Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
File: ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json)
Hash identifier: MYLxV3dhAfoWNBDoaLD4P8jOk7lRvBA7OC2lVnNmUgI=
Subject key identifier: 19:16:B6:DD:6A:DD:FE:CF:BF:41:B8:5E:F6:37:85:A0:0C:A9:6B:10
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial: 01A13E5C9EAF4EFB769FCD6E52199D76DED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
Manifest number: 0F6F
Signing time: Thu 15 Oct 2026 07:00:19 +0000
Manifest this update: Thu 15 Oct 2026 07:00:19 +0000
Manifest next update: Fri 16 Oct 2026 07:00:19 +0000
Files and hashes: 1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: QCpa1HiOVjNkkSTib13Yw2mpHvKBJefDGLdi4zXZaF8=)
2: rlozkrq9ZzNHCZUtQGPTzboWxmI.roa (hash: +ky2eseP0hm1lozQb5MU58tNSrjncRM2hPrTaQ0J6cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:9e:af:4e:fb:76:9f:cd:6e:52:19:9d:76:de:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
Validity
Not Before: Oct 15 07:00:19 2026 GMT
Not After : Oct 16 07:00:19 2026 GMT
Subject: CN=1916b6dd6addfecfbf41b85ef63785a00ca96b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:dc:d1:74:58:db:8c:20:8f:35:a2:c0:c7:
67:75:f7:b2:4c:ce:ad:a9:cf:07:bc:e7:2c:44:af:
f5:87:55:05:dc:7e:26:a1:36:4e:fb:bf:15:55:f3:
a0:c6:28:e0:2c:3b:54:e6:91:d2:8f:0f:29:fc:2e:
16:72:04:a1:3d:ec:ca:08:2e:db:95:42:2a:b8:c9:
59:22:c6:db:ff:40:e1:3c:31:09:10:80:a0:2a:36:
46:06:5c:80:48:88:f9:20:37:aa:7c:7e:92:d9:4d:
b8:ec:7e:ab:f5:fa:7c:9f:35:3c:ed:79:e7:e6:9e:
f9:a1:fc:2d:1e:e7:1b:1b:e8:99:1c:2a:f5:8a:1d:
1b:5b:38:3e:3f:a2:d0:c2:bf:f5:a3:b2:00:6d:03:
9c:2a:71:4e:93:cb:86:4d:d4:a8:2f:54:b1:ee:d3:
24:fa:f4:1d:09:0b:af:73:86:06:cc:89:0d:35:92:
16:68:3d:38:7a:0c:92:76:b0:ac:35:d3:61:d8:87:
a1:dc:4c:a2:7e:a4:42:48:3d:c0:61:d3:4a:14:85:
42:f0:fd:2c:1c:22:51:4a:c6:82:3a:7e:52:8f:71:
3d:76:08:97:95:7b:3d:89:68:e1:0f:52:66:6e:4f:
5c:4f:e9:d7:b0:0f:f9:6d:3f:63:61:54:2f:58:f3:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:16:B6:DD:6A:DD:FE:CF:BF:41:B8:5E:F6:37:85:A0:0C:A9:6B:10
X509v3 Authority Key Identifier:
keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:76:fe:e9:a8:19:13:f9:e7:74:b4:68:72:40:f1:81:ae:a7:
75:37:ec:1b:f8:0a:93:25:79:ce:14:1b:07:28:c3:2b:40:1e:
cf:f6:23:84:f9:eb:34:50:14:06:0e:d0:15:3a:c0:ad:cc:49:
98:87:3f:c5:99:19:71:6f:0c:db:6a:f9:e9:c5:17:c2:de:9c:
eb:fd:d1:c2:69:5b:05:51:f6:af:f8:f7:68:b0:e5:57:e9:dd:
7b:49:e5:d8:97:64:e4:06:a5:29:07:e5:0e:d2:b7:5c:6c:7d:
ac:60:b1:6c:67:ae:81:30:2f:b0:07:92:00:00:9f:3a:e3:16:
85:b2:a9:c5:1a:b7:54:22:75:e9:b3:87:18:12:db:66:df:94:
63:31:c8:dc:44:0d:c5:bc:53:e6:ab:c8:cc:21:d6:92:4b:08:
e2:8c:da:ff:fd:0f:c1:e5:e3:57:01:8a:cc:cc:5d:50:8b:10:
8d:f5:e5:9e:45:14:da:aa:72:fd:c2:0a:12:fa:e4:17:14:f5:
1a:f4:e7:47:76:85:e4:a8:7a:d0:91:f9:a1:1b:68:b2:fc:07:
0e:05:14:fe:98:0a:59:58:16:80:b3:21:fd:71:45:92:fa:f3:
3d:de:1a:82:66:f2:e9:d6:cf:d8:73:51:a2:72:f6:8d:c0:42:
d4:2a:d2:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+XJ6vTvt2n81uUhmddt7YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjAyNTk2ZDVjZWNlMzdkYzM0Yzg2MTA2NDU3OGZjNmRh
YTVlODYwHhcNMjYxMDE1MDcwMDE5WhcNMjYxMDE2MDcwMDE5WjAzMTEwLwYDVQQD
EygxOTE2YjZkZDZhZGRmZWNmYmY0MWI4NWVmNjM3ODVhMDBjYTk2YjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OHc0XRY24wgjzWiwMdndfeyTM6t
qc8HvOcsRK/1h1UF3H4moTZO+78VVfOgxijgLDtU5pHSjw8p/C4WcgShPezKCC7b
lUIquMlZIsbb/0DhPDEJEICgKjZGBlyASIj5IDeqfH6S2U247H6r9fp8nzU87Xnn
5p75ofwtHucbG+iZHCr1ih0bWzg+P6LQwr/1o7IAbQOcKnFOk8uGTdSoL1Sx7tMk
+vQdCQuvc4YGzIkNNZIWaD04egySdrCsNdNh2Ieh3EyifqRCSD3AYdNKFIVC8P0s
HCJRSsaCOn5Sj3E9dgiXlXs9iWjhD1Jmbk9cT+nXsA/5bT9jYVQvWPMmPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkWtt1q3f7Pv0G4XvY3haAMqWsQMB8GA1UdIwQY
MBaAFAEgJZbVzs433DTIYQZFePxtql6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUt
NDgxMTUxYWNmMzI5LzEvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUtNDgxMTUxYWNmMzI5
LzEvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXb+6agZ
E/nndLRockDxga6ndTfsG/gKkyV5zhQbByjDK0Aez/YjhPnrNFAUBg7QFTrArcxJ
mIc/xZkZcW8M22r56cUXwt6c6/3RwmlbBVH2r/j3aLDlV+nde0nl2Jdk5AalKQfl
DtK3XGx9rGCxbGeugTAvsAeSAACfOuMWhbKpxRq3VCJ16bOHGBLbZt+UYzHI3EQN
xbxT5qvIzCHWkksI4oza//0PweXjVwGKzMxdUIsQjfXlnkUU2qpy/cIKEvrkFxT1
GvTnR3aF5Kh60JH5oRtosvwHDgUU/pgKWVgWgLMh/XFFkvrzPd4agmby6dbP2HNR
onL2jcBC1CrS6w==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:24:17 2026 by rpki-client