Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
File: ASqMalgY9dVNG3VsFz0T8BygYsQ.mft (raw, json)
Hash identifier: P1D5WBSd5MCg/juLXxcX/fvzAloY/HCUuTpQgrFmTIY=
Subject key identifier: 7E:2F:0C:AA:BB:41:90:C9:3D:AE:42:92:9F:04:0F:5A:41:F5:BE:2E
Authority key identifier: 01:2A:8C:6A:58:18:F5:D5:4D:1B:75:6C:17:3D:13:F0:1C:A0:62:C4
Certificate issuer: /CN=012a8c6a5818f5d54d1b756c173d13f01ca062c4
Certificate serial: 019D3909A3B05416FBD1E7795FB9A75A0EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
Manifest number: 0113
Signing time: Sun 29 Mar 2026 10:00:26 +0000
Manifest this update: Sun 29 Mar 2026 10:00:26 +0000
Manifest next update: Mon 30 Mar 2026 10:00:26 +0000
Files and hashes: 1: ASqMalgY9dVNG3VsFz0T8BygYsQ.crl (hash: yZc7aGlaeWrOtGw8oArOiHhC0Yhv+jXuXxMZQ/iw9BE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a3:b0:54:16:fb:d1:e7:79:5f:b9:a7:5a:0e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012a8c6a5818f5d54d1b756c173d13f01ca062c4
Validity
Not Before: Mar 29 10:00:26 2026 GMT
Not After : Mar 30 10:00:26 2026 GMT
Subject: CN=7e2f0caabb4190c93dae42929f040f5a41f5be2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e8:f9:a9:6d:34:f7:31:01:09:27:24:e3:eb:
7f:c9:e8:76:6b:b4:2f:a2:b8:a4:c0:c2:8c:11:39:
46:16:c4:6a:1e:9e:73:98:d7:61:30:f6:1e:f8:b2:
6b:ab:0c:37:06:14:43:38:b4:2d:50:6c:85:3b:77:
62:fd:5b:64:59:a9:b5:6d:95:20:6b:55:c0:3a:38:
7c:6f:92:f6:e9:c9:3c:43:f2:aa:ca:5f:74:eb:d6:
3d:28:7d:85:02:2a:e8:55:9d:ae:6c:43:6b:98:0e:
9c:97:64:86:57:52:d1:2f:91:2b:23:b9:46:33:7b:
4f:01:49:8c:c0:45:b1:db:1d:91:97:2b:41:32:fe:
f0:63:ff:29:ba:d7:9f:34:89:ab:33:fe:5a:8d:3a:
7a:18:f7:60:6d:d1:c2:8d:90:05:3f:ac:67:59:8b:
29:11:57:50:a0:45:9e:65:88:27:f0:ab:b8:7c:a6:
83:45:d5:83:50:f3:6b:30:b5:2d:07:a5:77:c5:b0:
c4:27:5e:4f:7f:28:30:14:a6:7c:8b:1a:6c:98:ef:
2b:5d:44:84:ce:82:02:81:c7:cf:a8:f5:ca:52:a3:
94:8e:25:09:33:cf:13:de:d2:b4:01:6c:bd:bb:a3:
d9:d2:a4:26:3b:5c:3b:ae:92:24:bb:84:00:fa:68:
46:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2F:0C:AA:BB:41:90:C9:3D:AE:42:92:9F:04:0F:5A:41:F5:BE:2E
X509v3 Authority Key Identifier:
keyid:01:2A:8C:6A:58:18:F5:D5:4D:1B:75:6C:17:3D:13:F0:1C:A0:62:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3a:a3:50:74:b0:49:21:cf:d5:f5:6c:b0:4b:0c:99:a6:ae:
9e:f2:65:6e:41:b4:05:c0:7c:b1:5a:59:e7:ca:90:39:7f:96:
d0:a9:d1:73:05:2a:b4:64:45:d4:44:e2:22:0b:42:84:f9:18:
b9:6c:2f:6f:14:13:df:53:2a:cd:bb:c1:f1:4c:09:14:fc:01:
db:aa:0e:37:23:23:2c:64:c2:2e:66:40:0b:dd:e7:d8:9d:49:
86:e6:32:fa:67:da:a0:25:ac:e9:9c:44:2c:d2:5b:4a:74:7f:
d6:47:df:4d:69:7b:62:1c:aa:4d:da:1d:80:eb:5e:c6:36:5d:
cb:c9:e0:d6:d1:cb:ec:ad:b5:18:0c:01:8b:e6:18:ff:ff:a7:
af:35:50:dc:f4:2f:1d:37:1b:5e:2e:5a:f0:4c:d2:06:9b:79:
a7:b8:dd:38:f8:f5:14:e3:51:7d:60:f4:c0:0b:3d:5b:bd:ba:
dd:9f:df:47:ca:df:42:c4:f9:10:0e:6e:7d:a3:3e:1a:97:20:
db:e8:25:f2:db:00:65:d7:31:26:90:47:95:8e:9f:f5:69:3c:
d9:16:39:cb:63:27:76:52:11:5c:62:1c:77:be:db:ce:26:26:
ae:e1:cc:7a:5e:76:d6:c5:f3:80:63:d2:4b:19:e1:7b:5a:47:
5b:01:21:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:52:25 2026 by rpki-client