Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
File: ascqc0OS9s95Kz0MPtEYIChvGfQ.mft (raw, json)
Hash identifier: rfFdW0zXKf2eI3sS/sK1AAgBMjPs5UqQPx3jVxGfsN0=
Subject key identifier: 5F:AA:59:4A:B6:CD:53:D9:B6:45:5E:6A:F1:41:57:87:69:0D:48:F5
Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
Certificate issuer: /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Certificate serial: 019D269624455B0CCE91036C186EFCEAF5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
Manifest number: 13C5
Signing time: Wed 25 Mar 2026 20:01:07 +0000
Manifest this update: Wed 25 Mar 2026 20:01:07 +0000
Manifest next update: Thu 26 Mar 2026 20:01:07 +0000
Files and hashes: 1: ascqc0OS9s95Kz0MPtEYIChvGfQ.crl (hash: bQu7iYfiOebFmpF3u60DGY2U3ujM2kof9hW6Cgc+gbE=)
2: zLtpRSkwBaEeDbTwaD6T5utFTwo.roa (hash: SBHcL2OtAzM2LvNd+W8Dn+LVXeCDUc5xiuOmwRuEFKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:24:45:5b:0c:ce:91:03:6c:18:6e:fc:ea:f5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Validity
Not Before: Mar 25 20:01:07 2026 GMT
Not After : Mar 26 20:01:07 2026 GMT
Subject: CN=5faa594ab6cd53d9b6455e6af1415787690d48f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:01:ea:f0:da:02:06:7e:31:84:2d:5d:ea:0f:
f0:23:bf:34:19:c7:de:c5:50:44:46:60:e6:22:9d:
55:ca:a7:b4:97:25:05:43:c7:78:27:8c:96:fe:dd:
d8:93:28:61:e7:5e:06:fd:d7:86:54:23:b8:bd:a4:
05:89:0d:b8:9f:9f:d1:61:bd:43:ba:da:a1:e3:84:
c6:54:69:cb:0e:a1:18:90:c3:ac:b5:7a:af:9a:c3:
f0:3f:fd:02:fd:7a:ca:0d:a7:03:2b:5f:64:06:df:
ef:3f:04:8e:83:8b:e2:46:96:aa:35:76:2d:ef:96:
ce:66:eb:f8:a5:7e:2a:db:67:f6:f1:5e:da:58:85:
d2:3d:04:d3:a3:3f:68:b5:56:ba:8d:bb:b5:c3:15:
57:a1:73:92:ab:8f:7e:4e:b4:5d:38:dd:6f:bc:5e:
5b:81:a6:6f:c0:e7:2d:25:3f:69:cb:ef:e1:5c:ef:
ee:50:5e:c7:89:34:e6:0d:cc:76:15:7f:72:95:f7:
e4:d1:3e:12:ac:90:81:2c:c9:a6:43:44:38:25:c6:
13:8c:4f:30:d3:69:5d:19:f1:df:9c:4f:84:1a:04:
43:e8:a3:6e:cc:8e:06:dc:0b:45:1f:5c:51:3b:f0:
0c:b2:d2:9f:9c:17:96:5b:6a:ff:2b:b3:22:24:20:
ab:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AA:59:4A:B6:CD:53:D9:B6:45:5E:6A:F1:41:57:87:69:0D:48:F5
X509v3 Authority Key Identifier:
keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4e:92:6e:07:67:a6:54:86:86:e9:59:65:62:ef:fc:6f:1f:
b8:83:6c:5e:1b:9e:bd:26:e8:e3:51:f4:6d:36:bc:35:81:29:
da:e8:2b:dc:a1:ad:1e:25:b4:d3:a9:0e:73:d6:c5:fb:87:fb:
e3:20:d7:78:d8:5f:70:be:c6:03:4e:b6:6c:02:ac:f7:ed:0f:
64:51:ef:b7:ed:4c:df:6d:fd:35:46:8a:45:f4:3a:bf:e5:1e:
37:ec:7d:ae:9b:e9:ad:98:3b:65:7b:cb:6e:53:eb:ab:92:3d:
cf:f3:fc:ec:4b:a2:6c:e3:ef:73:e5:6e:ab:cd:7d:7c:78:18:
85:74:14:fb:e8:5e:79:7f:09:8d:76:b3:d7:f5:ca:61:9f:95:
0a:78:1d:4c:67:96:c1:73:ab:31:e3:85:1a:94:eb:99:99:59:
14:1f:60:e9:b4:e6:ea:25:22:25:f8:50:a9:94:95:cf:20:eb:
4b:63:43:30:93:53:9d:8d:44:6e:a3:66:b9:4f:c5:79:2e:be:
a2:21:63:a5:7a:72:91:54:c2:f7:de:1e:c9:d0:0e:b9:2a:d8:
c0:3d:17:a8:9b:7e:1e:e0:32:1f:1c:52:28:cc:5d:4e:d2:b1:
17:ef:66:a8:57:33:07:98:eb:c5:a6:76:9b:5e:32:c9:12:30:
61:ce:4e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:53:09 2026 by rpki-client