Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
File: AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json)
Hash identifier: bLWnpD+d0W545Tp4pZ0it4YnfC6XMNZbIwVBzMG/7T8=
Subject key identifier: C5:13:11:57:80:87:D4:CA:FF:6C:24:6A:B3:1C:0B:47:9E:B2:BA:C3
Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
Certificate issuer: /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Certificate serial: 019D9A3EAB272E49BB21E6C19F3E2C2FECE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
Manifest number: 09BB
Signing time: Fri 17 Apr 2026 07:01:31 +0000
Manifest this update: Fri 17 Apr 2026 07:01:31 +0000
Manifest next update: Sat 18 Apr 2026 07:01:31 +0000
Files and hashes: 1: 4Vqqb5k4j9r4FD-Q4TgHLzGBoT4.roa (hash: DbSLlNcKnNNqECQ34MGqDl+9nVOY0HjH0tWr/mR4x4I=)
2: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: sbs6VdyAu5yzWEVMBXZY8pNkd9I6KS2aQQ8cuML3hH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ab:27:2e:49:bb:21:e6:c1:9f:3e:2c:2f:ec:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Validity
Not Before: Apr 17 07:01:31 2026 GMT
Not After : Apr 18 07:01:31 2026 GMT
Subject: CN=c51311578087d4caff6c246ab31c0b479eb2bac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:eb:bd:09:0e:64:76:a8:74:42:72:91:51:
57:24:a1:8e:de:33:ab:dc:e6:89:19:a5:b0:2c:77:
24:ec:3f:ce:1a:47:65:55:2a:76:5d:86:13:a8:95:
6a:5f:43:50:b1:19:52:46:63:4e:04:ac:bf:19:b3:
96:69:59:7d:95:89:9b:fe:e8:b7:18:95:b8:92:37:
4c:d3:8d:95:bd:a5:ac:ff:f3:aa:18:89:98:69:d8:
da:d4:e1:bd:86:4c:55:ec:b8:2b:12:d3:5b:cc:ea:
ef:be:c6:ad:9c:3b:b6:32:9b:eb:d4:87:f5:48:5a:
35:0f:a6:a0:3e:61:11:ab:15:b9:80:a9:78:59:be:
11:44:87:0f:c3:b3:cb:5e:33:0a:0c:bb:20:8a:f9:
52:59:03:d9:d7:5f:81:28:48:58:b1:cb:8a:af:c8:
75:b1:87:a1:83:c6:ac:66:08:e7:af:db:a4:3c:8f:
e7:3d:22:d7:26:78:fe:0f:47:b4:d4:14:91:6e:27:
88:77:fe:cd:ce:d6:38:6e:8a:c6:55:0d:d5:b9:ee:
af:a9:b6:a1:89:6d:8b:c1:67:33:da:71:d1:14:89:
04:9a:da:40:d7:d7:39:b4:52:11:a0:7a:98:26:52:
fd:c1:ce:82:13:dd:47:8b:05:88:9a:98:42:b6:00:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:13:11:57:80:87:D4:CA:FF:6C:24:6A:B3:1C:0B:47:9E:B2:BA:C3
X509v3 Authority Key Identifier:
keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:90:9e:8f:61:c8:1d:ef:6d:71:73:52:27:5e:76:9c:43:0b:
44:9e:c2:fa:87:b8:77:00:32:d9:33:f6:05:a1:19:60:ec:8d:
ce:32:17:e6:5c:39:a8:77:51:52:b9:6c:de:09:a0:9f:67:c8:
e1:9a:a2:04:02:07:d8:8f:82:9a:5d:fb:55:55:13:f5:ba:4c:
67:b0:21:aa:75:d1:cc:05:a9:5e:ee:3f:f4:88:90:57:cf:f5:
d9:53:09:d1:74:1e:76:c1:66:1b:98:8b:05:20:6b:f4:46:e4:
0b:5b:fe:d8:3d:ad:92:6b:1a:d1:f3:61:9d:8e:1e:c3:ed:48:
03:79:8b:c7:22:da:52:1f:f4:7c:f7:cb:02:cf:82:e2:4d:02:
1d:73:2d:ef:6a:53:1d:68:c7:4e:9c:ef:96:31:80:7a:b7:2b:
a4:08:24:66:e2:b5:ef:fa:37:73:33:d0:70:bd:9c:61:3d:2e:
cb:07:02:2e:2e:da:8a:42:3e:07:ee:41:a8:6d:b4:69:3b:af:
9a:92:01:e1:34:1b:cc:17:b1:36:e7:24:f6:02:2b:45:50:9d:
c1:e0:4b:12:ee:88:a7:8d:e6:b3:58:b2:a2:35:00:61:82:f3:
7d:46:fb:41:f8:f0:40:2c:30:3e:fc:59:32:bb:91:8e:8c:52:
9f:27:2d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:15 2026 by rpki-client