Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
File: ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft (raw, json)
Hash identifier: 1XbYIR+SSKgIJaHpigCiXdF4S0kG+NdqGB/3eqjy0YI=
Subject key identifier: B2:37:7E:2C:D1:CE:57:66:10:1D:8A:44:97:47:86:C8:AB:64:F3:D0
Authority key identifier: 01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22
Certificate issuer: /CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
Certificate serial: 01A13DB7ECAC7665F3011EBDA7C481D5C0C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
Manifest number: 0BD3
Signing time: Thu 15 Oct 2026 04:00:26 +0000
Manifest this update: Thu 15 Oct 2026 04:00:26 +0000
Manifest next update: Fri 16 Oct 2026 04:00:26 +0000
Files and hashes: 1: ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl (hash: 3qygk/LTRLIGYUK5QLL+KDvWBUzu0fpO8Yt64ZXhDww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:ec:ac:76:65:f3:01:1e:bd:a7:c4:81:d5:c0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
Validity
Not Before: Oct 15 04:00:26 2026 GMT
Not After : Oct 16 04:00:26 2026 GMT
Subject: CN=b2377e2cd1ce5766101d8a44974786c8ab64f3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:8b:2f:e0:4b:7b:af:af:39:61:0e:dd:87:
fc:99:e7:b2:32:13:a9:c6:7a:70:22:cb:b2:fb:ea:
95:f3:d1:a4:6a:75:93:ba:51:74:8f:9f:de:a8:83:
0a:b6:8e:39:af:1c:9c:51:93:a4:f9:18:33:2d:2d:
7c:52:69:f3:d6:36:0d:4a:87:72:24:be:17:b0:98:
96:9e:f1:c9:99:5a:62:c2:f7:a3:aa:c6:65:79:39:
18:ae:de:80:bb:a9:96:a6:3e:be:7a:48:3c:07:ec:
4f:97:1a:ec:7f:41:e0:8f:3e:74:21:2a:f9:61:3b:
67:3c:1d:5a:6f:5b:fa:0e:fc:1b:1b:90:73:f5:47:
e5:0d:a5:ce:6f:69:04:fb:68:f0:98:a8:dd:1c:f6:
d6:f5:a5:d4:a3:26:0f:87:b1:bd:3c:81:94:0b:b8:
0e:5d:f3:71:94:aa:c8:7b:9a:ee:b6:cb:92:a0:9b:
bb:b1:0d:5f:29:88:bd:1d:03:ef:f6:26:b2:7f:bd:
0c:ae:df:59:88:70:e3:39:e7:e0:1f:c6:a3:01:23:
b4:88:ca:4d:14:d1:03:f4:c7:5a:41:68:f3:af:82:
e9:e4:e9:14:14:3c:be:e2:25:7c:2f:78:cb:35:79:
bb:1b:f3:9b:1c:f4:ca:92:e2:e8:b8:9d:67:84:62:
85:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:37:7E:2C:D1:CE:57:66:10:1D:8A:44:97:47:86:C8:AB:64:F3:D0
X509v3 Authority Key Identifier:
keyid:01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:eb:24:c9:c2:02:a3:f3:f3:db:6f:d3:ae:1b:3f:79:ea:16:
26:10:a6:d0:e2:33:0f:d2:25:83:eb:03:68:9d:22:00:26:50:
4d:25:2c:d6:57:bd:16:66:e7:02:de:af:d4:d7:ad:3b:91:63:
5f:51:3c:ba:a8:19:1d:32:3d:e0:9b:0c:47:45:82:66:64:eb:
12:2d:51:0d:10:d7:56:7a:1f:cf:ab:a0:ca:58:be:24:70:26:
2f:c1:fa:15:46:a5:cb:fb:b1:42:8f:82:b0:00:8b:3c:a2:85:
fc:2c:df:f8:20:be:b6:d1:8a:e4:62:0c:b7:8e:50:31:b6:d0:
ec:ed:e0:d0:d6:0c:c2:8a:58:4b:15:93:7e:cd:2e:9a:57:96:
4b:d0:21:06:b3:66:17:5e:98:87:72:dd:88:6b:80:c6:71:80:
2b:eb:14:30:52:d1:e5:aa:7c:c3:8a:50:42:9c:ca:28:da:85:
10:43:bd:b0:56:1c:a7:a5:0f:bc:a4:47:22:c3:9b:32:4e:fc:
31:bf:fd:73:de:7c:0e:4b:b2:d5:81:9a:3e:b2:3c:8f:4b:f6:
0f:f8:68:e3:43:b9:ce:be:9d:95:1d:1c:33:ce:14:75:9f:87:
24:a0:f8:14:05:fa:f3:43:3e:51:9c:25:b8:bb:c6:16:78:c8:
85:d2:13:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:48 2026 by rpki-client