Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
File: AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json)
Hash identifier: Fz5BtlTtnBNPE0WJes1mgdf0QWwWaT7MSgw8/ojDrK8=
Subject key identifier: AF:51:8B:C0:85:51:9D:CC:8D:DC:7F:81:42:82:A0:46:D7:4D:1C:87
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial: 019D29CEC2A4FB7CBE1A17D4996C61098BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 11:01:49 +0000
Manifest this update: Thu 26 Mar 2026 11:01:49 +0000
Manifest next update: Fri 27 Mar 2026 11:01:49 +0000
Files and hashes: 1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: OGw+TVEJun5BlbRZgP7ZGwqtThmZBfYEEKSwquOLJ3o=)
2: anrHbhOJ_sDeOGsZqi6XBsId81s.roa (hash: xMq6I1dSb7bxT2SD4A/tmxqXSuNiBJbAzYXnHtz1Ido=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:c2:a4:fb:7c:be:1a:17:d4:99:6c:61:09:8b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Validity
Not Before: Mar 26 11:01:49 2026 GMT
Not After : Mar 27 11:01:49 2026 GMT
Subject: CN=af518bc085519dcc8ddc7f814282a046d74d1c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8a:dd:8b:5b:a6:c3:3b:08:16:5e:19:5d:be:
55:37:d3:ef:51:54:8e:9c:19:b6:95:77:8b:c7:6a:
6c:ed:bc:42:73:c2:b0:ac:f0:fc:18:c4:f9:ac:64:
9f:14:88:09:7e:bf:4a:13:fe:7b:54:f2:e3:f9:d2:
60:f1:1d:69:b3:0c:b7:a4:36:2c:18:30:fa:b7:af:
89:44:fc:b1:48:8b:1e:5d:89:6c:c0:e7:e0:60:5c:
da:50:d3:46:bb:c8:78:47:0b:f8:9e:62:a9:e8:96:
f3:79:f3:fd:7e:b1:45:90:80:01:be:35:ba:ed:29:
b6:1a:b9:9a:88:60:af:69:be:d2:0b:43:fa:1b:be:
98:04:3f:ea:4e:25:a3:14:99:ce:fb:1b:d7:59:cd:
97:d6:ba:9c:66:cc:82:ba:a4:cf:f9:60:26:98:93:
4d:bd:d6:b0:72:80:ff:7e:aa:49:73:71:00:6e:e5:
fe:6c:9b:93:dc:f3:77:97:91:78:ef:6b:c3:ba:0c:
09:88:a9:2e:ab:19:59:ab:24:0b:a9:fe:de:85:45:
95:b6:82:60:20:ca:da:b1:10:a3:8d:b8:ac:07:f6:
78:9e:38:09:4a:7d:f4:39:57:8a:3c:26:77:f5:31:
a7:ab:c9:47:91:a7:75:22:b0:4c:71:27:a8:f8:44:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:51:8B:C0:85:51:9D:CC:8D:DC:7F:81:42:82:A0:46:D7:4D:1C:87
X509v3 Authority Key Identifier:
keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:50:b5:30:b1:79:18:05:3c:02:33:dd:d1:8d:96:73:a2:d7:
3e:d7:34:d4:50:0b:93:81:17:f2:93:3c:43:61:e6:8d:2d:68:
23:22:b9:bc:18:c0:4c:9e:7e:25:17:fa:b5:6a:41:da:db:30:
17:fb:7f:e4:63:77:80:f4:0b:e2:8e:82:bc:17:e7:e5:80:c4:
3b:7f:18:62:7f:50:d7:19:6e:86:0c:4c:48:7f:d8:87:f6:bf:
84:e0:34:88:96:20:9d:f3:fe:e4:e5:5f:43:70:d4:42:d1:85:
3f:e6:ce:6b:67:eb:5c:35:00:0c:9c:7b:78:99:e4:1d:9e:3d:
4c:21:a0:f1:1f:71:a6:23:de:29:ab:76:29:c0:d0:85:54:b3:
39:cc:d9:90:69:97:e7:93:06:96:ad:1c:9a:02:75:57:07:2d:
b5:70:8e:94:ed:b1:7b:05:ec:0b:f8:3b:8c:f2:f9:ee:5c:fb:
c9:d5:12:6c:5c:5b:3b:79:24:db:92:94:e8:e6:62:3e:27:92:
f7:01:1c:33:9e:b2:ed:55:c1:1e:09:da:40:f4:f6:82:3a:44:
44:28:8a:8c:52:f9:36:a4:0d:ad:25:54:94:0e:27:db:a8:a2:
81:92:b2:64:8a:63:92:1a:68:73:0d:82:41:9e:90:cc:91:09:
87:3f:42:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:00 2026 by rpki-client