:
93:35:50:d8:d3:55:6a:47:4f:c5:11:cc:8b:bf:a8:de:b2:21:
07:81:26:dc:a3:6b:c2:f2:31:93:93:5e:0a:f8:51:b4:46:38:
c8:8a:e7:e5:47:d3:3f:f6:87:d6:08:4b:35:e6:c1:2b:b5:3a:
b0:0f:bc:b5:9b:41:eb:41:c6:c2:e9:4c:75:42:3a:c0:28:27:
f4:75:95:e2:df:1f:0e:d9:9c:68:5b:11:29:d6:74:51:65:d7:
37:74:ab:23:6b:3c:0d:4a:c9:16:a1:86:74:19:9f:fa:1f:4c:
69:1c:2d:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRrkorOdtCcXlsu04P0oGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTliZmJiMzMxZjI3MDkzMmVmM2Y4MmYwM2FkZDBjMGIy
ZjE1NzIwHhcNMjYwMzAyMDIwMDQxWhcNMjYwMzAzMDIwMDQxWjAzMTEwLwYDVQQD
EygzYzNkMGUwMzQyODhiOGE3YzkxMGYzYmMwMzY3YmE4OTBjYzRhNDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNCgAuKHg8JBJWlIvk5ez7rg1ZYg
3Z9Dhk4GGVNa+ghPzqe0nHBXiadvwinlRLwGvPqNwfnPCdbVjqBl2AqLlfx85ztZ
SePDDiqT9J+SjooJ7TZusUdwVDx3DaBGWUm/7Pr4ZeQNBEbQ0i5MkMPGJXXvgB0e
V8tR+LNeLNA6GlwtAcC0wU2V3aEnTi5rDk7NidWtni/nohYyeYvZZDGUhiFusRKG
nEaMqF+b0DfQx0jWhvFLwtVDpUWfJxRTM+qoIvtdL/Q6TAK3JHoiy+IZq4Hcqkal
JPS+UUKsOj0eLwFIrCs7sG6Pbra9JkOTVXttEkQECv2n88afEigzpIURQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDw9DgNCiLinyRDzvANnuokMxKRoMB8GA1UdIwQY
MBaAFAGZv7szHycJMu8/gvA63QwLLxVyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYt
Yzc1NzFlZTFkOTliLzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYtYzc1NzFlZTFkOTli
LzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy2bOOGQn
DlaU/HX30mwzzy8NZwjFojdb0O3n1TZdr1Iw1TeWPqHVGCmdNrjkinwDLh3Ap83y
sgL4AdgHFTRGniEvw//NUYUMx8G9kLVGu6d5jZNoeLeDay5s66Rw4OO0HGQrcDiW
0/mGx5CkHHudXsJyuQAJ5liG6ZRXUo0ATx59GrNaO5sY4VpkLENkX+N0kzVQ2NNV
akdPxRHMi7+o3rIhB4Em3KNrwvIxk5NeCvhRtEY4yIrn5UfTP/aH1ghLNebBK7U6
sA+8tZtB60HGwulMdUI6wCgn9HWV4t8fDtmcaFsRKdZ0UWXXN3SrI2s8DUrJFqGG
dBmf+h9MaRwtkw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:02 2026 by rpki-client