Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
File: ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json)
Hash identifier: 8bGzKoknfkRYqOXI6MahRJZn3OzKABY83z+9dhJYo6c=
Subject key identifier: 76:37:3D:50:39:A8:74:AA:2E:DF:FD:F8:36:AA:2F:6E:B7:FD:28:89
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial: 019E303B230477A0F001DC1D82A7032052EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
Manifest number: 0DDA
Signing time: Sat 16 May 2026 10:00:42 +0000
Manifest this update: Sat 16 May 2026 10:00:42 +0000
Manifest next update: Sun 17 May 2026 10:00:42 +0000
Files and hashes: 1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: X9KViYpz45jdcyFcGyIYF9k8mLtmkU8tBmtkARow/Ic=)
2: rlozkrq9ZzNHCZUtQGPTzboWxmI.roa (hash: +ky2eseP0hm1lozQb5MU58tNSrjncRM2hPrTaQ0J6cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:23:04:77:a0:f0:01:dc:1d:82:a7:03:20:52:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
Validity
Not Before: May 16 10:00:42 2026 GMT
Not After : May 17 10:00:42 2026 GMT
Subject: CN=76373d5039a874aa2edffdf836aa2f6eb7fd2889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:ee:b9:5e:9f:6f:74:f9:82:13:06:cb:88:
be:91:1f:cb:14:0e:31:5c:cd:f8:e8:1e:b8:7f:9f:
5e:4a:fc:10:1a:2b:ac:50:f6:2a:48:ff:2a:4a:9e:
e8:2c:75:79:b1:ec:f9:8b:66:5b:ae:d0:f1:73:a2:
d3:bc:f7:85:0b:d6:0c:17:bb:4a:5d:0a:94:96:d4:
2b:ee:8e:08:8b:3a:aa:80:f3:89:a9:92:ae:22:76:
a1:52:2f:a5:d7:a2:fd:7f:71:41:c3:45:ba:67:7e:
5d:7e:f5:38:10:21:86:28:d2:be:84:5a:27:16:85:
9c:a7:bb:ef:fa:eb:54:c2:98:f5:1a:da:9e:1e:49:
5d:a4:00:5b:4a:80:c3:55:e3:c5:48:d0:ba:4d:f7:
b3:b1:8e:29:b2:72:67:1d:8c:2d:fb:68:8f:41:9f:
c3:b1:99:f7:51:02:d5:40:47:2c:a6:b8:cc:ba:3d:
9b:6f:51:30:b7:2b:6f:c3:e4:42:0d:47:c9:93:1d:
ee:8d:86:6e:95:de:d8:b2:1e:94:ab:14:f8:43:a5:
d5:7e:4a:2d:f1:a8:ab:fd:58:fb:4a:8f:04:80:fc:
43:35:eb:90:4c:99:a0:25:7b:32:47:9c:f0:7e:24:
8f:54:4f:54:89:25:b0:c1:c8:fa:3a:3b:c7:62:f0:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:37:3D:50:39:A8:74:AA:2E:DF:FD:F8:36:AA:2F:6E:B7:FD:28:89
X509v3 Authority Key Identifier:
keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:85:28:54:a8:f6:94:42:fc:96:83:66:14:4a:c9:33:b3:aa:
e3:c8:b1:e7:f8:b4:17:bf:1d:c0:22:9d:71:c1:35:b8:bb:5d:
72:6c:34:f7:d3:0b:12:9e:c1:9d:cc:ff:52:44:06:25:cd:f7:
64:4a:27:72:07:1a:1b:e4:57:5f:16:b6:e7:ea:43:c2:01:c0:
fa:e8:93:98:d3:3d:bb:4a:a9:2c:fa:46:a0:a4:20:ac:74:c6:
c6:ba:98:de:e3:06:9e:4c:ce:b2:4b:2c:41:11:cf:29:a2:63:
0f:64:11:31:27:a3:cd:d8:1f:32:c4:ee:38:6c:27:64:ba:d0:
53:22:5b:0d:9c:3f:c4:25:ad:82:1e:c0:7b:e6:b7:b2:44:37:
33:1d:65:a6:96:c2:d4:e4:1c:87:58:0e:3a:6f:6f:4b:d0:1e:
07:13:3f:4e:75:24:51:30:c6:9d:ea:ec:d1:9d:96:39:6b:31:
8d:b2:e5:7e:72:25:b0:13:dc:be:8b:89:b0:d6:89:6a:dd:d8:
a1:06:a3:dd:ca:35:22:82:62:9c:da:93:5a:27:5a:c3:10:31:
ae:b2:25:6b:dc:d5:92:50:36:42:14:47:6c:6e:8e:6a:52:0e:
ec:da:72:b8:8c:97:96:0e:12:a4:7d:ab:fa:f0:d9:32:59:63:
91:fe:85:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wOyMEd6DwAdwdgqcDIFLsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjAyNTk2ZDVjZWNlMzdkYzM0Yzg2MTA2NDU3OGZjNmRh
YTVlODYwHhcNMjYwNTE2MTAwMDQyWhcNMjYwNTE3MTAwMDQyWjAzMTEwLwYDVQQD
Eyg3NjM3M2Q1MDM5YTg3NGFhMmVkZmZkZjgzNmFhMmY2ZWI3ZmQyODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAHuuV6fb3T5ghMGy4i+kR/LFA4x
XM346B64f59eSvwQGiusUPYqSP8qSp7oLHV5sez5i2ZbrtDxc6LTvPeFC9YMF7tK
XQqUltQr7o4IizqqgPOJqZKuInahUi+l16L9f3FBw0W6Z35dfvU4ECGGKNK+hFon
FoWcp7vv+utUwpj1GtqeHkldpABbSoDDVePFSNC6TfezsY4psnJnHYwt+2iPQZ/D
sZn3UQLVQEcsprjMuj2bb1Ewtytvw+RCDUfJkx3ujYZuld7Ysh6UqxT4Q6XVfkot
8air/Vj7So8EgPxDNeuQTJmgJXsyR5zwfiSPVE9UiSWwwcj6OjvHYvBMawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHY3PVA5qHSqLt/9+DaqL263/SiJMB8GA1UdIwQY
MBaAFAEgJZbVzs433DTIYQZFePxtql6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUt
NDgxMTUxYWNmMzI5LzEvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUtNDgxMTUxYWNmMzI5
LzEvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4UoVKj2
lEL8loNmFErJM7Oq48ix5/i0F78dwCKdccE1uLtdcmw099MLEp7Bncz/UkQGJc33
ZEoncgcaG+RXXxa25+pDwgHA+uiTmNM9u0qpLPpGoKQgrHTGxrqY3uMGnkzOskss
QRHPKaJjD2QRMSejzdgfMsTuOGwnZLrQUyJbDZw/xCWtgh7Ae+a3skQ3Mx1lppbC
1OQch1gOOm9vS9AeBxM/TnUkUTDGners0Z2WOWsxjbLlfnIlsBPcvouJsNaJat3Y
oQaj3co1IoJinNqTWidawxAxrrIla9zVklA2QhRHbG6OalIO7NpyuIyXlg4SpH2r
+vDZMlljkf6FHw==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:22 2026 by rpki-client