Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
File: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json)
Hash identifier: BjcJ7zQjWQOJcBjZE4zylQc1T47s4DiHhDEQyesFVXw=
Subject key identifier: 76:75:AA:3D:D3:F4:EA:6C:85:A1:CB:F0:D2:0A:C7:51:CF:A6:DA:96
Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
Certificate issuer: /CN=02c4df5b74d99f9796718435c3afd2220cb56751
Certificate serial: 019D25833CD3951C391EC76B06EA392F47D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
Manifest number: 0601
Signing time: Wed 25 Mar 2026 15:00:50 +0000
Manifest this update: Wed 25 Mar 2026 15:00:50 +0000
Manifest next update: Thu 26 Mar 2026 15:00:50 +0000
Files and hashes: 1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: rc1zZPHf26eRxAqTNWyab1RghM4/V8szylk1zEFcTUM=)
2: Eii8h6uaBr6fEXcjaJ5se8NVU0c.roa (hash: WAw9S4sN6yDFY1nBSSz2zmctfGBwQIAYJa1xn10MbIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:3c:d3:95:1c:39:1e:c7:6b:06:ea:39:2f:47:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751
Validity
Not Before: Mar 25 15:00:50 2026 GMT
Not After : Mar 26 15:00:50 2026 GMT
Subject: CN=7675aa3dd3f4ea6c85a1cbf0d20ac751cfa6da96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:02:11:11:28:c6:d0:61:a4:c3:72:3c:7c:
7f:57:1b:3e:b3:3b:16:26:57:64:81:21:66:4a:3f:
6b:35:89:7e:53:fd:4e:f7:70:c3:32:9a:57:9c:85:
23:5c:7c:bd:96:16:99:2f:15:f1:6b:06:04:20:c2:
03:33:31:aa:7b:ea:aa:34:cf:6c:ad:c7:86:75:c3:
47:6d:03:3f:0c:c5:e0:12:7f:29:d7:df:dc:c2:ac:
10:05:31:eb:8d:90:a3:64:09:7b:05:d1:38:86:b6:
ab:5c:9e:eb:b0:de:4f:b6:8f:99:9f:3c:51:3a:13:
eb:ed:72:97:03:26:89:d6:d7:22:bc:2b:00:f6:18:
84:22:60:b2:8f:1b:97:cd:c4:a6:2a:a7:f3:32:45:
fd:15:fa:c4:e4:04:98:d1:a3:f3:71:84:c3:5a:ae:
37:20:30:19:9c:7d:14:8c:3a:9f:c4:1d:cb:70:5f:
70:3b:97:3e:64:7b:3d:a1:d9:0e:d7:3b:13:3f:34:
ef:22:78:9b:8e:99:b8:3d:97:aa:fb:e7:57:fa:87:
be:4a:0f:f6:d9:bc:88:cb:be:22:bc:09:0e:b3:bc:
72:8f:a8:ff:0c:35:93:db:8a:08:79:60:db:22:4b:
d0:71:ac:7b:ca:95:03:e3:bf:50:21:24:7e:02:7c:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:75:AA:3D:D3:F4:EA:6C:85:A1:CB:F0:D2:0A:C7:51:CF:A6:DA:96
X509v3 Authority Key Identifier:
keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:16:18:01:59:78:e5:61:61:f0:3d:56:49:3a:94:a7:ab:27:
c2:b1:b7:af:33:47:e9:ad:10:64:fc:ce:d0:d8:ab:95:4f:9f:
5b:4b:39:d1:20:10:af:a9:84:94:3b:f5:9d:00:77:96:b3:79:
14:aa:f9:59:45:5d:05:7d:01:55:e5:4d:d8:11:61:d3:a8:92:
a0:4b:d5:62:54:21:f7:13:7e:c4:c8:77:4d:c7:be:b1:8b:db:
18:fe:ba:35:dd:da:52:fd:6e:1c:ba:62:39:5e:d6:c3:6d:22:
ee:6b:75:28:af:12:b3:a1:76:4d:ff:a0:d7:1d:43:21:d3:3e:
b2:27:d4:2c:2d:69:9f:a2:19:a9:1b:4f:54:d4:31:15:ba:17:
da:82:cf:d5:71:89:83:9b:1a:74:83:93:96:a0:8d:e5:86:b8:
b7:89:f9:3a:4e:f5:cb:36:86:40:ad:6a:53:cb:c0:c0:7e:32:
e0:98:18:52:aa:d2:04:99:b8:1e:c5:8b:e3:61:69:bf:d6:42:
91:c0:7b:ae:1e:b9:f0:4f:e8:cd:64:7d:7d:0a:9d:f4:a0:4b:
e2:cc:49:cf:97:7f:dd:07:b5:c9:5f:0e:15:50:1f:72:dd:fa:
2e:53:8e:03:ed:30:20:38:c8:86:d3:5d:36:95:59:6b:89:99:
4f:15:b4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:26 2026 by rpki-client