Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
File: AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json)
Hash identifier: x0bwKr70yRmxLdw0CubnKf50C9YE2amMg1+WfNVXqWM=
Subject key identifier: 96:7A:75:94:05:72:B2:18:65:D7:C3:6B:23:19:2F:B5:FB:43:E9:43
Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
Certificate issuer: /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Certificate serial: 019E1F7F4B81E046BF155526BCB348898397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
Manifest number: 0A00
Signing time: Wed 13 May 2026 04:01:36 +0000
Manifest this update: Wed 13 May 2026 04:01:36 +0000
Manifest next update: Thu 14 May 2026 04:01:36 +0000
Files and hashes: 1: 4Vqqb5k4j9r4FD-Q4TgHLzGBoT4.roa (hash: DbSLlNcKnNNqECQ34MGqDl+9nVOY0HjH0tWr/mR4x4I=)
2: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: ZhMdPW6zefhUfStbfM/RyytGZ5ibNgIdsePKLh60daU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:4b:81:e0:46:bf:15:55:26:bc:b3:48:89:83:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Validity
Not Before: May 13 04:01:36 2026 GMT
Not After : May 14 04:01:36 2026 GMT
Subject: CN=967a75940572b21865d7c36b23192fb5fb43e943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0b:b6:8c:64:d4:5c:15:d6:dc:a9:9e:7a:6c:
ae:e6:6d:c5:2b:e3:a4:b3:3a:3f:92:cc:8c:11:b3:
7e:2d:33:25:d4:cd:be:ed:71:8b:54:75:02:b6:5c:
95:07:31:d6:a3:c3:39:4e:7d:7c:6f:1c:54:be:90:
ec:a0:1c:ce:31:0f:62:33:48:d3:c8:3e:ff:a5:f0:
6a:af:96:08:49:08:a3:52:0a:39:46:b1:13:54:6b:
1f:08:12:f6:4f:17:a0:4f:99:8f:d6:ed:24:37:49:
a8:97:48:65:0f:20:5e:86:fa:67:1a:7a:0c:da:b5:
27:ee:1a:5a:40:f0:17:f0:fd:7c:15:b8:0a:b7:89:
d9:c8:86:7d:d9:57:19:ac:09:98:b5:be:19:2e:2c:
19:3d:a2:79:5b:e5:e5:80:f0:10:eb:ce:b2:57:bb:
c6:da:be:a7:ec:94:5a:c0:90:ea:df:1a:f8:dc:58:
a3:3e:0e:17:26:a4:25:67:f3:5d:fc:18:b2:fc:3b:
8a:17:e2:37:f9:94:23:5b:d5:59:72:eb:72:b9:f4:
67:c2:ae:e4:60:56:85:70:0c:1a:2c:dd:23:30:d1:
1d:ad:27:ad:a5:8b:70:40:bb:ca:80:d3:1e:30:ef:
cd:e6:a7:56:c7:7b:7d:ee:e8:c4:d7:4d:33:21:55:
e4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7A:75:94:05:72:B2:18:65:D7:C3:6B:23:19:2F:B5:FB:43:E9:43
X509v3 Authority Key Identifier:
keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bf:31:34:a6:3e:ba:fa:c8:8f:4e:12:48:20:c6:00:a0:e9:
81:bf:dd:32:05:68:70:d3:07:6b:00:76:49:d3:99:f1:8d:97:
0e:3a:dc:fa:32:f8:8e:98:81:30:a3:f2:91:d9:7c:65:80:14:
53:92:c5:ec:2f:ab:3c:b5:3c:3b:eb:ff:8e:f0:95:2d:fa:5c:
b7:70:bd:27:45:93:c1:12:83:1a:a3:22:13:60:41:fe:bc:46:
a7:ed:82:a5:d7:41:33:10:07:65:9e:47:e6:22:6c:fd:c7:3c:
e3:7f:a1:60:d6:4f:d7:9d:ba:fe:8a:b5:84:59:38:26:d7:ea:
c6:25:4c:4c:ba:19:c4:79:5f:66:ab:51:6c:16:12:73:1a:5c:
fe:5e:89:76:a8:be:ed:4d:88:73:67:fc:46:46:ab:25:b6:81:
36:40:30:55:6b:34:4f:8d:b5:4a:89:2b:0c:42:45:d4:91:71:
32:f1:8a:8c:c0:73:80:52:25:19:bc:f7:eb:d6:db:d6:fb:25:
1c:1e:f8:fd:3e:23:0d:98:8d:c2:0e:23:4e:3b:8e:b0:41:6e:
c1:81:8a:9e:d2:a6:b8:7b:1f:3a:00:0b:dc:15:54:c9:bb:63:
01:e3:07:e8:63:72:73:14:c9:9e:6d:66:94:89:b4:b7:71:8f:
39:00:0f:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ff0uB4Ea/FVUmvLNIiYOXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTRhYjlhOGY0YTIwZTgyOWRkNDU3NWE4OGM4MTI1YzFj
OGE2N2YwHhcNMjYwNTEzMDQwMTM2WhcNMjYwNTE0MDQwMTM2WjAzMTEwLwYDVQQD
Eyg5NjdhNzU5NDA1NzJiMjE4NjVkN2MzNmIyMzE5MmZiNWZiNDNlOTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gu2jGTUXBXW3Kmeemyu5m3FK+Ok
szo/ksyMEbN+LTMl1M2+7XGLVHUCtlyVBzHWo8M5Tn18bxxUvpDsoBzOMQ9iM0jT
yD7/pfBqr5YISQijUgo5RrETVGsfCBL2TxegT5mP1u0kN0mol0hlDyBehvpnGnoM
2rUn7hpaQPAX8P18FbgKt4nZyIZ92VcZrAmYtb4ZLiwZPaJ5W+XlgPAQ686yV7vG
2r6n7JRawJDq3xr43FijPg4XJqQlZ/Nd/Biy/DuKF+I3+ZQjW9VZcutyufRnwq7k
YFaFcAwaLN0jMNEdrSetpYtwQLvKgNMeMO/N5qdWx3t97ujE100zIVXk5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZ6dZQFcrIYZdfDayMZL7X7Q+lDMB8GA1UdIwQY
MBaAFAGUq5qPSiDoKd1FdaiMgSXByKZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpTcm1vOUtJT2dwM1VWMXFJeUJKY0hJcG44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xY2ZlNWMtMDU0Ni00NDgyLTkzNWEt
Y2IzODYzNThkMTUxLzEvQVpTcm1vOUtJT2dwM1VWMXFJeUJKY0hJcG44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8xY2ZlNWMtMDU0Ni00NDgyLTkzNWEtY2IzODYzNThkMTUx
LzEvQVpTcm1vOUtJT2dwM1VWMXFJeUJKY0hJcG44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjr8xNKY+
uvrIj04SSCDGAKDpgb/dMgVocNMHawB2SdOZ8Y2XDjrc+jL4jpiBMKPykdl8ZYAU
U5LF7C+rPLU8O+v/jvCVLfpct3C9J0WTwRKDGqMiE2BB/rxGp+2CpddBMxAHZZ5H
5iJs/cc843+hYNZP1526/oq1hFk4JtfqxiVMTLoZxHlfZqtRbBYScxpc/l6Jdqi+
7U2Ic2f8RkarJbaBNkAwVWs0T421SokrDEJF1JFxMvGKjMBzgFIlGbz369bb1vsl
HB74/T4jDZiNwg4jTjuOsEFuwYGKntKmuHsfOgAL3BVUybtjAeMH6GNycxTJnm1m
lIm0t3GPOQAPWA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:30:47 2026 by rpki-client