Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
File: ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json)
Hash identifier: bjwZgPf7/9rW4rUoO5Z60Tq93dQsMs2w7mhmRD2akBw=
Subject key identifier: AE:5C:4D:D8:1E:10:FC:72:8D:1B:92:49:F9:DF:31:17:2C:5E:98:08
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial: 019D3AF80EF74A29EBA5B308856DB4BEACA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
Manifest number: 0D5B
Signing time: Sun 29 Mar 2026 19:00:28 +0000
Manifest this update: Sun 29 Mar 2026 19:00:28 +0000
Manifest next update: Mon 30 Mar 2026 19:00:28 +0000
Files and hashes: 1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: 37xWCqDWplN5ceDqe+N2QsWLaI94yreGKawiY+pjNVA=)
2: rlozkrq9ZzNHCZUtQGPTzboWxmI.roa (hash: +ky2eseP0hm1lozQb5MU58tNSrjncRM2hPrTaQ0J6cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:0e:f7:4a:29:eb:a5:b3:08:85:6d:b4:be:ac:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
Validity
Not Before: Mar 29 19:00:28 2026 GMT
Not After : Mar 30 19:00:28 2026 GMT
Subject: CN=ae5c4dd81e10fc728d1b9249f9df31172c5e9808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:5c:50:36:ab:e0:93:81:96:3e:3e:a3:1b:
07:db:3b:cb:28:68:a0:b2:10:53:25:03:7a:2d:ed:
28:ba:8a:8d:7d:a4:ea:7d:bb:4f:ea:a9:30:42:a1:
00:2d:af:af:57:75:d2:39:26:6f:f2:4b:01:1b:32:
ce:6b:63:eb:9f:02:50:3a:89:f3:65:c0:70:f8:dd:
29:bf:d0:83:ec:d7:dc:37:26:36:ca:08:59:48:75:
71:34:47:ae:fd:13:1b:6b:2c:ac:a8:47:9d:2f:dd:
e5:33:b9:e8:f7:3b:8e:9c:ca:eb:2f:46:c3:d8:15:
1f:b0:53:6f:59:32:08:ce:5d:66:5b:2a:53:c7:c8:
60:2c:9a:62:68:16:67:ba:ad:84:84:9c:54:45:5e:
a5:11:56:62:11:28:c4:5d:8d:84:d8:30:ae:6a:e9:
94:db:19:84:d3:48:6b:a6:31:4b:4d:be:b5:95:eb:
2d:73:99:1b:08:4f:9d:28:40:24:19:90:d3:58:dd:
a3:0b:b0:52:d9:83:c8:0c:66:93:4e:e8:d6:78:b1:
b2:1d:7f:15:3b:b5:a6:9a:9e:0d:86:37:d2:5f:28:
3f:86:ef:74:b8:70:04:a2:37:6e:6c:b6:02:b9:bc:
4b:69:b6:de:7a:d8:d7:f8:74:62:25:1e:23:23:ae:
da:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5C:4D:D8:1E:10:FC:72:8D:1B:92:49:F9:DF:31:17:2C:5E:98:08
X509v3 Authority Key Identifier:
keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:26:ac:69:ff:5c:da:a0:a0:b2:98:66:d9:67:9e:7e:6e:91:
9c:f7:56:83:fe:0d:c0:41:fd:38:52:33:c5:6a:8d:94:30:c7:
5e:7a:42:0c:7a:07:21:6b:5e:53:0b:79:02:3e:d7:76:52:0a:
6c:3f:80:8c:5f:bb:ec:44:c3:de:49:7a:b0:7b:a3:80:aa:c4:
71:ba:45:66:5a:7c:aa:6e:ed:48:a0:c8:e8:5d:f7:08:75:14:
e9:8d:95:a5:12:b6:cd:95:f2:15:be:17:00:d4:21:d4:52:47:
3d:33:dd:85:ea:79:e1:aa:7a:c3:b6:a0:1c:53:7f:88:a1:0f:
92:3a:53:67:df:ef:54:e7:a3:d7:13:7a:86:1f:05:49:60:80:
5a:18:24:6a:96:99:05:23:36:75:02:5c:10:f0:4d:76:60:8f:
62:ad:77:f8:b9:d1:0c:5d:cb:79:ba:d8:50:42:9c:86:a7:38:
6f:53:8a:5c:b0:18:33:b0:f5:b2:41:85:8f:dc:a6:9c:f1:38:
9a:29:0a:53:c9:15:15:58:92:bf:ac:0c:bc:7e:99:c4:f6:a8:
0f:6e:55:42:14:e0:8c:03:69:ad:f0:b7:63:e6:ad:7d:42:55:
d1:c3:42:d5:3a:44:dc:7c:a2:ce:f7:4c:3c:de:18:a3:7c:98:
d5:de:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:32:15 2026 by rpki-client