Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
File: AsLBh9mLRgOATtEWWttFCbYwqDo.mft (raw, json)
Hash identifier: M0b6KDxBUB23oKSshx6PknaO6W4VZYZvmO4Qp3mA0Y8=
Subject key identifier: 1F:E5:3E:6C:BA:2A:7E:1E:C0:09:86:59:41:F7:E7:A0:1A:DF:6D:A3
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Certificate issuer: /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial: 019D3A1CA9682243EE9BB0C6D79388772901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
Manifest number: 0D85
Signing time: Sun 29 Mar 2026 15:00:49 +0000
Manifest this update: Sun 29 Mar 2026 15:00:49 +0000
Manifest next update: Mon 30 Mar 2026 15:00:49 +0000
Files and hashes: 1: AsLBh9mLRgOATtEWWttFCbYwqDo.crl (hash: GonScYmgSEEHZ0ShsOdc9rR4IAuK5V9SoIrJS2E9R/4=)
2: WuVnfkB6n82FOg4W-IcUzY3Fe0M.roa (hash: DZE6yI97kbfPPegu/0turhmXzDIWBsKrThF8bRlEJlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:a9:68:22:43:ee:9b:b0:c6:d7:93:88:77:29:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
Validity
Not Before: Mar 29 15:00:49 2026 GMT
Not After : Mar 30 15:00:49 2026 GMT
Subject: CN=1fe53e6cba2a7e1ec009865941f7e7a01adf6da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:83:ba:f6:88:9c:18:90:00:0a:75:32:9f:
9d:3a:87:33:c6:e8:8f:af:12:c2:b5:9c:fe:7d:96:
0b:78:5b:e6:f7:79:d2:b9:b5:f7:b6:f7:60:fc:50:
36:20:10:82:04:07:55:26:24:b4:4d:84:2d:be:cf:
8d:ab:f6:bd:39:9e:03:c9:5c:a5:df:64:8e:09:46:
82:f4:58:4a:b7:62:f8:8e:b6:d8:20:4c:34:fc:6f:
05:20:38:81:3b:69:6a:25:95:e8:ce:62:60:fb:5d:
f3:e0:99:e5:2b:8e:d1:c4:2f:73:58:03:cf:19:1e:
e4:17:99:58:49:3b:44:41:35:f7:0b:c1:a5:4e:07:
2d:7b:7a:f3:37:dd:66:83:c8:c4:36:9e:9b:fb:be:
e7:53:6f:ed:0e:6d:26:68:1f:bf:77:94:fc:71:c8:
42:12:69:29:36:14:de:32:4d:51:af:75:49:09:6e:
4b:83:ca:8c:6b:06:b1:b9:34:e8:cf:fa:28:26:6c:
15:96:c1:aa:d4:79:6e:b8:77:ff:0c:20:c1:61:5e:
43:c9:f4:8d:24:d0:27:e4:ee:d4:9b:6e:55:13:d2:
6c:9c:0c:2b:94:15:03:bd:c2:71:13:1f:09:d9:46:
ee:06:f7:9f:10:4e:80:0f:e5:7a:91:ab:b5:f7:e3:
9b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E5:3E:6C:BA:2A:7E:1E:C0:09:86:59:41:F7:E7:A0:1A:DF:6D:A3
X509v3 Authority Key Identifier:
keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:74:56:d9:b9:ab:ef:9c:34:d8:7d:07:98:5c:62:c2:a8:00:
d4:6c:88:75:8a:fa:10:c8:25:b6:a1:38:2e:b5:65:90:f6:f7:
56:cb:f2:51:d5:a8:c1:1c:93:4a:39:5c:31:93:bf:87:9d:da:
19:ed:2c:55:d8:be:c0:fa:fb:e9:aa:e0:94:72:a0:21:d2:4a:
40:ce:72:a6:da:fb:68:00:30:8a:a8:e6:df:87:0d:b8:af:e9:
86:e3:21:ec:1b:0f:78:82:22:ec:2e:6f:e5:bc:be:c3:5a:2c:
73:05:28:6b:7b:38:3f:b1:e4:70:8f:67:6e:e7:de:12:c4:34:
4b:19:20:53:35:42:f1:d5:4b:33:05:f7:fd:2e:d7:1f:48:7e:
7c:40:17:eb:d2:43:0a:04:98:de:ce:04:b3:06:cc:08:bf:7f:
97:e4:f9:71:3d:ce:70:28:b7:7c:69:8c:0a:6f:87:f6:5d:c2:
b8:d7:ce:1b:d7:eb:04:8a:6d:d2:54:0e:ed:18:06:5b:5e:4d:
db:9e:10:b2:60:f3:d7:0d:32:00:1e:58:37:93:06:47:49:20:
da:87:a1:d5:b9:62:1e:33:92:61:78:b2:90:fd:62:a3:60:fc:
b6:e6:18:05:04:c1:9e:cf:c0:36:b3:6b:73:95:be:b0:c0:d2:
69:22:54:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:07 2026 by rpki-client