Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
File: mAScy5olSKAa-jAXQVFXSgx6QSw.mft (raw, json)
Hash identifier: PaAQ4lNY92WXsI0+pS7lA4ivL4GLWnAKHWkXFGCydAk=
Subject key identifier: 9D:C0:F4:4B:3F:8A:1B:74:C8:4A:03:7A:DF:92:1F:34:98:83:7B:12
Authority key identifier: 98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
Certificate issuer: /CN=98049ccb9a2548a01afa30174151574a0c7a412c
Certificate serial: 019D389BA85B714F664984E2CAD23F58F57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
Manifest number: 21
Signing time: Sun 29 Mar 2026 08:00:18 +0000
Manifest this update: Sun 29 Mar 2026 08:00:18 +0000
Manifest next update: Mon 30 Mar 2026 08:00:18 +0000
Files and hashes: 1: mAScy5olSKAa-jAXQVFXSgx6QSw.crl (hash: O1ATpl23G2fXCzr8gWJVMFxLsQnK+asf28nYOKtOlQ4=)
2: v3rr5t_ahN3SGVp2ApT1qF3-fwA.asa (hash: RejTRkyxSV+Llox1LpfU1092WFQtRS38pK5lWPMIQNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a8:5b:71:4f:66:49:84:e2:ca:d2:3f:58:f5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98049ccb9a2548a01afa30174151574a0c7a412c
Validity
Not Before: Mar 29 08:00:18 2026 GMT
Not After : Mar 30 08:00:18 2026 GMT
Subject: CN=9dc0f44b3f8a1b74c84a037adf921f3498837b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:eb:94:d7:eb:12:4e:ae:cf:2f:43:9b:40:
31:79:c4:13:e4:bf:bb:d7:bc:17:c2:9d:55:a8:42:
26:88:42:b8:e6:86:22:1b:bd:4b:48:d5:73:be:02:
fb:2a:e4:1f:b1:30:e8:21:4f:b5:52:8d:f1:fa:b4:
da:ae:81:36:2d:3e:60:13:7d:38:06:39:1d:d5:e6:
86:84:19:1d:e2:31:80:dc:95:8f:0f:7e:a2:6e:28:
da:04:8d:a0:54:80:ef:9c:dd:92:47:12:fa:ed:46:
53:ab:48:be:73:cc:03:8a:cb:f5:c8:5c:af:7c:ca:
28:50:82:2d:5b:ef:d1:54:4c:f4:92:fc:75:63:36:
61:8b:58:ed:a2:76:b3:e2:95:54:10:73:dd:51:b5:
67:30:2d:73:e5:45:da:f7:82:f9:96:6b:8d:1f:85:
c6:80:45:d4:67:16:d7:0f:d0:4d:46:0a:ab:a8:4a:
5f:22:64:0f:b0:05:14:ed:e6:95:5f:98:4b:0e:3a:
74:a3:04:f6:0a:a9:bf:e4:cf:d0:fe:54:cf:34:9c:
49:64:aa:65:37:07:a3:d9:34:a6:bb:83:c2:95:8c:
ce:8d:01:31:db:0e:9c:16:e0:51:e5:31:7e:a2:23:
da:8a:19:1a:ce:1c:41:cb:91:3d:26:6a:7b:54:0e:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C0:F4:4B:3F:8A:1B:74:C8:4A:03:7A:DF:92:1F:34:98:83:7B:12
X509v3 Authority Key Identifier:
keyid:98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:83:84:0b:aa:fd:c0:9c:4d:32:a2:1a:15:c3:8b:aa:2b:0a:
bc:f0:a4:b9:e2:a6:63:7c:ba:36:80:99:a0:42:4d:48:98:e6:
fc:6f:93:71:f8:8a:59:61:ed:70:1c:bc:61:1e:28:e6:ff:85:
a5:c0:d1:02:e6:a1:73:0b:40:a9:37:fa:da:a1:d1:68:2c:33:
c9:7b:57:70:50:d1:aa:da:d3:d9:58:85:28:2f:0c:bc:06:43:
72:c1:34:ed:61:3f:24:8f:95:67:4c:46:3e:06:85:7f:89:98:
26:5d:8c:3d:79:26:dc:08:32:a5:8e:1f:2c:10:e9:14:2c:9c:
85:40:d3:da:b8:92:e0:b3:f1:44:8d:51:34:e7:bc:e7:a5:c0:
fb:3e:6e:fd:29:d3:a7:ad:28:89:7e:5c:b4:3c:51:fa:1f:ae:
d9:66:3d:c4:55:5d:87:4f:38:e7:be:93:3a:69:be:46:6e:85:
46:a5:bd:60:b7:11:f1:b0:dc:9d:0f:a8:f9:f8:9e:c0:0a:5c:
1f:40:d6:20:22:1e:80:22:ab:9b:f6:91:e9:16:24:2b:c9:01:
73:af:fb:49:c9:9b:db:2a:a2:69:1d:be:b3:b4:b3:38:eb:03:
39:f4:78:16:72:9b:4c:76:ba:81:9e:a0:cb:58:e4:e1:45:e8:
41:3b:6e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:41 2026 by rpki-client