Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: +FEMlDddRDEZgMuMZayTZg/OzpPwvjnMZayLKu9mlNU=
Subject key identifier: 8C:A5:7D:CA:86:1A:1C:D0:14:81:EE:63:F9:FD:87:15:A4:50:B6:31
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 019F17C2E02AAEEFD745911CD270B137F6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 0A9F
Signing time: Tue 30 Jun 2026 09:01:15 +0000
Manifest this update: Tue 30 Jun 2026 09:01:15 +0000
Manifest next update: Wed 01 Jul 2026 09:01:15 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: MSVGcPrWbcDOnhsT2Dh69EHmiz81X3PPz2NnilSNq6M=)
2: D-pDOX5ZXtdIZnyN7bsDrJe1gOo.roa (hash: JQkmlm3wSiHNU9bdVvmkiiM/K5jDVTyxbR5FyQCgkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:e0:2a:ae:ef:d7:45:91:1c:d2:70:b1:37:f6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Jun 30 09:01:15 2026 GMT
Not After : Jul 1 09:01:15 2026 GMT
Subject: CN=8ca57dca861a1cd01481ee63f9fd8715a450b631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:21:71:6a:b2:6d:53:94:77:88:80:b8:b8:
fb:8b:44:25:af:27:0b:f8:c4:e3:b2:f1:f7:11:56:
8a:0b:c4:8b:77:72:49:ea:d4:df:dc:27:75:9c:03:
f7:a2:95:ba:6a:4a:38:0d:0e:59:20:c4:6f:25:d5:
df:c2:36:a1:33:db:ad:fa:e0:b2:4f:31:57:00:3e:
b2:57:c9:a8:d1:00:11:94:ae:52:8f:fd:18:aa:a8:
70:39:c7:97:d5:dc:88:02:e4:85:e6:d6:c5:b0:95:
92:aa:3e:97:f8:0f:21:75:89:13:20:c1:ff:cf:c9:
57:52:c9:58:d6:62:36:f4:ba:06:50:cf:ff:4d:6c:
57:44:d1:86:ef:67:a2:86:92:61:7b:b7:77:5e:78:
f5:b4:07:8c:0c:80:97:05:63:00:b8:7d:8f:d5:39:
41:dc:2a:a3:63:63:58:91:f4:d5:96:0c:6a:3b:85:
c2:36:19:cd:5b:ff:a9:9d:10:ed:5b:2f:95:b6:5f:
ac:dc:90:8f:ab:1b:bc:86:8f:dd:03:4b:9d:8b:ed:
3b:7f:25:c8:a9:8c:da:30:5c:c9:86:46:03:a0:0e:
84:7f:33:84:54:4c:95:c0:79:54:00:3d:c2:36:6b:
e0:0b:b5:15:ff:83:c5:96:93:38:cd:23:91:cb:a2:
4d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A5:7D:CA:86:1A:1C:D0:14:81:EE:63:F9:FD:87:15:A4:50:B6:31
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8d:ca:8b:31:93:f0:b1:2b:74:46:bd:cd:a0:a9:d8:bc:87:
52:f5:5f:13:e7:d1:52:45:ee:c4:21:b8:46:18:d5:a4:ed:23:
8f:c5:24:bf:9f:7b:36:db:f6:ec:65:f6:96:76:87:81:77:43:
fb:6e:a2:c4:e1:4b:6b:2b:2f:8a:5c:c9:2f:98:8e:54:6c:9a:
4f:1e:d2:37:c8:9f:32:65:f0:40:4f:63:f4:86:ef:7c:53:da:
15:8c:d5:f9:ff:69:f8:b1:d9:f5:f7:c6:28:1c:24:02:1c:4f:
db:3a:84:c5:18:55:6a:38:e2:2c:68:0b:e2:19:f6:05:b3:c3:
97:e5:23:fd:63:1b:57:5b:20:cb:b9:d2:02:01:46:03:2e:6a:
0c:88:29:dc:f2:51:16:d3:f5:9e:30:4c:37:f9:74:63:b3:d0:
2f:dc:de:84:01:59:09:90:13:63:53:5d:5c:35:4c:e1:6c:03:
b7:69:15:40:de:57:95:c5:bd:10:e3:9c:f7:a3:bf:7d:8d:e1:
bf:fd:83:04:f0:aa:9a:74:0d:6e:ae:79:5a:2b:2b:89:49:a4:
ae:df:42:cc:a6:40:da:4f:e8:cd:9a:b2:99:9b:59:61:3a:f5:
65:02:a6:5e:38:92:fa:3c:5f:d1:2a:ea:2a:9b:6d:16:70:4c:
af:13:ff:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XwuAqru/XRZEc0nCxN/b4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzE2OGVjNTk3YTNhMzc3NDJjYjRkZWQ3ODM1NmYxNDU0
ZjJiYWQwHhcNMjYwNjMwMDkwMTE1WhcNMjYwNzAxMDkwMTE1WjAzMTEwLwYDVQQD
Eyg4Y2E1N2RjYTg2MWExY2QwMTQ4MWVlNjNmOWZkODcxNWE0NTBiNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw70hcWqybVOUd4iAuLj7i0QlrycL
+MTjsvH3EVaKC8SLd3JJ6tTf3Cd1nAP3opW6ako4DQ5ZIMRvJdXfwjahM9ut+uCy
TzFXAD6yV8mo0QARlK5Sj/0YqqhwOceX1dyIAuSF5tbFsJWSqj6X+A8hdYkTIMH/
z8lXUslY1mI29LoGUM//TWxXRNGG72eihpJhe7d3Xnj1tAeMDICXBWMAuH2P1TlB
3CqjY2NYkfTVlgxqO4XCNhnNW/+pnRDtWy+Vtl+s3JCPqxu8ho/dA0udi+07fyXI
qYzaMFzJhkYDoA6EfzOEVEyVwHlUAD3CNmvgC7UV/4PFlpM4zSORy6JNLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIylfcqGGhzQFIHuY/n9hxWkULYxMB8GA1UdIwQY
MBaAFALBaOxZejo3dCy03teDVvFFTyutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDIt
NjFkNTc1MjQxYzFmLzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDItNjFkNTc1MjQxYzFm
LzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm43KizGT
8LErdEa9zaCp2LyHUvVfE+fRUkXuxCG4RhjVpO0jj8Ukv597Ntv27GX2lnaHgXdD
+26ixOFLaysvilzJL5iOVGyaTx7SN8ifMmXwQE9j9IbvfFPaFYzV+f9p+LHZ9ffG
KBwkAhxP2zqExRhVajjiLGgL4hn2BbPDl+Uj/WMbV1sgy7nSAgFGAy5qDIgp3PJR
FtP1njBMN/l0Y7PQL9zehAFZCZATY1NdXDVM4WwDt2kVQN5XlcW9EOOc96O/fY3h
v/2DBPCqmnQNbq55WisriUmkrt9CzKZA2k/ozZqymZtZYTr1ZQKmXjiS+jxf0Srq
KpttFnBMrxP/MQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:13:04 2026 by rpki-client