Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
File: AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json)
Hash identifier: sHoLOtQWX/IVYi4hCAvfPBLVXl3z6xtIzD3IhhLQEKM=
Subject key identifier: B8:FB:E3:46:C1:7C:DB:84:0E:BD:87:CD:97:CD:CF:72:4B:18:DD:FD
Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
Certificate issuer: /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Certificate serial: 019CACB46ABE339AE6E8D19077A8FAC6A80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
Manifest number: 0940
Signing time: Mon 02 Mar 2026 04:00:30 +0000
Manifest this update: Mon 02 Mar 2026 04:00:30 +0000
Manifest next update: Tue 03 Mar 2026 04:00:30 +0000
Files and hashes: 1: 4Vqqb5k4j9r4FD-Q4TgHLzGBoT4.roa (hash: DbSLlNcKnNNqECQ34MGqDl+9nVOY0HjH0tWr/mR4x4I=)
2: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: gsY/KIEZHRH9Dm4Hi+Y5mSwasP5Jh3w0FKHQAEpkSug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:6a:be:33:9a:e6:e8:d1:90:77:a8:fa:c6:a8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Validity
Not Before: Mar 2 04:00:30 2026 GMT
Not After : Mar 3 04:00:30 2026 GMT
Subject: CN=b8fbe346c17cdb840ebd87cd97cdcf724b18ddfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:60:6f:3d:b7:41:55:70:23:10:eb:30:32:
f9:3e:41:05:02:d8:c1:73:fe:34:3d:7b:8f:47:23:
c8:0f:5c:00:49:73:9d:c0:f4:47:96:e9:bf:d0:92:
dc:c5:25:08:d8:97:2e:9d:da:a6:82:86:9a:6c:73:
52:c1:d5:c2:b3:b1:7a:91:1d:99:0a:56:89:6e:55:
1c:f9:cd:20:8e:72:f6:0b:3f:48:39:e0:f8:86:bc:
37:42:94:b8:44:14:4d:bc:5d:d1:57:ba:20:04:08:
fb:69:bf:4f:c3:c1:f2:05:fc:c4:d2:0d:88:be:f7:
83:19:60:bc:fd:ca:bb:43:50:44:dc:f6:93:12:b0:
f6:4a:82:37:a2:3f:74:bf:80:49:16:50:61:73:25:
cc:f0:2f:6e:76:09:56:77:91:5d:e8:32:4b:2d:9b:
0b:ac:7c:f2:79:3f:8c:af:b8:e1:b1:e5:db:cf:07:
df:55:a2:c3:82:e2:68:cd:15:0c:97:be:d8:35:7e:
05:97:a8:e8:f5:36:c3:c4:c4:12:a2:80:2f:01:ab:
3b:db:43:6b:ff:2a:8c:ad:90:30:62:15:0e:86:77:
5d:89:46:01:d0:ac:3e:25:05:57:2f:ea:33:d4:7b:
65:50:4a:a1:96:98:1a:c5:34:b5:e0:93:23:0a:dc:
d5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FB:E3:46:C1:7C:DB:84:0E:BD:87:CD:97:CD:CF:72:4B:18:DD:FD
X509v3 Authority Key Identifier:
keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:9c:82:ab:65:ee:93:24:f2:9c:ee:ec:e7:98:5d:40:13:22:
bd:e2:0c:d5:c4:88:ad:cb:de:10:57:26:cb:62:02:11:8a:82:
37:8b:d7:9a:9a:e7:6d:4f:ed:a5:c2:54:2d:27:19:10:22:03:
ce:52:5e:a5:ae:0a:9c:c3:34:b4:0e:ac:24:e2:60:0c:6c:82:
50:72:72:09:30:be:67:f5:8e:10:e0:88:ba:be:07:c1:f9:36:
1c:94:bf:37:09:fa:af:7b:e5:13:91:7e:88:55:2f:b6:48:10:
ee:07:d1:b4:90:15:62:fe:11:8c:14:b8:0c:09:90:f0:2f:41:
3c:30:52:08:f2:9c:bf:e3:12:04:b8:58:b6:9e:3b:c1:c5:b7:
d2:c0:d2:81:3d:e0:15:0b:fb:f4:d9:89:e8:01:ad:79:3a:8c:
b9:d4:c1:d7:24:13:fb:04:2c:4d:aa:df:93:40:fa:e0:44:c9:
62:6e:88:45:d9:d6:9e:d6:db:67:ea:99:5a:46:d3:10:1c:db:
21:66:c3:1e:31:fc:db:29:6b:00:86:14:60:c3:24:27:d6:09:
40:c6:2c:97:23:0f:95:53:50:d3:3c:e2:f4:0d:4d:d9:62:25:
76:62:6a:71:30:ba:ef:71:71:1f:0a:b7:ef:07:0b:27:49:60:
3f:41:c3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:21 2026 by rpki-client