Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
File: ASqMalgY9dVNG3VsFz0T8BygYsQ.mft (raw, json)
Hash identifier: o1p2/5eEZRyAkatjUGaaZjcO5fyqzhf0GScSuKORuRg=
Subject key identifier: 75:4D:15:13:CC:4D:92:5C:34:56:BE:F0:6A:77:5E:D3:99:7D:B5:E6
Authority key identifier: 01:2A:8C:6A:58:18:F5:D5:4D:1B:75:6C:17:3D:13:F0:1C:A0:62:C4
Certificate issuer: /CN=012a8c6a5818f5d54d1b756c173d13f01ca062c4
Certificate serial: 01A04160C06CD1CB8D4A90D702EF871A172F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
Manifest number: 02A5
Signing time: Thu 27 Aug 2026 04:00:54 +0000
Manifest this update: Thu 27 Aug 2026 04:00:54 +0000
Manifest next update: Fri 28 Aug 2026 04:00:54 +0000
Files and hashes: 1: ASqMalgY9dVNG3VsFz0T8BygYsQ.crl (hash: IPrvZ0HIrjPRielACP8aewSzndR1L4eqZWyHFFnqFa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:60:c0:6c:d1:cb:8d:4a:90:d7:02:ef:87:1a:17:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012a8c6a5818f5d54d1b756c173d13f01ca062c4
Validity
Not Before: Aug 27 04:00:54 2026 GMT
Not After : Aug 28 04:00:54 2026 GMT
Subject: CN=754d1513cc4d925c3456bef06a775ed3997db5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:e0:90:99:df:2d:2b:bd:16:80:d1:32:83:
ff:de:6a:a3:95:e9:75:6d:b7:d9:94:ca:80:5d:c2:
4c:81:64:74:c8:fb:4d:77:0f:97:2b:e8:fd:c1:34:
d2:a6:ee:74:9e:57:25:f2:30:ef:0b:c7:ae:60:77:
ad:bc:7a:f4:be:70:fb:c8:3e:32:f6:f2:3a:50:06:
a3:a2:33:bb:0f:08:5b:da:fb:06:4c:be:13:bf:cb:
ec:1f:35:26:a8:52:39:a5:87:ea:72:9a:fa:68:6d:
73:33:a0:81:9b:ce:6c:23:43:45:77:4b:5d:71:80:
8f:32:f1:a0:1e:42:e0:55:a3:4d:5d:5a:ec:d1:8e:
53:d5:d5:00:b2:15:bd:b5:2a:b3:a7:68:16:8f:97:
95:81:6d:34:8c:a0:3a:c5:e7:c2:c1:0d:94:18:38:
22:62:53:c3:1f:02:b1:b3:e4:e7:f2:ec:7e:99:6f:
60:dd:d5:37:03:fa:42:e1:14:e9:ac:88:6c:97:f0:
08:91:a1:a2:1f:2a:0d:4e:01:ce:d8:94:76:2e:5d:
f1:d4:f1:09:b7:d9:5e:a8:37:5b:24:99:e2:7a:f9:
02:e9:e3:1c:de:42:d0:06:d6:c4:67:8b:31:be:a0:
ae:e2:54:08:0d:39:77:05:4b:e9:73:e6:ff:03:ca:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4D:15:13:CC:4D:92:5C:34:56:BE:F0:6A:77:5E:D3:99:7D:B5:E6
X509v3 Authority Key Identifier:
keyid:01:2A:8C:6A:58:18:F5:D5:4D:1B:75:6C:17:3D:13:F0:1C:A0:62:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:05:3a:42:98:a0:c9:51:b4:1d:7b:76:ab:e3:0c:16:51:7f:
95:33:38:87:96:86:66:29:de:a0:ff:35:0d:c6:10:81:75:cd:
ed:6d:a3:51:0e:e2:ca:05:7d:76:57:db:0b:79:6e:88:05:81:
d2:ca:ec:f2:43:c6:7d:73:29:d8:97:b8:e8:f4:b0:28:57:00:
e1:3b:f2:3e:b3:b0:32:fc:42:0d:5b:f2:65:96:8e:b9:e0:2c:
78:b8:b2:24:d4:64:68:8a:5c:ff:4b:8a:4c:63:e5:d4:4b:62:
5c:d2:b6:4f:d9:6e:37:ff:61:48:68:95:d5:88:7d:01:90:70:
51:ef:10:e9:a4:e0:29:ad:31:de:31:06:c9:31:0d:d3:d5:12:
e2:74:d1:2a:c3:6b:0f:ff:00:63:05:1f:e9:b7:49:4b:72:89:
7f:59:13:e2:e9:1b:12:3f:53:88:fe:0c:5d:aa:8d:66:ea:9f:
71:dd:a1:17:d2:dd:5d:f0:58:9d:50:0f:bb:0e:a0:f1:b0:f9:
f1:26:7b:ab:6f:f4:0a:fa:f7:3a:95:e8:f8:ae:19:72:f6:bc:
ec:26:a1:76:1d:8d:d9:bd:00:5f:2d:c3:ab:b4:50:c5:d9:8f:
71:be:5b:3b:79:67:82:b8:24:54:17:10:18:bb:7d:a5:2a:93:
19:8d:e2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:22:36 2026 by rpki-client