Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
File: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json)
Hash identifier: puNEosqulcvUXdUmBKBNTRtBFzVOW3HinkmY11Tuwro=
Subject key identifier: BD:D0:CF:99:14:18:F7:15:18:57:44:7C:5A:DD:AD:62:A5:4A:41:BD
Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
Certificate issuer: /CN=02c4df5b74d99f9796718435c3afd2220cb56751
Certificate serial: 019E3004F8AE3B20D1AE17888EB9110BEFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
Manifest number: 068B
Signing time: Sat 16 May 2026 09:01:32 +0000
Manifest this update: Sat 16 May 2026 09:01:32 +0000
Manifest next update: Sun 17 May 2026 09:01:32 +0000
Files and hashes: 1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: MKhI5e4rDxbRgiEeNQEC9PK2OJUFJgtyGvoCiLI5RJc=)
2: Eii8h6uaBr6fEXcjaJ5se8NVU0c.roa (hash: WAw9S4sN6yDFY1nBSSz2zmctfGBwQIAYJa1xn10MbIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:f8:ae:3b:20:d1:ae:17:88:8e:b9:11:0b:ef:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751
Validity
Not Before: May 16 09:01:32 2026 GMT
Not After : May 17 09:01:32 2026 GMT
Subject: CN=bdd0cf991418f7151857447c5addad62a54a41bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:57:4e:95:f6:a9:65:9d:d4:5c:7d:d9:bf:
eb:7c:a1:44:b6:6b:73:e9:c2:39:88:fa:e1:0f:1d:
92:74:67:e0:65:f1:94:11:15:43:a8:8b:10:9d:8d:
6b:39:00:e1:3c:92:0e:71:c6:b7:11:8a:64:70:fa:
9d:e9:ea:13:00:a0:d1:f5:0a:52:7f:dc:24:bc:f0:
8c:d7:11:6f:9e:e8:1b:65:57:c5:f9:d8:11:6e:e1:
a2:9a:7e:f1:23:50:26:70:e0:c7:6a:0b:c0:f4:7f:
a7:cc:6c:f6:db:12:ac:00:1e:51:63:e0:d0:6d:dc:
5f:c0:13:17:f5:d5:e5:b9:41:fa:9a:c2:98:ce:dc:
e8:1e:e5:78:e8:dc:2d:19:6a:2a:a0:3d:96:a6:6d:
b1:7c:75:06:d6:a7:d6:39:28:b3:fb:f1:58:e5:0d:
f5:3b:e9:83:a3:e9:22:aa:0a:5e:83:31:b3:50:85:
60:58:29:a3:34:0b:9f:31:c6:18:ec:47:83:6f:d7:
33:27:49:b6:f2:ba:78:d1:87:32:bc:6a:64:f7:58:
da:50:36:50:48:57:72:9d:13:d3:bb:48:ca:2e:a6:
b6:4f:06:23:52:7d:de:a5:55:59:2c:44:d9:c7:86:
5c:ca:d9:10:0f:13:f6:61:bb:6c:34:1a:9c:f2:38:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D0:CF:99:14:18:F7:15:18:57:44:7C:5A:DD:AD:62:A5:4A:41:BD
X509v3 Authority Key Identifier:
keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:72:f4:a2:bc:b3:b3:69:90:92:3f:fb:ea:45:23:8f:0d:0e:
e1:de:66:2d:ae:57:f8:db:68:d0:8b:79:80:1c:13:02:97:b0:
dd:74:e3:24:eb:e9:e2:6c:8f:bc:04:a3:92:b6:29:b9:92:da:
67:47:a0:17:3b:6c:23:4c:be:24:17:97:84:41:55:da:8f:44:
fe:93:c8:41:0b:60:9c:73:25:66:53:d2:2e:bd:85:c9:cd:ed:
4d:79:5a:ce:23:91:ea:6e:9b:9c:ca:7f:03:5d:ff:b1:e0:19:
50:a5:96:f8:d9:c4:ac:cd:d7:18:2d:be:d4:4b:b5:f8:8e:45:
6d:0c:82:73:9a:5f:f0:e0:29:54:90:a2:83:4b:93:50:73:9a:
18:d4:5c:33:47:dc:37:44:b5:10:d7:46:d4:f8:a8:0e:63:81:
53:b4:0b:15:58:77:2f:52:eb:8c:f1:3f:80:a6:fe:d2:66:ee:
e4:c2:65:6e:95:a4:2e:d8:cf:84:7b:cd:14:93:72:f8:8e:df:
84:83:6b:74:9d:25:19:1e:37:f3:49:ad:69:5e:0f:ce:91:ab:
df:47:c7:27:17:91:df:51:9f:fe:84:cc:ad:0c:d4:f9:66:61:
db:34:f6:ab:dc:0f:79:c3:04:e4:ac:34:88:03:57:ac:37:c9:
e0:c4:2a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:46 2026 by rpki-client