Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: Jpuvgvah9cjlclViYy9I9V7oCkUwxWCa0jSeifsDykI=
Subject key identifier: 2D:A7:D8:D3:18:FF:BC:8F:A4:8E:72:CE:BD:AA:2D:66:52:77:5D:3A
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 01A06F83E41A35AC36594082CAE6C2D4515E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 13B9
Signing time: Sat 05 Sep 2026 03:01:49 +0000
Manifest this update: Sat 05 Sep 2026 03:01:49 +0000
Manifest next update: Sun 06 Sep 2026 03:01:49 +0000
Files and hashes: 1: 3ko4FNTHS3dYJgP5A7wcLtBHA6o.roa (hash: tK64bc5P7HI3Kfo106hTjUUsaeAWlW26+32w7wIp23o=)
2: M9TO4mLPx12QNOxhU6_MrD2r794.roa (hash: 9JzmkneLii+LpnbpPrpyhCSpEye5RnU2UT4N+IzPQY0=)
3: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: 0kP7R3jfvgM2ANlmlqciYM16xigeeHOpo+C4HtzbJ04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:e4:1a:35:ac:36:59:40:82:ca:e6:c2:d4:51:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Sep 5 03:01:49 2026 GMT
Not After : Sep 6 03:01:49 2026 GMT
Subject: CN=2da7d8d318ffbc8fa48e72cebdaa2d6652775d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:cb:94:ab:77:15:60:95:b6:bc:23:e0:ba:
c4:07:26:7d:65:b7:b0:2f:7d:d4:dc:ec:ee:28:17:
24:1b:b6:ff:47:2f:42:90:33:75:62:7d:55:02:74:
a9:ff:22:fa:58:50:ad:27:07:a5:9e:c0:61:c2:7c:
41:4e:2f:88:ea:ad:37:af:f8:8b:82:53:d9:91:fe:
cd:2f:59:4a:74:dc:de:05:46:21:e6:70:43:17:c6:
60:cc:a3:12:1d:0c:49:15:23:09:86:bf:16:69:e4:
5c:0e:a8:b8:41:a1:5f:2a:b4:a4:b7:e6:d7:75:c9:
73:0a:8b:59:25:9a:44:a7:4d:ae:cc:df:69:36:10:
c1:5c:96:1e:d4:72:79:80:ba:e2:65:33:0a:a9:75:
60:da:94:d9:20:f5:03:21:9d:7c:b9:82:ad:39:49:
74:5e:c6:6a:a0:42:d5:a3:84:94:2e:1b:cc:8f:a5:
ec:39:9e:22:ca:67:47:7c:62:30:f5:d0:0d:38:11:
fd:53:3d:7e:63:db:3c:5e:bd:4a:0f:80:18:e3:4a:
41:47:c0:6f:cb:4b:90:f4:e1:5e:ed:20:f1:37:e6:
cc:5c:83:58:1e:eb:96:29:ae:8e:cf:af:d2:08:08:
cd:f7:c0:7a:c4:3c:2c:68:3f:0f:a0:97:e8:95:fc:
2e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A7:D8:D3:18:FF:BC:8F:A4:8E:72:CE:BD:AA:2D:66:52:77:5D:3A
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:82:31:b4:42:bd:59:65:0a:a3:c7:30:94:c5:64:4e:99:1d:
dd:f2:92:30:fe:a1:c5:9f:4d:f1:b1:01:ab:1f:ad:fe:62:ec:
ea:7b:3e:08:11:65:d3:50:d3:0f:89:25:0c:8f:bc:31:6c:17:
1c:f3:f4:fa:e2:bb:4f:a1:43:d8:0e:90:f0:9c:b4:8b:2a:88:
a3:80:23:f2:6f:b0:f1:2f:21:cd:ac:d6:79:a0:cb:45:bb:fc:
6d:c3:bc:7d:59:30:ba:30:87:0c:1d:c7:45:29:d2:dd:f6:c7:
b2:a9:c2:4e:49:bd:c9:82:eb:4f:88:af:43:b5:fa:50:50:b2:
c4:d7:87:fc:cf:62:68:a6:93:c9:7b:ed:0f:e7:72:8a:ec:79:
7e:fc:69:9d:9c:65:1b:17:a3:9b:4a:18:35:70:21:bc:61:fb:
8b:6e:c1:b2:84:94:21:fb:87:57:57:c9:3e:1f:4a:d4:30:37:
45:35:46:f9:40:b4:f4:06:be:9d:8f:5a:a4:75:9c:54:5d:4f:
db:0c:31:24:fb:66:77:23:bb:9a:28:29:b1:ee:14:9a:7c:e3:
ae:29:00:18:8c:e3:2f:e3:a3:44:6a:3f:2a:6e:7a:97:c5:64:
c4:a2:b6:18:97:0f:af:ac:73:cd:db:e5:96:04:a2:48:0f:ae:
17:82:9c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:34:59 2026 by rpki-client