Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: iTujZh0naN3xnYh5w/eu5We+ToqiACWjZ1aRi42LiyA=
Subject key identifier: D6:CE:7F:8B:DC:38:52:A1:92:D5:35:17:F1:21:08:B4:53:D8:73:32
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 019E30053264B5EBD77D6D5CC40E82D13594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 0A27
Signing time: Sat 16 May 2026 09:01:47 +0000
Manifest this update: Sat 16 May 2026 09:01:47 +0000
Manifest next update: Sun 17 May 2026 09:01:47 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: cZhtZY6J0IZrEmxgEzmg+x1lE2XqkK2iEo05gOJ0JF8=)
2: D-pDOX5ZXtdIZnyN7bsDrJe1gOo.roa (hash: JQkmlm3wSiHNU9bdVvmkiiM/K5jDVTyxbR5FyQCgkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:32:64:b5:eb:d7:7d:6d:5c:c4:0e:82:d1:35:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: May 16 09:01:47 2026 GMT
Not After : May 17 09:01:47 2026 GMT
Subject: CN=d6ce7f8bdc3852a192d53517f12108b453d87332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:80:dd:16:5a:65:6c:1e:5a:4c:b5:b8:b9:04:
7a:d9:83:65:20:ce:48:66:16:42:60:c7:46:5b:15:
df:c5:7f:c9:bf:cd:dc:3c:fa:fe:4d:8c:ea:62:29:
da:bc:9b:c9:2a:ac:38:a4:7e:26:c3:1f:c2:40:6d:
2b:2b:76:63:13:0c:6e:2a:05:b0:75:e0:9d:87:a4:
72:77:a8:b9:50:09:7e:9d:61:26:8c:c9:d7:10:c8:
1c:2b:e7:da:1b:14:7a:d6:85:ad:87:cc:ab:c9:a0:
1f:65:0a:0b:d6:26:b7:cc:c7:9e:b8:ca:4f:3b:0c:
50:78:26:0e:5a:64:23:a4:00:31:99:e6:eb:7a:1c:
15:e0:55:d6:b5:4d:d1:9c:c0:57:27:85:a4:21:09:
70:87:27:2b:0d:13:10:58:d8:7c:62:92:6b:b7:c4:
d3:8d:30:2d:79:15:5d:2b:d3:f0:21:ca:6b:b8:4b:
5b:dc:9b:e9:ee:31:ee:5b:01:e3:b0:e0:e4:ff:6d:
8a:04:58:45:ad:e4:f2:93:d8:42:5c:26:45:d9:a3:
4a:12:95:f5:04:4a:f8:a8:59:c2:df:80:78:ef:91:
b9:21:57:09:b6:56:04:ec:16:8d:58:4a:d8:63:d2:
27:cb:be:9b:23:4d:2b:3b:05:27:81:01:43:02:0a:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CE:7F:8B:DC:38:52:A1:92:D5:35:17:F1:21:08:B4:53:D8:73:32
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2c:80:dc:a7:20:2a:05:4f:2f:c0:6d:d0:d7:26:b8:d2:57:
1e:1c:6c:c1:c5:ce:8f:e9:13:a1:45:ca:e3:c6:7a:26:66:c5:
8c:22:00:24:c7:e6:00:e7:55:a2:c5:ad:7d:3f:46:69:fd:80:
00:84:5b:4c:75:97:b6:d7:3e:7c:85:fc:12:66:d9:f0:f6:0c:
e2:76:6f:f7:93:44:51:cf:35:78:65:15:9f:d9:65:43:cb:f9:
48:e7:19:5c:92:7e:07:0a:0e:72:ea:31:5e:9b:f4:87:5e:15:
0f:2f:d5:97:a6:ac:f1:3e:e2:29:e8:a3:85:61:31:a6:70:4b:
cf:df:42:9d:42:61:84:35:80:91:84:04:3d:aa:b0:51:13:2b:
6d:b6:64:d1:6f:f9:9c:f5:b5:4c:93:87:2f:07:ea:35:42:58:
f9:4d:a7:82:81:67:8e:79:75:87:9e:0f:5d:a6:9b:96:90:9e:
3f:f9:70:bb:13:58:b8:af:3b:4b:28:a3:8e:4a:14:44:5a:b5:
da:15:7e:a9:85:21:eb:cd:ba:fb:a7:5e:90:a7:d3:bc:6f:47:
e3:34:76:69:68:44:04:e4:5a:74:a0:44:e3:b0:cc:30:e6:62:
ed:ca:fb:95:9a:e5:43:e0:8e:45:37:9f:a4:c5:ba:d9:16:ee:
0b:c0:18:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:12 2026 by rpki-client