Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
File: AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json)
Hash identifier: ONXIsEM9Yw3B/tWp6NkoFQo51VCLBk4qBdOeImluKFc=
Subject key identifier: 70:67:C7:4C:C1:58:D4:02:6B:F5:9E:F0:6E:EC:59:78:E0:D3:AC:37
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial: 019DA567059EFF871C8A60E5402E9C551CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 11:01:25 +0000
Manifest this update: Sun 19 Apr 2026 11:01:25 +0000
Manifest next update: Mon 20 Apr 2026 11:01:25 +0000
Files and hashes: 1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: kmvgYDhDVs56fvn3BsIuz2VPmTvANZbU6ybbDnPkR6s=)
2: anrHbhOJ_sDeOGsZqi6XBsId81s.roa (hash: xMq6I1dSb7bxT2SD4A/tmxqXSuNiBJbAzYXnHtz1Ido=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:05:9e:ff:87:1c:8a:60:e5:40:2e:9c:55:1c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Validity
Not Before: Apr 19 11:01:25 2026 GMT
Not After : Apr 20 11:01:25 2026 GMT
Subject: CN=7067c74cc158d4026bf59ef06eec5978e0d3ac37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:30:57:2c:51:d1:f0:01:09:56:ab:2b:29:d7:
4c:34:09:6a:87:cd:3b:a4:4a:68:0d:76:50:eb:01:
d1:b6:fd:54:ba:de:bd:62:5c:15:04:46:f2:28:b8:
dc:c5:4c:f4:f7:a1:b1:26:79:93:2e:42:9e:ec:80:
14:41:83:9d:8c:f0:bb:06:67:98:b8:12:cd:c0:ad:
f3:b0:88:cf:cf:64:bd:de:3d:b6:14:13:01:a1:71:
96:ad:8f:04:e4:85:b3:9c:d9:55:8a:d0:18:e4:20:
fd:4c:73:5c:30:5b:fe:f4:7b:94:e8:b5:5a:9e:9c:
2b:8a:5f:51:f1:0b:15:76:ab:66:6a:fb:21:97:c6:
52:f8:bf:6a:c5:62:53:cf:83:21:7d:50:e3:83:94:
2b:59:85:d7:9a:c0:c7:d0:16:42:0b:d3:be:8d:a1:
5f:16:ee:b1:05:a3:93:56:7c:92:08:46:40:06:a7:
9d:58:f0:f1:6b:bd:d8:38:66:7e:79:9b:23:e4:77:
19:a1:f1:8f:00:d0:4f:3d:ba:fb:32:19:3d:a3:bf:
6a:86:b1:7a:99:7f:4f:47:49:a3:4e:0d:82:d4:96:
32:e9:70:ad:14:61:c3:f9:92:d3:09:ad:05:26:96:
05:15:c2:67:ff:1c:d2:f6:1c:ba:75:86:b2:9d:0d:
86:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:67:C7:4C:C1:58:D4:02:6B:F5:9E:F0:6E:EC:59:78:E0:D3:AC:37
X509v3 Authority Key Identifier:
keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:86:5d:bb:b4:f5:2c:e7:4e:0d:c6:57:77:6d:28:aa:20:2f:
59:2a:ed:3e:ef:40:65:73:7d:85:8f:98:de:59:74:5a:d2:bf:
17:31:5b:7a:10:69:8b:b6:83:a5:24:41:b9:6c:62:53:c1:0b:
03:c6:b0:7d:61:63:05:0a:b9:c7:6b:2c:b3:b4:65:5f:59:36:
b0:ac:cc:eb:75:c7:52:bd:b2:43:91:ae:3f:09:7b:2b:77:4f:
4d:46:f6:9e:9c:62:d9:7e:e0:ce:cc:bb:e0:5e:c0:ac:57:c9:
2c:0c:2f:34:ad:10:40:cb:c1:dc:68:e6:9d:e1:53:ab:21:fd:
c2:ea:d3:fc:11:7c:02:3a:ac:fb:9c:36:e3:d0:82:2b:26:cc:
5d:be:60:b8:f3:3b:1f:4c:5d:5c:4d:5f:d0:3d:b9:11:50:67:
3b:a2:95:54:7e:53:36:6c:6b:56:36:0c:50:71:a9:04:e7:20:
a8:e5:d5:67:e5:02:7b:01:5c:45:56:d3:d7:38:df:82:bd:01:
ba:31:80:25:2a:74:14:af:47:97:49:0e:84:9b:5a:99:5d:70:
78:38:91:61:43:af:f5:d0:54:b0:ed:8c:02:69:d8:60:0e:9e:
77:9c:1a:f7:47:26:8d:8d:33:9c:84:45:1b:d0:08:3e:c7:f8:
f5:95:b9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:41 2026 by rpki-client