Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: typ7kH/T9M3KHTpJPjGYDHPPKEUUesdsRjZEkgtWHRs=
Subject key identifier: D2:3E:E8:B1:F1:CC:D3:05:81:35:1F:B5:57:BF:E0:36:CB:64:49:B6
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 019E92821FBF3BBEDD3473A7FF6CE9AB325D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 12C2
Signing time: Thu 04 Jun 2026 12:01:01 +0000
Manifest this update: Thu 04 Jun 2026 12:01:01 +0000
Manifest next update: Fri 05 Jun 2026 12:01:01 +0000
Files and hashes: 1: 3ko4FNTHS3dYJgP5A7wcLtBHA6o.roa (hash: tK64bc5P7HI3Kfo106hTjUUsaeAWlW26+32w7wIp23o=)
2: M9TO4mLPx12QNOxhU6_MrD2r794.roa (hash: 9JzmkneLii+LpnbpPrpyhCSpEye5RnU2UT4N+IzPQY0=)
3: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: BA7twxShR1fE93/83EpTxaHyaRItZYTUHv3h5PD0ZGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:82:1f:bf:3b:be:dd:34:73:a7:ff:6c:e9:ab:32:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Jun 4 12:01:01 2026 GMT
Not After : Jun 5 12:01:01 2026 GMT
Subject: CN=d23ee8b1f1ccd30581351fb557bfe036cb6449b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:40:a7:c4:30:43:14:a4:bd:62:92:71:23:e9:
c7:53:7c:69:0e:7f:bd:db:b0:ab:3c:e8:74:01:2d:
ed:bb:2b:65:aa:c7:81:86:3c:e6:4e:45:e4:c8:6b:
ed:9a:86:34:bb:09:10:d8:eb:51:c6:92:0d:aa:b9:
f4:5c:47:fa:23:13:3d:69:ec:6a:16:f9:df:dc:6b:
6f:67:d5:ae:88:2a:c5:2e:0a:70:70:ae:f3:3e:d3:
cf:8a:41:88:3a:75:6d:e3:d9:15:63:9c:23:47:69:
ef:f8:d2:18:92:6a:26:4a:ea:97:56:69:35:ef:57:
05:c5:46:a2:be:49:01:4e:4a:f6:f1:63:cf:ee:a7:
37:ca:34:a3:14:ab:e6:d5:a1:f0:8c:41:4c:f4:cc:
b0:0e:f5:b3:0c:06:03:70:bc:80:02:53:b8:1e:51:
4a:1b:c6:05:81:19:c9:26:6f:b0:1a:51:e5:f2:32:
97:b0:82:bc:fa:da:88:5a:97:e3:60:99:a4:fc:d2:
21:65:13:dd:5b:ea:27:79:c2:ee:80:5b:15:c8:1a:
44:00:d9:92:56:27:0c:44:13:6d:c3:a2:e7:a3:70:
99:61:d5:a1:0a:38:9e:8e:7a:1d:f4:b4:e8:05:39:
b0:f1:23:66:89:82:24:23:47:41:b6:46:ed:88:af:
ae:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3E:E8:B1:F1:CC:D3:05:81:35:1F:B5:57:BF:E0:36:CB:64:49:B6
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:71:4a:8c:be:3e:d0:c6:81:23:e0:d7:5b:90:07:99:e9:c8:
07:c3:97:ad:52:69:ff:d0:b9:be:33:f1:b7:19:29:6d:42:fc:
f4:8a:9d:d9:0a:bf:a9:4d:47:8e:76:fd:be:98:35:45:05:1a:
16:3e:d9:c8:f7:20:16:96:c5:7a:2f:47:74:34:29:b3:e5:1b:
52:f4:41:2c:18:01:bc:9e:37:b1:44:f2:dc:72:d2:78:9d:8f:
fc:f0:73:00:b1:50:6a:27:cd:93:74:b6:c6:b0:70:04:4e:58:
7b:b3:ac:74:a8:05:64:9e:5a:85:d0:5b:3f:cf:52:8f:54:d2:
55:1f:98:b3:55:ff:4c:1c:42:f6:12:d4:e9:fb:68:07:1a:1c:
f9:f7:43:b0:80:4a:70:3c:5a:e4:a4:4c:6b:29:fc:b0:7a:00:
00:cb:28:4e:db:d7:90:c1:51:08:dc:d2:b3:dc:24:1b:33:12:
45:ed:40:d6:5e:1a:25:6b:08:06:55:ff:fc:61:a2:a3:bf:9c:
c0:50:86:f5:ee:58:25:fe:3b:c3:48:3c:33:bb:7b:d3:e3:00:
f8:ae:4f:25:93:56:04:87:4f:72:e5:50:25:b8:b5:37:c3:10:
c5:34:aa:21:be:98:72:f1:d3:c7:f2:c6:5e:da:7b:0a:32:65:
db:d0:e6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:01:22 2026 by rpki-client