Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: CMekx0S1XN4mkMzyd7Rc2D0LHYhsWEO56kwrrFNi6+E=
Subject key identifier: 8C:0D:51:CE:43:CA:F6:D3:14:21:55:18:50:8D:71:C7:31:04:61:5D
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 01A17BF2DA7EAC57FCFEF1810349E40AB8AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 1444
Signing time: Tue 27 Oct 2026 06:01:15 +0000
Manifest this update: Tue 27 Oct 2026 06:01:15 +0000
Manifest next update: Wed 28 Oct 2026 06:01:15 +0000
Files and hashes: 1: 3ko4FNTHS3dYJgP5A7wcLtBHA6o.roa (hash: tK64bc5P7HI3Kfo106hTjUUsaeAWlW26+32w7wIp23o=)
2: M9TO4mLPx12QNOxhU6_MrD2r794.roa (hash: 9JzmkneLii+LpnbpPrpyhCSpEye5RnU2UT4N+IzPQY0=)
3: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: wgxgRxuME74TkkbBe3sPP0HlbQvIyelpLnQHNzcBU5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:da:7e:ac:57:fc:fe:f1:81:03:49:e4:0a:b8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Oct 27 06:01:15 2026 GMT
Not After : Oct 28 06:01:15 2026 GMT
Subject: CN=8c0d51ce43caf6d314215518508d71c73104615d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:22:41:4b:a1:97:91:dd:0f:d6:2b:df:0c:
1b:4b:ea:41:3d:f0:69:ea:84:2f:65:69:24:73:19:
88:48:4c:e7:83:14:70:30:81:54:57:46:33:be:5a:
3f:ef:0f:cf:b0:37:b8:a5:f0:84:18:11:ff:bf:08:
23:f1:56:83:aa:b6:d7:96:f5:d2:90:52:52:44:fc:
38:0a:44:92:8e:d4:35:aa:1c:05:42:ee:e1:9f:15:
d2:90:24:f0:0e:67:da:ba:46:70:7d:d2:81:be:76:
1d:60:04:5e:e5:db:67:7e:d5:9f:b0:d6:69:6d:78:
d1:3f:45:5d:3f:4f:c1:b2:df:f0:28:1e:69:50:09:
d2:a9:5e:7c:e0:ab:e0:45:51:78:64:ed:e6:4a:31:
b3:42:c9:e4:de:9c:79:90:40:03:35:60:40:82:04:
c4:b2:e0:29:0b:9d:5e:23:71:41:15:17:d8:cb:ae:
45:3a:eb:36:49:05:9a:3e:ff:cb:a0:b2:68:d5:6b:
9c:f7:4f:58:db:f0:9a:ca:7a:0a:12:95:ec:db:a8:
88:2c:5b:4b:1a:7f:06:dd:23:0a:d8:1e:79:be:7b:
a7:95:6f:59:a8:93:1c:a8:9f:20:45:ae:3c:5f:95:
63:93:89:8d:31:0a:46:77:16:19:42:89:e5:ee:22:
cf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0D:51:CE:43:CA:F6:D3:14:21:55:18:50:8D:71:C7:31:04:61:5D
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:43:d1:d4:1e:36:64:db:83:63:da:13:75:31:a8:bd:3b:ee:
06:ce:82:09:4e:29:a2:79:96:05:1b:62:35:72:23:ea:b5:ae:
6a:9a:de:b7:48:07:b4:3a:76:b6:5c:b8:1f:c5:3f:2f:e6:6d:
92:99:74:c5:3d:45:ad:f8:67:1d:ac:cc:40:4d:49:73:42:d1:
25:1a:ce:33:b9:82:90:7a:98:9d:65:e8:33:b2:66:aa:9e:e1:
c4:80:db:0f:e5:b1:92:cd:9e:bc:88:11:3c:fa:a5:4a:6d:b6:
a8:8a:66:9d:fb:dc:cd:1e:6a:c3:92:62:f1:6f:b6:47:03:39:
98:06:75:10:83:3a:06:16:f9:26:9a:ba:76:8e:70:41:22:d4:
74:b0:4a:48:3b:77:3b:62:92:3f:9c:48:85:2a:9a:8f:ae:05:
ba:6f:76:98:ac:0b:7d:4a:f0:fa:2c:4b:14:32:58:f6:b4:12:
cf:6d:58:32:5b:c9:58:94:94:d7:96:59:22:80:eb:99:ec:9b:
77:ec:8e:f5:38:97:72:fe:ac:86:cd:b4:d3:14:e1:df:23:49:
b1:81:0d:ae:7d:4c:48:ee:ab:3a:83:bf:52:79:4b:57:8d:a8:
48:78:af:d3:d0:7d:c8:0a:8c:fd:3b:50:53:d0:87:09:d8:98:
18:e2:6a:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF78tp+rFf8/vGBA0nkCritMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYzM0ZTQ5ZmJhOTY0MGI4M2VhYmFhZmJhOWM0YWI5NmM4
YzM1NDQwHhcNMjYxMDI3MDYwMTE1WhcNMjYxMDI4MDYwMTE1WjAzMTEwLwYDVQQD
Eyg4YzBkNTFjZTQzY2FmNmQzMTQyMTU1MTg1MDhkNzFjNzMxMDQ2MTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKYiQUuhl5HdD9Yr3wwbS+pBPfBp
6oQvZWkkcxmISEzngxRwMIFUV0Yzvlo/7w/PsDe4pfCEGBH/vwgj8VaDqrbXlvXS
kFJSRPw4CkSSjtQ1qhwFQu7hnxXSkCTwDmfaukZwfdKBvnYdYARe5dtnftWfsNZp
bXjRP0VdP0/Bst/wKB5pUAnSqV584KvgRVF4ZO3mSjGzQsnk3px5kEADNWBAggTE
suApC51eI3FBFRfYy65FOus2SQWaPv/LoLJo1Wuc909Y2/CaynoKEpXs26iILFtL
Gn8G3SMK2B55vnunlW9ZqJMcqJ8gRa48X5Vjk4mNMQpGdxYZQonl7iLPtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwNUc5DyvbTFCFVGFCNcccxBGFdMB8GA1UdIwQY
MBaAFGrDTkn7qWQLg+q6r7qcSrlsjDVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXNOT1NmdXBaQXVENnJxdnVweEt1V3lNTlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYmVmYjktYzEwMy00MGFmLTg5NzAt
OTNjNDU2OGIxMDNiLzEvYXNOT1NmdXBaQXVENnJxdnVweEt1V3lNTlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYmVmYjktYzEwMy00MGFmLTg5NzAtOTNjNDU2OGIxMDNi
LzEvYXNOT1NmdXBaQXVENnJxdnVweEt1V3lNTlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEPR1B42
ZNuDY9oTdTGovTvuBs6CCU4ponmWBRtiNXIj6rWuapret0gHtDp2tly4H8U/L+Zt
kpl0xT1FrfhnHazMQE1Jc0LRJRrOM7mCkHqYnWXoM7Jmqp7hxIDbD+Wxks2evIgR
PPqlSm22qIpmnfvczR5qw5Ji8W+2RwM5mAZ1EIM6Bhb5Jpq6do5wQSLUdLBKSDt3
O2KSP5xIhSqaj64Fum92mKwLfUrw+ixLFDJY9rQSz21YMlvJWJSU15ZZIoDrmeyb
d+yO9TiXcv6shs200xTh3yNJsYENrn1MSO6rOoO/UnlLV42oSHiv09B9yAqM/TtQ
U9CHCdiYGOJqKw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:28:44 2026 by rpki-client