Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
File: ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json)
Hash identifier: 0yWTBUHIe2NZXcShoMD3LYmnj+On50iGxdaZS2S3ZSw=
Subject key identifier: 8C:9F:9A:E4:5E:15:C6:53:82:58:DE:3D:FD:F3:77:99:91:21:34:E1
Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
Certificate issuer: /CN=01292e03a731796e1d7b148b1dd235d144352f5d
Certificate serial: 019DCED0330BB5400DEDF8925D7C4A18F1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
Manifest number: 11B5
Signing time: Mon 27 Apr 2026 12:00:44 +0000
Manifest this update: Mon 27 Apr 2026 12:00:44 +0000
Manifest next update: Tue 28 Apr 2026 12:00:44 +0000
Files and hashes: 1: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: k3xfdGOcNJRk3Kv6ISX1bEQratfco1ZKFRmF/dcx+sA=)
2: ZcMDnxFKg86WG985x8gSYpkiw0w.roa (hash: NWzoV3X+tjCKZ4ahSvdzMzLxfudtWlBZs1TQLyd53h4=)
3: lIVhHM1g1TW5ddfPvkY5_fzGoKU.roa (hash: DS6+mQyyS1WgqS8CIrjWgik6/BiJxSFGFw65yEtb7os=)
4: sADfRLRIwEm-KVdFT8jWlHL8oSg.roa (hash: EZEYubhTSXGqlxWAm0J4OXdKM/7Z+1zdS/2lIIhyTjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:33:0b:b5:40:0d:ed:f8:92:5d:7c:4a:18:f1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d
Validity
Not Before: Apr 27 12:00:44 2026 GMT
Not After : Apr 28 12:00:44 2026 GMT
Subject: CN=8c9f9ae45e15c6538258de3dfdf37799912134e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:85:51:c1:0d:21:d1:cf:e9:3e:fe:5d:e0:
a3:fd:85:84:60:c8:66:e5:bb:9d:88:b1:43:4d:38:
22:50:32:78:32:2f:99:4b:f1:f8:74:12:f7:eb:11:
99:50:9a:53:26:ed:dd:66:74:5f:cb:fb:cd:95:fb:
34:ca:eb:a9:f1:58:f6:7f:46:7b:31:c2:48:a9:67:
54:b3:81:48:55:ef:d5:ea:c3:7b:37:1e:2e:0e:72:
f2:8d:28:f5:ca:c6:aa:14:18:6c:66:33:78:37:07:
19:5d:56:66:b2:02:5b:1c:0b:21:7c:44:0e:e6:df:
ea:52:37:df:8b:e2:9b:fb:6b:10:b5:f0:b4:08:df:
f1:c1:88:6b:da:bc:d5:90:48:13:2b:e7:7f:d2:00:
94:19:b0:81:d5:36:aa:1f:8a:e0:dc:60:4c:4c:eb:
06:f1:94:b4:51:6e:b5:52:3c:fd:29:1f:2d:2e:31:
eb:e3:4f:4c:1c:04:7c:08:7a:17:4d:55:68:0a:c3:
05:5c:64:46:c4:f8:d3:b7:48:74:3e:11:ee:a2:8d:
94:31:54:75:9d:77:ee:83:21:0c:b0:56:43:fd:a2:
8a:ad:61:57:01:89:1b:dc:e3:30:5b:90:f5:66:cc:
50:ba:ff:d7:3f:4e:d3:e2:db:c0:c2:ea:3a:c2:bf:
0f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9F:9A:E4:5E:15:C6:53:82:58:DE:3D:FD:F3:77:99:91:21:34:E1
X509v3 Authority Key Identifier:
keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c6:c5:40:68:ec:c6:94:f9:a8:4a:59:87:19:b7:fe:3e:0e:
32:20:31:d6:81:e9:47:01:e8:53:69:7e:95:82:51:b1:c1:3d:
60:5b:2f:43:a2:3c:c4:33:27:66:46:af:99:1f:91:32:2b:67:
99:01:52:22:5d:34:50:6d:80:f2:d3:c6:50:8e:25:b1:3c:b4:
ee:16:bf:ff:d5:76:b0:72:c0:a6:9c:13:76:aa:68:a0:b4:92:
0e:20:e6:be:c4:73:69:3a:27:41:7e:48:28:a1:fa:df:81:45:
8e:18:41:6e:5a:bf:57:a5:eb:21:6c:fd:c6:37:c6:5c:a9:92:
9e:44:a3:f3:87:54:c8:2c:b5:40:91:6b:cc:87:0f:f1:2b:91:
7b:2e:c3:b9:f3:77:16:50:61:6b:9a:0e:c1:6f:e4:a5:c2:fb:
4d:08:33:26:9b:ef:55:e9:62:52:66:c9:12:df:8f:67:8b:7a:
bf:d8:09:ef:9c:f7:83:d0:0e:37:cb:4d:0a:7a:33:ed:25:92:
59:9f:21:6b:9d:3f:c6:eb:dc:4b:9d:26:12:51:f2:f7:e5:25:
8e:71:41:17:f4:cb:96:7a:1d:30:c5:71:a7:07:d3:6c:65:86:
8f:2f:c0:f9:0a:2a:01:42:79:b2:36:54:e7:32:90:56:e2:ee:
a3:de:91:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0DMLtUAN7fiSXXxKGPH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjkyZTAzYTczMTc5NmUxZDdiMTQ4YjFkZDIzNWQxNDQz
NTJmNWQwHhcNMjYwNDI3MTIwMDQ0WhcNMjYwNDI4MTIwMDQ0WjAzMTEwLwYDVQQD
Eyg4YzlmOWFlNDVlMTVjNjUzODI1OGRlM2RmZGYzNzc5OTkxMjEzNGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTeFUcENIdHP6T7+XeCj/YWEYMhm
5budiLFDTTgiUDJ4Mi+ZS/H4dBL36xGZUJpTJu3dZnRfy/vNlfs0yuup8Vj2f0Z7
McJIqWdUs4FIVe/V6sN7Nx4uDnLyjSj1ysaqFBhsZjN4NwcZXVZmsgJbHAshfEQO
5t/qUjffi+Kb+2sQtfC0CN/xwYhr2rzVkEgTK+d/0gCUGbCB1TaqH4rg3GBMTOsG
8ZS0UW61Ujz9KR8tLjHr409MHAR8CHoXTVVoCsMFXGRGxPjTt0h0PhHuoo2UMVR1
nXfugyEMsFZD/aKKrWFXAYkb3OMwW5D1ZsxQuv/XP07T4tvAwuo6wr8P5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyfmuReFcZTgljePf3zd5mRITThMB8GA1UdIwQY
MBaAFAEpLgOnMXluHXsUix3SNdFENS9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTkt
MGRmN2RmNGQ1YjAxLzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTktMGRmN2RmNGQ1YjAx
LzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8bFQGjs
xpT5qEpZhxm3/j4OMiAx1oHpRwHoU2l+lYJRscE9YFsvQ6I8xDMnZkavmR+RMitn
mQFSIl00UG2A8tPGUI4lsTy07ha//9V2sHLAppwTdqpooLSSDiDmvsRzaTonQX5I
KKH634FFjhhBblq/V6XrIWz9xjfGXKmSnkSj84dUyCy1QJFrzIcP8SuRey7DufN3
FlBha5oOwW/kpcL7TQgzJpvvVeliUmbJEt+PZ4t6v9gJ75z3g9AON8tNCnoz7SWS
WZ8ha50/xuvcS50mElHy9+UljnFBF/TLlnodMMVxpwfTbGWGjy/A+QoqAUJ5sjZU
5zKQVuLuo96R+w==
-----END CERTIFICATE-----
Generated at Mon Apr 27 20:09:18 2026 by rpki-client