Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
File: o75019azdkTAG-1V4NsxRkuYYMY.mft (raw, json)
Hash identifier: mMIRebmZOW0moRv1RL4BoT7KwSJ1c9GQqdbfqRwd/G8=
Subject key identifier: EF:A9:DD:95:E9:14:42:1E:72:1E:C2:86:BF:7B:3E:ED:4D:62:6E:EE
Authority key identifier: A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6
Certificate issuer: /CN=a3be74d7d6b37644c01bed55e0db31464b9860c6
Certificate serial: 019E216D0185F0099615716A71BAA85913EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
Manifest number: 01AD
Signing time: Wed 13 May 2026 13:00:52 +0000
Manifest this update: Wed 13 May 2026 13:00:52 +0000
Manifest next update: Thu 14 May 2026 13:00:52 +0000
Files and hashes: 1: bo9Ko4HgF0NGY0x7JNh4-GVgDJo.roa (hash: tUVeOTBTPwteXhY4vj03N/tGfiCI5pAsvZ6bGoHFfww=)
2: o75019azdkTAG-1V4NsxRkuYYMY.crl (hash: SWGTcm2Q6slIsQvd6L65XOS3ugwIf6bcxf97Dr74Krs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:01:85:f0:09:96:15:71:6a:71:ba:a8:59:13:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3be74d7d6b37644c01bed55e0db31464b9860c6
Validity
Not Before: May 13 13:00:52 2026 GMT
Not After : May 14 13:00:52 2026 GMT
Subject: CN=efa9dd95e914421e721ec286bf7b3eed4d626eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:49:6f:a2:77:4f:26:02:47:86:48:97:06:c0:
ca:f3:cd:cc:53:3b:3d:0b:63:db:fb:61:40:a9:84:
45:9b:f2:8d:d5:9d:50:b0:b3:10:be:be:5d:5c:d6:
86:dc:a1:be:66:2d:2c:2a:f1:cd:74:e8:ea:f4:18:
b9:1c:ae:d8:20:11:50:4b:2d:c0:3f:6e:eb:46:a8:
05:95:59:fe:5d:3e:94:0e:73:2b:2d:98:e6:e2:44:
f2:51:45:e6:c7:b0:3c:d9:87:6d:bf:ad:fc:dd:d5:
54:c6:61:80:c4:43:61:8d:6b:65:04:49:ac:dd:99:
5b:4e:15:19:df:db:16:45:3f:3b:ca:23:2f:71:f2:
0a:66:8a:3c:5f:b8:27:7f:49:0b:9b:72:87:e7:fc:
d7:1c:62:2b:e5:5b:b3:86:18:75:78:3a:b2:f7:4e:
12:40:b7:b6:21:53:1d:b8:6f:3d:3d:fd:b6:b8:a8:
80:11:db:92:96:69:83:17:62:3e:b1:74:bb:14:7a:
de:37:e7:a1:ed:a8:27:12:ad:27:c3:49:59:40:b8:
3c:1f:d2:63:0c:42:b6:30:ac:2a:7e:57:77:87:5a:
e2:af:45:98:7d:f9:46:b0:e5:1a:4f:eb:b5:3f:10:
03:45:cf:ef:a4:3d:04:6f:fd:6b:dd:19:91:f9:60:
4b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A9:DD:95:E9:14:42:1E:72:1E:C2:86:BF:7B:3E:ED:4D:62:6E:EE
X509v3 Authority Key Identifier:
keyid:A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:be:47:66:47:e6:29:bb:fc:f5:40:4c:d2:da:a0:51:26:0a:
27:9e:d5:50:e9:74:21:6e:96:67:de:2b:bb:e4:47:e5:17:76:
4f:f0:12:90:d5:63:41:f4:79:e1:85:bc:97:0a:ad:ca:86:d1:
e6:f1:ae:8c:92:57:68:df:01:5e:9f:19:fc:b3:dc:aa:dc:b2:
81:d3:67:2c:aa:76:ac:6a:f7:8d:d1:de:a6:e9:41:19:a5:53:
a3:be:f9:12:0d:b5:81:43:49:92:08:0b:39:2a:e4:90:21:15:
21:6a:ea:d6:a7:aa:c1:bb:44:82:80:7a:38:ce:58:e2:ee:b1:
5a:d3:c6:6f:5b:95:66:4d:6a:6b:25:ff:c8:c8:fc:c5:1b:01:
36:41:e5:12:17:89:41:fe:5b:9f:22:58:3b:c1:54:6f:3d:2f:
f5:a7:ca:d4:3d:b1:c2:e9:39:10:e9:d0:ea:99:d1:7c:c7:19:
7f:64:1a:11:ad:0b:63:55:08:65:a8:e8:9b:4a:e3:aa:50:70:
11:6e:48:a2:e1:36:0c:6d:f2:65:db:e4:40:83:4c:af:ad:63:
d0:e3:94:87:ae:1a:d5:00:0a:e6:53:d2:c4:70:1a:40:ab:62:
7a:57:6c:5c:09:1a:95:4a:c0:cd:ab:cb:41:b0:4f:49:20:fe:
de:7b:ca:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:23:02 2026 by rpki-client