Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
File: ascqc0OS9s95Kz0MPtEYIChvGfQ.mft (raw, json)
Hash identifier: Uv8jCMkMyB2t4Xyq/oM2KmHcowj3frvzWRR1DkeGkx8=
Subject key identifier: FD:CD:A1:63:1F:21:4D:64:CD:F2:03:19:9E:DA:F0:F8:C2:29:FA:DC
Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
Certificate issuer: /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Certificate serial: 019D37F747568F963E4AA81B5895B4562041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
Manifest number: 13CE
Signing time: Sun 29 Mar 2026 05:00:45 +0000
Manifest this update: Sun 29 Mar 2026 05:00:45 +0000
Manifest next update: Mon 30 Mar 2026 05:00:45 +0000
Files and hashes: 1: ascqc0OS9s95Kz0MPtEYIChvGfQ.crl (hash: +VlQQHhIC9toKINIIJ+KVCPovc/3BcT2HkDMPQFwSsU=)
2: zLtpRSkwBaEeDbTwaD6T5utFTwo.roa (hash: SBHcL2OtAzM2LvNd+W8Dn+LVXeCDUc5xiuOmwRuEFKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:47:56:8f:96:3e:4a:a8:1b:58:95:b4:56:20:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Validity
Not Before: Mar 29 05:00:45 2026 GMT
Not After : Mar 30 05:00:45 2026 GMT
Subject: CN=fdcda1631f214d64cdf203199edaf0f8c229fadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:96:b0:af:10:e9:5a:57:70:1d:b8:f0:21:
1e:55:c5:ae:47:43:cf:7c:6a:87:f2:16:3d:c6:32:
9f:69:fb:48:11:43:23:df:b7:28:10:06:39:f7:12:
34:6b:b9:2d:07:5b:73:b8:3b:6a:f2:e1:68:67:8a:
bc:9b:61:ec:94:ee:a7:1d:4c:b7:14:4f:78:aa:1c:
ed:d8:c3:ba:e8:59:57:41:b8:fe:d4:0a:30:c7:db:
59:a9:e1:9c:a2:df:96:3d:eb:12:a8:9d:73:49:73:
af:a4:65:f9:3a:0d:3e:bd:39:04:7a:16:e7:3c:a7:
cc:7f:5d:8e:8d:6c:a6:3d:c6:44:24:56:44:fc:57:
fb:09:93:7d:38:14:d5:5e:a6:90:70:75:75:c0:d1:
6d:98:05:cb:63:e1:b1:00:7c:77:39:ca:25:a3:23:
53:e7:e9:1c:b9:9b:82:50:ea:df:91:d5:8a:18:6f:
14:1b:ae:a5:2b:ff:5b:bc:d2:94:51:6f:85:34:f9:
66:ab:bf:17:ee:f0:18:5b:8d:d3:23:1a:31:15:2f:
17:b5:2c:7b:f6:b9:7e:34:c3:cb:28:3f:7e:31:26:
a1:9b:c0:55:1e:9c:11:86:1d:70:ac:12:59:60:61:
66:54:77:84:59:29:03:f7:2a:1f:21:81:93:0b:6f:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CD:A1:63:1F:21:4D:64:CD:F2:03:19:9E:DA:F0:F8:C2:29:FA:DC
X509v3 Authority Key Identifier:
keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b3:d3:21:69:7d:8a:45:89:a3:91:1a:e2:e7:66:30:39:e7:
5d:d0:04:bc:6a:db:81:4d:82:44:ba:a6:f1:c1:51:a1:42:c5:
2f:42:39:13:36:e7:54:f7:8f:17:d7:6b:fd:10:b4:09:c1:0e:
6e:2b:26:96:57:39:9e:d5:75:a8:05:b0:be:df:61:30:cc:be:
9e:1d:dd:39:73:55:07:e0:98:d4:64:71:cb:d9:e8:05:56:2a:
19:ed:c6:82:28:2b:55:3b:ce:56:f8:b7:52:5f:38:8b:b2:34:
19:be:52:19:5b:98:8c:97:9c:74:df:01:0c:9a:b1:82:a6:19:
80:e8:94:93:39:90:88:1c:40:c5:84:a0:ca:fa:7e:13:0f:8f:
45:15:c4:aa:76:77:60:19:12:24:9a:30:9d:1b:d8:94:b2:f5:
b0:f0:c2:c0:0a:14:57:ec:76:25:f8:a0:85:b8:8e:58:2e:5a:
ec:83:ca:6f:b3:da:fb:90:95:fb:24:ea:ef:79:3c:9e:d6:58:
b7:2d:1c:e4:5e:6e:73:2f:30:49:4b:d1:d5:ea:cd:99:4b:a7:
99:3c:4f:26:d4:63:95:a6:e0:f0:cd:54:ef:64:a6:37:04:93:
66:1f:6e:12:0b:20:11:c3:5a:93:7f:1b:67:41:5d:fe:23:24:
61:c7:66:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0390dWj5Y+SqgbWJW0ViBBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYzcyYTczNDM5MmY2Y2Y3OTJiM2QwYzNlZDExODIwMjg2
ZjE5ZjQwHhcNMjYwMzI5MDUwMDQ1WhcNMjYwMzMwMDUwMDQ1WjAzMTEwLwYDVQQD
EyhmZGNkYTE2MzFmMjE0ZDY0Y2RmMjAzMTk5ZWRhZjBmOGMyMjlmYWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EKWsK8Q6VpXcB248CEeVcWuR0PP
fGqH8hY9xjKfaftIEUMj37coEAY59xI0a7ktB1tzuDtq8uFoZ4q8m2HslO6nHUy3
FE94qhzt2MO66FlXQbj+1Aowx9tZqeGcot+WPesSqJ1zSXOvpGX5Og0+vTkEehbn
PKfMf12OjWymPcZEJFZE/Ff7CZN9OBTVXqaQcHV1wNFtmAXLY+GxAHx3OcoloyNT
5+kcuZuCUOrfkdWKGG8UG66lK/9bvNKUUW+FNPlmq78X7vAYW43TIxoxFS8XtSx7
9rl+NMPLKD9+MSahm8BVHpwRhh1wrBJZYGFmVHeEWSkD9yofIYGTC293hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3NoWMfIU1kzfIDGZ7a8PjCKfrcMB8GA1UdIwQY
MBaAFGrHKnNDkvbPeSs9DD7RGCAobxn0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXNjcWMwT1M5czk1S3owTVB0RVlJQ2h2R2ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mY2Q1MTYtODhmNS00ZTQ4LTlhYjQt
OTNkZjQ1MDAzZTdlLzEvYXNjcWMwT1M5czk1S3owTVB0RVlJQ2h2R2ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mY2Q1MTYtODhmNS00ZTQ4LTlhYjQtOTNkZjQ1MDAzZTdl
LzEvYXNjcWMwT1M5czk1S3owTVB0RVlJQ2h2R2ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrPTIWl9
ikWJo5Ea4udmMDnnXdAEvGrbgU2CRLqm8cFRoULFL0I5EzbnVPePF9dr/RC0CcEO
bismllc5ntV1qAWwvt9hMMy+nh3dOXNVB+CY1GRxy9noBVYqGe3GgigrVTvOVvi3
Ul84i7I0Gb5SGVuYjJecdN8BDJqxgqYZgOiUkzmQiBxAxYSgyvp+Ew+PRRXEqnZ3
YBkSJJownRvYlLL1sPDCwAoUV+x2JfighbiOWC5a7IPKb7Pa+5CV+yTq73k8ntZY
ty0c5F5ucy8wSUvR1erNmUunmTxPJtRjlabg8M1U72SmNwSTZh9uEgsgEcNak38b
Z0Fd/iMkYcdmkg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:23:57 2026 by rpki-client