Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
File: o75019azdkTAG-1V4NsxRkuYYMY.mft (raw, json)
Hash identifier: PvjFs+9+WLYcmEurgwieqDzrxmGvrwDaZ6yA0j/iJpE=
Subject key identifier: C2:29:02:C3:E9:7F:5D:9A:3A:73:D3:BA:4B:44:7C:9D:C4:7B:71:C1
Authority key identifier: A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6
Certificate issuer: /CN=a3be74d7d6b37644c01bed55e0db31464b9860c6
Certificate serial: 019D2A3B44529F07AB588A290DFDF93F9988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
Manifest number: 012D
Signing time: Thu 26 Mar 2026 13:00:20 +0000
Manifest this update: Thu 26 Mar 2026 13:00:20 +0000
Manifest next update: Fri 27 Mar 2026 13:00:20 +0000
Files and hashes: 1: bo9Ko4HgF0NGY0x7JNh4-GVgDJo.roa (hash: tUVeOTBTPwteXhY4vj03N/tGfiCI5pAsvZ6bGoHFfww=)
2: o75019azdkTAG-1V4NsxRkuYYMY.crl (hash: 4oHGcPGd5Ifiy2azBa4nM1FA/TQLXdBPO6IYPkDHuCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:44:52:9f:07:ab:58:8a:29:0d:fd:f9:3f:99:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3be74d7d6b37644c01bed55e0db31464b9860c6
Validity
Not Before: Mar 26 13:00:20 2026 GMT
Not After : Mar 27 13:00:20 2026 GMT
Subject: CN=c22902c3e97f5d9a3a73d3ba4b447c9dc47b71c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:7e:03:0e:08:25:bb:71:12:03:79:8f:fa:
74:7c:18:d3:e9:45:ec:b2:16:f2:39:d6:fa:3c:9f:
dd:00:aa:93:52:a2:9a:15:84:93:b6:d7:fb:bf:81:
d9:38:07:fe:37:b4:f8:96:56:52:a9:27:95:29:45:
0c:e5:6b:94:6e:82:12:3f:91:3b:4f:ce:0b:60:b8:
c7:8a:a7:12:93:49:7f:d0:e2:2d:db:38:80:8d:85:
f2:43:49:a7:7a:70:29:01:95:cf:db:cd:98:25:af:
e3:25:26:58:8d:1a:73:cf:af:83:ff:0e:52:85:fb:
18:9b:81:0b:b3:4f:8c:01:ab:32:54:c0:8a:12:6a:
46:6e:5b:c8:af:cc:df:45:e2:c5:a2:c3:6e:2d:d8:
71:c0:5f:51:96:d4:79:1f:c4:54:59:10:a3:e4:40:
9b:70:73:7a:2c:e8:73:7f:ec:c0:4f:28:27:3d:60:
71:81:e0:3e:f7:a0:59:af:db:a2:ca:0b:3a:b6:d1:
4d:23:8a:67:cf:ac:04:30:a2:45:3f:fc:80:6f:c4:
82:4a:0e:c5:fc:64:82:15:bd:c9:0b:ee:d4:c1:3b:
60:93:b8:ca:c0:37:e1:23:99:c0:d3:ea:75:48:a7:
3c:b9:ab:3b:7f:74:f0:5e:c4:92:47:30:d7:86:5a:
bb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:29:02:C3:E9:7F:5D:9A:3A:73:D3:BA:4B:44:7C:9D:C4:7B:71:C1
X509v3 Authority Key Identifier:
keyid:A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2a:a9:7c:72:3d:6d:a7:de:fc:fa:46:2b:8d:64:20:1b:42:
e8:86:8c:ea:de:63:40:8d:74:13:ba:9d:9c:42:68:f8:f9:91:
d7:46:d7:c1:f8:ae:2c:f4:2a:39:e7:19:fd:35:cb:f3:0f:44:
bb:b0:46:66:c6:61:11:a8:3e:45:45:71:b8:19:08:50:12:13:
44:c5:f7:60:06:ac:49:86:b2:87:84:1e:52:00:01:65:32:d9:
da:9c:7b:ce:b7:e5:6d:10:3f:32:8a:2a:e4:d9:83:fd:b2:b2:
c0:e7:54:51:f9:fe:cc:c3:df:01:6b:2c:b0:f1:7e:c4:0c:d9:
26:0b:19:ac:a0:d4:e0:b6:c8:68:39:08:96:ae:2a:25:e7:82:
12:a4:51:b6:8b:a0:40:9a:fb:74:fe:70:67:25:59:fb:d6:cd:
fc:e8:8c:fd:65:ff:6b:cd:9c:d6:a8:72:c7:12:6c:b1:4e:46:
b5:6d:06:bf:c5:6e:f4:58:9f:aa:30:dd:35:4a:2a:6d:a3:a7:
73:c7:6b:15:12:c3:41:21:8d:6f:3a:3c:78:47:68:30:f0:00:
59:60:61:8b:c5:ce:ba:ed:8e:28:6b:12:9f:8c:ff:86:fc:68:
1c:80:86:53:b3:73:9b:7a:1e:b8:fd:dc:16:79:c2:6e:5f:c2:
18:44:0b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:31:51 2026 by rpki-client