Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: xrN7xCVEaq20aWO9DKxVJo6t78j6SQc8DVibASka3BI=
Subject key identifier: FD:56:DA:39:F2:03:C8:72:58:97:A5:57:D8:8A:A5:4B:DD:F7:80:3A
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 019D38D34AA6183E846343DD500746DBE190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 09A7
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: 2+bbcd59h2sA4r+EFGozkGthB07LutYedB6Dm+iKufo=)
2: D-pDOX5ZXtdIZnyN7bsDrJe1gOo.roa (hash: JQkmlm3wSiHNU9bdVvmkiiM/K5jDVTyxbR5FyQCgkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4a:a6:18:3e:84:63:43:dd:50:07:46:db:e1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=fd56da39f203c8725897a557d88aa54bddf7803a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:42:db:24:8d:01:a6:3f:2a:11:06:3c:3f:04:
2f:13:ab:85:25:4c:6c:33:70:c0:d1:8e:fc:71:e8:
ba:1f:d9:c6:41:b5:e6:9a:ec:4a:96:f3:4a:7a:a8:
da:2e:9e:73:1a:7f:d3:b1:50:d0:37:a0:f1:86:bb:
13:9e:32:1d:d1:db:e3:2a:71:54:26:33:e7:ab:d4:
ab:09:41:16:4b:72:21:ee:5c:79:20:f2:6a:f2:95:
21:d4:dc:04:a1:15:e1:d1:7b:d8:36:ef:d9:ce:08:
af:9e:48:7c:c2:7f:c1:4f:44:a5:24:d5:63:f6:ca:
e3:af:c5:c2:4d:4e:cb:52:db:d9:08:b7:18:2d:33:
8d:da:15:4e:9c:82:06:08:2e:f3:7e:b6:7b:9b:dd:
93:ff:68:c6:e3:10:28:b7:ee:d1:50:34:8f:9b:be:
41:d1:b3:e9:b6:d4:a8:30:1c:95:03:cc:fc:77:a4:
73:9c:65:e0:8c:5c:1b:05:91:b7:ec:1a:f8:43:0d:
f4:88:38:53:38:11:46:d5:b1:46:6d:3a:c7:bc:4f:
49:ab:40:38:d4:b6:ad:f3:2e:e1:5a:7c:7d:ac:a3:
3e:b8:27:af:a3:d0:93:15:ea:45:23:39:2d:90:7d:
97:7d:42:de:c1:fd:33:cd:18:b6:f0:bc:16:52:19:
4f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:56:DA:39:F2:03:C8:72:58:97:A5:57:D8:8A:A5:4B:DD:F7:80:3A
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2c:f7:b8:9b:e4:29:0f:3a:ac:e3:30:4a:8e:03:5c:93:bb:
73:ab:3b:80:02:fa:eb:73:27:af:f1:a7:13:ae:ee:2d:5a:b5:
a4:01:e5:24:d6:96:25:7c:aa:a3:11:f7:ea:e9:59:7b:cc:62:
db:98:bf:48:3a:29:37:87:cb:00:2c:15:e4:88:26:3c:18:8f:
21:e6:20:85:87:d5:17:81:4e:87:66:88:fc:54:12:3d:dc:fc:
cd:85:e2:c5:7e:16:f7:c7:c9:bd:c2:bb:94:9d:3a:49:f2:0f:
b2:f0:7e:ff:2d:3b:a8:70:6a:c4:66:db:98:6d:e4:2a:49:03:
51:a2:13:20:06:44:b2:f8:97:a1:44:c6:62:b2:92:70:f2:21:
ee:e2:87:9f:f9:30:b7:ff:b6:b9:34:ea:1e:1e:dc:00:85:46:
0e:a7:bb:cf:97:56:1a:e0:14:eb:a5:d6:04:18:ba:74:d1:5d:
44:2f:0b:e2:78:e1:d1:d6:02:91:3b:24:2a:30:c9:29:66:78:
c6:73:f2:65:26:2f:67:df:72:1f:43:a9:5b:00:5b:df:a9:d9:
8a:f3:83:fe:71:08:3b:b2:ca:51:e5:08:e5:3c:89:25:a6:b5:
82:4d:7e:90:b0:b2:5d:3f:ec:ad:c4:70:e0:fc:a2:55:e3:fc:
5d:28:0d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:50 2026 by rpki-client