Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
File: ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json)
Hash identifier: O/dYw5tVG9hdNJOi0lkwS+JTOeY+OJs01/ZZTixwpM8=
Subject key identifier: FC:EA:4F:72:ED:A3:92:A2:09:08:5C:25:B5:56:CB:5D:89:81:8B:66
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial: 019F17F9E685C7D07501DB523B8A8AD3C0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
Manifest number: 0E52
Signing time: Tue 30 Jun 2026 10:01:21 +0000
Manifest this update: Tue 30 Jun 2026 10:01:21 +0000
Manifest next update: Wed 01 Jul 2026 10:01:21 +0000
Files and hashes: 1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: 3aUHs0Zd5TWEt65yTAlZlaudMo1LEMegDCIKRFCVrzE=)
2: rlozkrq9ZzNHCZUtQGPTzboWxmI.roa (hash: +ky2eseP0hm1lozQb5MU58tNSrjncRM2hPrTaQ0J6cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:e6:85:c7:d0:75:01:db:52:3b:8a:8a:d3:c0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
Validity
Not Before: Jun 30 10:01:21 2026 GMT
Not After : Jul 1 10:01:21 2026 GMT
Subject: CN=fcea4f72eda392a209085c25b556cb5d89818b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:72:b2:a9:68:fb:db:25:8e:8e:da:40:f8:
e1:c2:a8:a7:e6:ec:ca:57:ff:9e:9c:78:b7:c0:80:
e9:30:60:7c:ce:0c:f8:3b:c2:84:a2:0c:ca:21:af:
02:19:00:28:3a:44:d3:f1:43:2f:0a:5f:8a:12:fa:
2f:af:cb:1f:9b:1c:a5:a8:d1:0a:6e:e9:a9:ec:1e:
91:a2:3b:89:30:f3:ba:2c:38:0c:e0:0f:df:72:42:
17:44:a9:72:b9:24:bd:cd:96:5a:6a:94:8d:8e:71:
ea:18:97:bb:c4:97:28:20:34:84:1d:fe:fd:ea:c9:
2d:cc:fe:a1:8b:c4:eb:32:91:ed:64:8b:8b:e7:9d:
26:05:5d:d4:ce:d7:4b:ed:89:54:3a:c3:fa:f6:ce:
56:b1:0c:ac:e1:c3:15:7c:e5:a4:36:be:bd:3e:f6:
a3:53:68:d8:23:1b:32:fd:d9:11:c5:84:bb:f1:29:
48:e4:ce:3f:b3:a5:8b:56:41:2a:eb:f8:52:c7:20:
fe:c1:82:c9:4f:cd:4b:3b:3c:d3:a7:4a:2e:1d:30:
f9:d5:3a:4f:8b:8f:52:8b:06:ee:d9:b3:25:b4:0c:
f5:b2:d7:97:07:c4:ef:f8:2f:ca:54:86:0a:38:f2:
3d:10:a9:b7:4c:e0:90:42:a9:6e:03:00:c8:c6:c8:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EA:4F:72:ED:A3:92:A2:09:08:5C:25:B5:56:CB:5D:89:81:8B:66
X509v3 Authority Key Identifier:
keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:85:9b:26:96:ab:b3:ab:51:30:bf:ca:7b:ec:aa:db:f0:42:
4a:63:69:d9:02:d0:28:d5:da:d1:ac:f9:bc:ce:32:a8:d3:70:
6b:73:50:0c:15:fb:23:6c:80:cb:1f:41:27:84:4d:47:2e:39:
68:73:db:85:58:34:e6:c1:b2:78:a2:ad:73:a5:b4:73:6c:50:
db:63:c8:d8:ef:01:cf:a2:ef:06:8e:d1:20:af:e6:18:9d:f2:
ea:24:b3:97:67:fd:43:bd:41:4b:f7:f7:08:0b:4f:7e:9c:15:
5b:3a:dd:9e:7b:7f:93:c2:a3:66:f5:bd:2b:d8:5c:ac:6a:ee:
c4:2c:61:c9:ae:bf:1d:5a:2f:43:40:50:b9:99:0e:cf:0a:5c:
65:1e:9b:40:e7:cd:0a:06:4d:29:de:0b:f0:c6:83:9f:03:be:
bb:ba:32:c6:f1:52:1e:1c:b0:98:93:1c:1d:c1:7a:51:5e:f2:
2a:97:f4:f3:71:fb:d8:78:dc:de:e9:df:0c:b8:51:4b:0d:f5:
cd:20:e3:a6:9e:96:14:6c:d1:bf:22:51:6f:76:5a:fe:6c:eb:
35:88:c3:81:55:76:b5:f5:09:bc:e6:3e:a8:64:a7:54:58:55:
2a:11:5d:a9:06:cd:11:31:93:78:ee:02:2e:1f:4b:aa:8d:fd:
35:73:7d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:39 2026 by rpki-client