Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
File: mAScy5olSKAa-jAXQVFXSgx6QSw.mft (raw, json)
Hash identifier: /Rp5aneE6E/JJyQKjfVlEcokep/ZxKjZ/gahtOqOl74=
Subject key identifier: 17:3E:6A:BA:8A:52:A8:95:B7:66:42:21:0E:A1:40:22:9E:E7:BC:BD
Authority key identifier: 98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
Certificate issuer: /CN=98049ccb9a2548a01afa30174151574a0c7a412c
Certificate serial: 019F11C0D452ECD655B910FE884FBFBEDCC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
Manifest number: 0116
Signing time: Mon 29 Jun 2026 05:01:17 +0000
Manifest this update: Mon 29 Jun 2026 05:01:17 +0000
Manifest next update: Tue 30 Jun 2026 05:01:17 +0000
Files and hashes: 1: mAScy5olSKAa-jAXQVFXSgx6QSw.crl (hash: TTF4ZUcbZ4mBtGSfS2hV7gr7Aigt4GA0rXUzBcInECQ=)
2: v3rr5t_ahN3SGVp2ApT1qF3-fwA.asa (hash: RejTRkyxSV+Llox1LpfU1092WFQtRS38pK5lWPMIQNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:c0:d4:52:ec:d6:55:b9:10:fe:88:4f:bf:be:dc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98049ccb9a2548a01afa30174151574a0c7a412c
Validity
Not Before: Jun 29 05:01:17 2026 GMT
Not After : Jun 30 05:01:17 2026 GMT
Subject: CN=173e6aba8a52a895b76642210ea140229ee7bcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:3a:69:27:81:c9:8e:55:f8:44:43:91:c5:
aa:d8:a5:ca:7a:b2:27:08:a8:88:1f:b0:2a:81:50:
5e:54:e7:dd:e0:83:e2:bf:7d:84:50:01:93:99:05:
f4:2a:d5:11:c1:4a:0d:37:b1:fe:86:45:aa:99:d3:
2d:9c:65:a2:0b:65:58:8a:ee:71:74:b3:c2:d1:00:
c5:ab:c4:3a:63:1d:07:01:76:65:d4:11:24:6d:1d:
ff:6f:b1:b5:44:57:32:34:64:dc:b7:8c:f6:2a:64:
38:68:f8:c6:42:86:dc:05:65:3d:fe:b1:62:91:91:
e1:cb:fc:72:84:ad:fa:08:55:55:71:d4:b5:57:7d:
73:70:87:2d:95:05:2a:8d:d1:74:77:65:4a:b8:b2:
dc:d8:7a:6d:51:2b:f4:d8:42:ae:84:1f:22:e2:0b:
14:3d:89:82:c9:3d:59:4f:84:c4:a0:07:ca:ac:35:
ca:43:a7:f2:e2:94:fb:c8:1e:28:9d:65:ae:4f:85:
f0:06:af:51:c8:15:07:66:e6:2d:1d:48:d2:51:b4:
4d:c1:d7:85:13:bc:61:27:f3:43:f9:7c:8f:30:47:
00:0b:0c:68:c8:a3:d0:83:83:e7:8a:8e:34:83:90:
2e:cb:a8:00:f1:18:89:bb:93:f6:99:dd:73:82:7d:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3E:6A:BA:8A:52:A8:95:B7:66:42:21:0E:A1:40:22:9E:E7:BC:BD
X509v3 Authority Key Identifier:
keyid:98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:57:a6:44:6d:e7:22:0c:73:28:94:40:38:d9:b8:a5:7d:50:
82:7f:01:49:3a:a9:fc:b8:ae:74:9f:22:95:82:e5:6d:95:78:
4c:0a:72:4a:0c:34:34:a9:97:d6:1b:35:91:dd:47:ee:0c:71:
4f:de:53:38:70:c4:a6:5d:5c:2b:bd:1d:a0:98:a8:41:9f:aa:
87:84:d5:9f:ae:fe:17:eb:82:23:3e:31:bc:60:ef:1d:22:e8:
0b:a3:e0:9e:7a:1f:30:22:2d:43:06:90:a8:95:6a:43:55:e6:
58:ac:07:a5:4f:48:73:23:4e:6a:4b:89:15:57:09:10:20:79:
3f:29:0d:47:18:96:4f:04:2b:9a:08:ad:e0:6e:99:46:a4:35:
76:c0:1e:3e:fe:50:3c:e9:f5:cb:37:08:5c:e8:23:77:df:66:
27:da:14:58:ec:bd:19:a0:a1:49:0e:31:17:e1:e2:e7:a8:d6:
a5:d9:93:1c:b0:f1:86:9c:c5:58:cc:e1:18:04:20:30:17:c1:
66:80:09:99:e6:e5:92:4b:20:47:93:1f:6a:c0:08:62:34:93:
fa:ad:52:5f:33:f5:9c:60:76:6d:4a:77:e8:53:56:dd:a6:de:
c4:12:13:bc:a8:b8:99:3f:23:85:b6:80:52:95:ae:77:a3:0e:
af:d1:e4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:49 2026 by rpki-client