Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
File: AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json)
Hash identifier: 0jvidXiMJ4i8NQRtMF5LW1JQZcR/knVIQWleqNoKJiU=
Subject key identifier: 16:CF:67:90:1E:37:9F:2D:DB:01:7F:1A:3D:A8:FD:9F:F8:F5:6A:91
Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
Certificate issuer: /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Certificate serial: 019D265EE330514D812D83444EF92BC67A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
Manifest number: 097F
Signing time: Wed 25 Mar 2026 19:00:45 +0000
Manifest this update: Wed 25 Mar 2026 19:00:45 +0000
Manifest next update: Thu 26 Mar 2026 19:00:45 +0000
Files and hashes: 1: 4Vqqb5k4j9r4FD-Q4TgHLzGBoT4.roa (hash: DbSLlNcKnNNqECQ34MGqDl+9nVOY0HjH0tWr/mR4x4I=)
2: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: m3JpfoRQV4veuOv6yk6ZQOhmJjj8PjG7Zyhhavm4b98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:e3:30:51:4d:81:2d:83:44:4e:f9:2b:c6:7a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Validity
Not Before: Mar 25 19:00:45 2026 GMT
Not After : Mar 26 19:00:45 2026 GMT
Subject: CN=16cf67901e379f2ddb017f1a3da8fd9ff8f56a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:dd:59:ab:14:ae:e6:8b:63:14:39:d2:e0:
d5:ba:ce:51:f1:27:7d:37:78:5c:c2:de:51:03:52:
0c:eb:7a:94:3d:7a:76:34:fb:74:b3:9f:a9:d3:50:
2e:43:c5:a9:f5:c1:ef:a4:e1:14:f3:cf:5d:d9:e0:
f8:c9:27:d3:76:f2:37:68:e9:de:7d:e6:b1:2d:74:
ba:7d:97:9b:9d:fa:77:18:21:04:b0:25:ed:58:09:
20:32:6a:ad:0e:8c:62:08:eb:7c:8f:13:c5:46:c2:
33:42:1f:24:72:4a:7f:24:9c:5f:12:34:94:dc:8d:
73:9e:e2:5c:d8:ba:f9:c3:a7:2a:84:c8:ab:f9:70:
e4:d0:bd:ec:d3:53:bf:49:59:0a:97:a3:e2:72:91:
65:80:5e:3a:3e:6b:dc:78:f0:57:1d:de:f6:af:ca:
67:2a:27:df:b9:23:0b:a4:27:f1:e1:db:5d:6d:1a:
cc:01:cb:3a:5b:59:c8:de:01:5a:43:a8:98:98:94:
25:04:cc:44:4a:1c:e2:aa:33:d2:ba:09:66:28:69:
35:81:9b:83:2a:7f:0d:77:4a:64:51:91:34:4c:8c:
ea:e0:aa:9a:f4:d9:ee:b4:19:f3:90:c7:7c:a1:23:
83:75:11:d6:89:7c:3c:1e:b5:1e:87:62:da:f0:a7:
5a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CF:67:90:1E:37:9F:2D:DB:01:7F:1A:3D:A8:FD:9F:F8:F5:6A:91
X509v3 Authority Key Identifier:
keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:14:4f:c9:04:9f:1c:ee:48:6a:27:b6:80:2d:f7:81:9d:31:
f6:ec:3a:e2:ae:ad:3e:74:40:fe:d0:74:25:33:f5:6c:1b:87:
77:69:04:b3:41:9a:6f:b5:03:54:cd:be:46:e7:04:2b:09:f6:
a3:f2:9b:ec:a5:5f:59:83:9d:a3:27:8a:25:ea:e8:51:10:f7:
34:a2:c4:d3:53:ea:c4:16:94:ab:c5:4a:3f:60:92:cb:34:18:
a4:05:31:67:6d:30:cb:12:7d:89:b3:18:e8:bd:26:29:97:e4:
f1:88:5c:f9:bc:90:8f:64:07:51:1b:9f:0f:c8:73:d3:49:dd:
84:eb:17:87:0f:06:35:a3:d6:6d:2d:a2:b1:49:2f:c9:94:3e:
87:4f:0c:5f:ad:4d:e1:b4:7d:42:4d:1c:b5:aa:0c:12:8f:3f:
76:d7:59:5d:82:cd:58:52:5c:ae:0d:6b:5c:57:c8:83:94:8e:
52:71:8b:48:09:da:d7:31:0e:1c:a4:e3:71:b7:3f:28:60:4f:
20:98:85:c3:ad:97:ad:60:a3:b4:db:10:47:a7:ac:03:74:04:
09:bd:ab:75:40:c0:fd:bf:7a:76:01:94:c9:8d:6b:72:6c:95:
fd:36:fa:a6:0b:09:94:f2:6a:2e:c9:81:8e:b6:61:74:36:19:
20:6b:79:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:45 2026 by rpki-client