Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier: uIdbPudPiPfoncEtsoJEXZQYTsyFa4UHiK1wasElf/Y=
Subject key identifier: DE:DF:8F:91:FB:74:F8:36:C6:D8:E3:FD:6F:8B:1E:20:07:18:0D:A5
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial: 019D3865E5725C30DF00185B7A03BC9001B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: Bb21g7VxRdEqVE1Dq2m6o8R84QPvrXdZmtnWSMAFQAg=)
2: ScJK2ivQIxsBlhkpxe_Fy41_8xc.roa (hash: TSQwrA/vSc9MyjbkX9qzVifKTyWOKyvXJf3qefMx3B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e5:72:5c:30:df:00:18:5b:7a:03:bc:90:01:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=dedf8f91fb74f836c6d8e3fd6f8b1e2007180da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c2:41:58:07:fe:40:9d:6a:c4:44:78:f9:fd:
f4:60:8a:96:09:bc:51:e9:b7:c3:3d:56:bf:d5:92:
f4:03:36:d1:e3:c4:73:79:26:10:a4:e7:a3:d4:29:
ad:74:fa:dc:74:d4:0a:55:7b:2b:49:8f:de:a2:01:
d8:fb:6e:90:3d:37:59:03:41:71:6e:a6:c1:31:63:
f1:fd:9e:ea:48:29:69:40:2f:0c:f1:6c:45:f1:ef:
13:f7:60:c8:31:c0:3a:cc:2b:ed:9d:5e:94:dd:6f:
7a:1c:6b:59:6f:32:2b:c2:b0:3b:87:78:23:45:e3:
cd:90:26:7e:f9:05:7a:63:74:58:aa:7a:2c:7e:f3:
36:01:5f:79:87:c6:93:35:7f:9a:62:17:e4:50:29:
c9:d7:5f:28:2a:c3:37:df:b8:aa:83:77:48:57:fc:
cf:0f:7b:50:87:a4:c3:09:7b:c1:b6:60:86:ea:b7:
0f:47:e0:4a:a8:99:74:78:d9:69:53:fe:7a:6c:9b:
c8:05:77:9a:af:af:1c:db:41:2d:3c:54:a7:d1:40:
ea:f5:87:3b:9b:b8:dd:fd:89:69:8f:67:10:e9:30:
4f:b6:37:bd:ad:b9:a7:90:10:a4:c2:1e:31:51:7c:
ad:37:9b:b7:f6:12:0b:e4:23:61:01:f5:f7:9f:68:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DF:8F:91:FB:74:F8:36:C6:D8:E3:FD:6F:8B:1E:20:07:18:0D:A5
X509v3 Authority Key Identifier:
keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8c:66:29:4d:26:70:4f:a5:44:5d:85:74:dd:bf:40:16:5b:
56:45:ed:f3:c6:05:9f:68:de:cb:52:09:b1:c7:21:3a:27:1f:
a7:f5:66:cf:5d:4f:af:a0:53:09:36:2f:35:4c:31:a1:6e:c1:
3d:c7:f7:e1:10:d4:d0:6a:26:8b:de:67:53:08:8a:69:df:b5:
9d:b6:28:0f:59:47:4f:90:78:15:be:76:33:b5:10:a4:13:67:
ac:ae:00:23:00:f4:3f:0d:4c:a6:20:a8:cd:cb:f2:07:8d:ab:
68:90:60:1b:e6:cd:3c:66:2f:84:a4:cf:c6:07:a4:0a:b4:d8:
17:bf:3f:21:68:95:0f:92:d4:dc:7c:7b:7b:67:23:8d:56:26:
11:3f:53:ce:72:b6:bb:37:ba:50:49:6d:00:b8:f0:ea:54:fe:
38:d9:3f:90:0e:76:92:dc:74:db:30:45:7e:e0:96:24:d9:47:
54:d1:f4:da:68:08:f1:ae:15:9c:c1:41:9c:19:63:6d:f4:c6:
5e:ed:c6:1c:8c:bf:b7:ab:ed:54:97:21:d9:2e:5e:2f:20:09:
5e:f2:6f:26:63:4d:d8:29:cc:7b:94:78:41:f4:ec:3b:75:4c:
4d:cd:bf:0e:de:f4:e3:80:a7:ec:d5:6e:74:a6:d1:f3:a1:7e:
18:78:9a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:57 2026 by rpki-client