Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
File: AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json)
Hash identifier: 0ue3uz99EKrUt1Y+fxTJ5cuV+ER0V5/bdHVBcLXme3o=
Subject key identifier: E1:10:31:A7:39:6A:8D:4D:97:8A:95:A1:00:34:9B:CC:0A:41:B8:B7
Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
Certificate issuer: /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Certificate serial: 019F9059FAAD11CC8F4EE9C90F199FA7A3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
Manifest number: 0ABF
Signing time: Thu 23 Jul 2026 19:00:43 +0000
Manifest this update: Thu 23 Jul 2026 19:00:43 +0000
Manifest next update: Fri 24 Jul 2026 19:00:43 +0000
Files and hashes: 1: 4Vqqb5k4j9r4FD-Q4TgHLzGBoT4.roa (hash: DbSLlNcKnNNqECQ34MGqDl+9nVOY0HjH0tWr/mR4x4I=)
2: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: VYVTlYR+63PzSSJHC3JBvC2kmU6BHb816sNizg6r82c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:fa:ad:11:cc:8f:4e:e9:c9:0f:19:9f:a7:a3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Validity
Not Before: Jul 23 19:00:43 2026 GMT
Not After : Jul 24 19:00:43 2026 GMT
Subject: CN=e11031a7396a8d4d978a95a100349bcc0a41b8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:c4:be:2f:60:66:39:35:75:b8:e5:96:ec:
94:98:3e:5c:0a:52:6e:7d:3c:cf:3f:6f:37:c2:df:
41:5c:1d:f7:5d:94:fd:88:3e:63:f3:1b:91:a6:84:
7a:a2:57:5c:02:2f:b6:25:9e:d5:99:70:5e:cb:6a:
52:0a:e9:8a:3c:ec:e5:94:40:73:18:75:a3:22:b8:
40:44:92:4d:ba:dd:90:96:5b:ae:e9:89:e9:39:68:
a9:34:3e:db:a0:5f:db:63:d0:4e:e9:58:3f:5f:66:
ca:0c:17:63:33:22:c5:46:73:0d:8e:fe:7d:86:88:
48:75:d6:29:cd:5d:01:d9:1e:87:0e:91:af:b5:2e:
e4:2a:d8:64:18:21:f5:f3:df:47:e1:97:58:21:59:
ac:bd:02:1b:b3:72:35:bf:a5:ca:a5:a2:b6:6e:c7:
b4:07:99:ea:d3:25:f9:c0:80:0e:a5:5b:be:74:12:
af:bc:03:ce:61:74:c4:13:39:fe:d5:1e:e3:5f:e2:
f1:35:7a:74:0c:f8:91:14:ed:dd:10:0f:89:94:23:
ff:d8:cb:9d:13:05:48:86:9b:39:2e:46:f4:81:94:
01:c9:e7:aa:7a:7f:47:94:db:ea:b3:46:87:3f:7b:
9e:52:71:d3:0b:08:cb:b3:cc:57:70:9d:cd:72:6d:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:10:31:A7:39:6A:8D:4D:97:8A:95:A1:00:34:9B:CC:0A:41:B8:B7
X509v3 Authority Key Identifier:
keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:28:83:2c:54:7e:d2:14:54:3b:e3:40:af:0a:5b:e9:cd:03:
f3:15:d3:6c:7a:bd:17:99:7d:b4:fb:ef:5f:08:a1:de:be:03:
d5:c2:a9:66:2e:af:e2:0d:73:e4:f5:11:6d:1f:2e:93:b1:78:
96:bb:7c:f7:e6:66:99:0d:37:f0:fe:cc:14:d0:ad:1a:e0:28:
af:bb:af:a1:7e:a4:08:70:8f:d9:8d:ce:6a:55:1c:59:a9:72:
cd:95:19:ab:b5:5d:47:8e:07:ef:48:46:e0:75:bd:04:2f:9c:
90:aa:2e:31:52:2e:e6:5c:92:c1:5e:dc:7f:86:f9:99:de:45:
57:16:6b:f9:e9:0c:0b:ce:af:d2:97:71:00:b7:d7:25:2b:88:
31:eb:94:a1:d4:1e:17:4d:d5:6c:36:39:d8:40:f5:80:71:50:
8f:f8:72:31:ec:05:bb:c8:f1:ef:b8:44:11:c2:6a:54:ce:3f:
3f:79:0c:ac:45:0e:0e:dd:33:18:d7:41:25:67:a0:dd:90:34:
e1:bc:a3:1f:d3:7d:1f:fe:aa:4f:be:e8:95:6c:58:02:da:01:
a7:ba:4b:af:28:71:96:f7:cd:b4:c1:6f:96:4f:83:f7:37:8a:
20:c4:f7:29:8a:d4:3a:26:96:e3:9a:5b:d6:be:75:b0:43:72:
04:94:f8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:05 2026 by rpki-client