Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
File: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json)
Hash identifier: kUd9P+lm4DG5L2Xm4U3q4xH0sHyArpvdT22FWKorW4E=
Subject key identifier: 5A:71:FB:AE:E3:AA:4A:1C:BA:59:E9:87:48:AE:22:08:D0:63:AC:CF
Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
Certificate issuer: /CN=02c4df5b74d99f9796718435c3afd2220cb56751
Certificate serial: 019D38D2C736E10C88D13C6AE586465F8B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
Manifest number: 060B
Signing time: Sun 29 Mar 2026 09:00:30 +0000
Manifest this update: Sun 29 Mar 2026 09:00:30 +0000
Manifest next update: Mon 30 Mar 2026 09:00:30 +0000
Files and hashes: 1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: Z0uTOYpy6IVpa0/03PPKq3Q6owlFdghxbnxLoghCl7A=)
2: Eii8h6uaBr6fEXcjaJ5se8NVU0c.roa (hash: WAw9S4sN6yDFY1nBSSz2zmctfGBwQIAYJa1xn10MbIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c7:36:e1:0c:88:d1:3c:6a:e5:86:46:5f:8b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751
Validity
Not Before: Mar 29 09:00:30 2026 GMT
Not After : Mar 30 09:00:30 2026 GMT
Subject: CN=5a71fbaee3aa4a1cba59e98748ae2208d063accf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:82:34:76:6b:ac:c8:6a:bb:bb:d4:4c:af:7a:
3a:43:ee:37:e5:da:0c:45:77:57:fd:ad:25:31:a4:
dc:75:fa:98:dc:8c:1f:23:bf:5e:09:b5:5a:6b:bb:
96:5b:38:06:37:10:5e:73:ca:d6:5e:3e:0f:55:f7:
16:04:bd:49:56:2c:5e:32:d3:88:51:d4:1a:9b:07:
d8:09:01:4b:2a:f4:46:b7:26:54:50:95:2c:fc:d1:
79:28:8a:a1:5b:4f:71:eb:b6:9d:e7:78:16:04:22:
b3:7e:ec:69:8d:ec:34:b2:31:54:48:0d:1b:e6:63:
4f:46:87:63:c5:92:32:5c:82:f3:2b:08:b1:9e:42:
4e:12:c2:4f:65:9c:eb:fa:28:52:90:23:58:9c:df:
83:93:56:10:20:ea:82:6a:11:03:7c:cc:9d:e5:d8:
25:8c:db:7d:37:77:6f:f3:a7:6c:46:ac:fb:55:6d:
9d:88:51:5e:59:91:bd:82:0e:73:9f:71:5e:c6:91:
c5:42:e1:c0:d3:09:be:54:01:f5:74:c5:63:ca:bd:
61:5a:29:88:d3:1d:e8:aa:75:40:b6:ac:7c:4f:42:
3f:c6:5b:0a:7d:98:70:08:18:4c:3f:07:bb:3d:70:
ec:03:fa:b7:1a:dc:f0:7a:a4:8b:2f:7c:c0:92:35:
23:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:71:FB:AE:E3:AA:4A:1C:BA:59:E9:87:48:AE:22:08:D0:63:AC:CF
X509v3 Authority Key Identifier:
keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:88:66:d7:1c:7a:3d:4f:97:9f:86:46:8f:1a:cc:cd:50:15:
ff:94:81:75:ac:32:c1:79:23:45:27:10:02:46:cf:01:25:f8:
6f:33:b5:60:d5:bb:14:19:8b:30:3c:3c:8f:64:93:34:c7:3e:
ea:42:9a:b9:f5:0b:6d:e1:0b:6f:99:64:27:c9:2f:15:97:40:
a7:c6:04:ca:5e:94:a4:c2:d1:53:85:b2:36:a2:98:5a:87:d9:
1c:ef:97:c0:77:f5:13:8a:a6:6c:93:16:93:57:80:92:df:2d:
c7:77:1a:b2:a7:f6:01:3f:8f:85:7f:71:bd:aa:91:38:3e:67:
29:f1:b2:2c:68:24:e4:9f:54:bb:70:ee:8b:c2:00:2f:40:a5:
8c:5e:c0:b5:ce:f5:4d:81:c3:0b:45:ab:13:e5:df:6a:04:f2:
12:f0:d6:c8:8f:8e:7a:73:47:81:f1:6f:50:8f:e1:8c:e0:8c:
32:41:06:92:a6:fd:d5:d1:4a:0c:33:a8:92:fb:eb:2f:8c:3c:
10:ab:e6:93:e8:92:14:54:3d:22:21:d2:d7:83:a0:93:9a:88:
31:b8:c3:16:a9:45:41:75:75:f7:0f:d8:78:e1:53:98:3a:5b:
2e:f2:37:e2:8f:46:78:32:10:da:3e:4a:69:56:17:68:ef:2f:
d2:c2:06:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:09 2026 by rpki-client