Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: z02yMWo8J9tlJ993m/5i+PY7ZN7CTqkNH8DfgpsX5MA=
Subject key identifier: D6:05:1A:6A:7D:19:86:EA:FD:7A:57:D7:59:79:96:9C:99:AB:76:51
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 019CC305E31C2E737B44778EFD2FD8BF746D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 11D2
Signing time: Fri 06 Mar 2026 12:01:08 +0000
Manifest this update: Fri 06 Mar 2026 12:01:08 +0000
Manifest next update: Sat 07 Mar 2026 12:01:08 +0000
Files and hashes: 1: 3ko4FNTHS3dYJgP5A7wcLtBHA6o.roa (hash: tK64bc5P7HI3Kfo106hTjUUsaeAWlW26+32w7wIp23o=)
2: M9TO4mLPx12QNOxhU6_MrD2r794.roa (hash: 9JzmkneLii+LpnbpPrpyhCSpEye5RnU2UT4N+IzPQY0=)
3: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: R7OpE+7qTrMJZ5aDERDKSOlISPpMRv4qdOVLQvG6DR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:05:e3:1c:2e:73:7b:44:77:8e:fd:2f:d8:bf:74:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Mar 6 12:01:08 2026 GMT
Not After : Mar 7 12:01:08 2026 GMT
Subject: CN=d6051a6a7d1986eafd7a57d75979969c99ab7651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:ad:bf:d8:3f:0c:d0:33:6c:00:bc:c6:b5:
7c:6a:8f:45:fc:20:a2:d6:d2:66:77:f2:31:82:6e:
f4:5d:b4:d7:cb:df:c7:98:71:41:4a:77:01:48:55:
a0:98:8b:38:45:e4:9e:c0:94:23:95:d7:67:32:56:
de:a3:18:cf:af:7b:43:35:1d:c8:e6:55:1b:b5:14:
d8:c5:d7:3a:f6:73:39:4e:5f:04:12:11:26:9a:13:
60:50:d8:22:31:ca:53:d5:b2:5e:ad:59:1c:11:c9:
5e:1d:64:be:d3:68:68:da:43:bf:88:18:20:2e:e9:
1d:fb:02:50:83:42:e2:ce:9b:a7:7f:98:32:2a:3a:
23:96:9d:2b:ca:5c:d8:c2:7e:78:47:29:4b:08:1d:
55:5a:ad:ae:8a:e0:60:d0:6b:05:53:b6:d8:44:26:
2f:60:c8:b0:30:86:55:18:18:8f:5f:70:8c:25:94:
87:d6:a1:d2:77:09:b0:96:6f:bc:0e:bf:3e:2c:cf:
2d:de:1d:3e:83:58:63:30:f1:b7:02:fd:c6:c5:be:
e6:45:31:f1:f7:aa:ec:99:58:6f:64:42:b9:ab:f6:
fd:b1:7f:fd:e0:7f:a6:52:4c:2d:52:bf:eb:a1:97:
1f:6d:da:8d:44:81:88:2d:c6:84:d5:dc:2c:a6:c5:
4e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:05:1A:6A:7D:19:86:EA:FD:7A:57:D7:59:79:96:9C:99:AB:76:51
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:be:f7:c7:ad:86:61:c8:2f:b0:7e:ee:5d:85:62:51:c2:ae:
c1:79:55:82:3b:f5:f6:da:4d:2f:cf:82:3c:75:d4:5d:54:fc:
13:b8:de:88:69:17:f5:fb:c5:46:02:a7:58:c5:39:99:2c:a4:
71:d7:f0:29:b8:d9:02:1f:5f:e0:88:4e:ee:26:6b:2f:57:b7:
3a:86:b4:0b:bd:bf:8d:e3:55:58:8e:96:04:70:92:0c:1e:cf:
15:64:6f:9f:d2:17:d6:8a:be:14:73:45:1a:1f:72:a6:01:80:
0b:45:e8:29:1c:f9:9d:fb:96:08:a6:74:f3:2e:33:46:d2:21:
a9:93:ee:d4:d9:cd:f0:b2:8e:11:ed:c8:a6:49:2b:51:5e:48:
d3:f3:cd:e8:d8:2d:5d:9c:7b:28:84:6f:c5:7d:27:0c:16:8b:
34:38:ab:ca:ed:dd:73:94:1a:c3:c2:db:52:06:19:e3:53:2e:
84:5b:ea:eb:b2:67:b0:34:7b:56:11:1b:3c:aa:ab:28:f7:1b:
38:dc:62:e4:0f:6f:5d:74:5c:40:29:d8:62:b0:07:6d:af:05:
03:16:b7:b2:cb:53:87:be:ea:db:e3:b1:9c:9d:3f:d2:57:4c:
50:e2:58:b8:42:ca:19:98:ab:c1:8c:85:c0:8a:96:09:f8:be:
bc:9d:fc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 20:20:12 2026 by rpki-client