Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
File: mAScy5olSKAa-jAXQVFXSgx6QSw.mft (raw, json)
Hash identifier: YtbxPRUfqUQZq5mJbnPQvmtN67mG28X1Dnvi9wUxWQA=
Subject key identifier: 4F:E0:90:DF:5B:DD:85:B3:06:60:8B:14:3B:CF:03:7E:06:E8:7D:1A
Authority key identifier: 98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
Certificate issuer: /CN=98049ccb9a2548a01afa30174151574a0c7a412c
Certificate serial: 019E1E6C6277918DC08CD031C3922979D43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
Manifest number: 98
Signing time: Tue 12 May 2026 23:01:20 +0000
Manifest this update: Tue 12 May 2026 23:01:20 +0000
Manifest next update: Wed 13 May 2026 23:01:20 +0000
Files and hashes: 1: mAScy5olSKAa-jAXQVFXSgx6QSw.crl (hash: oQVj+5s3p6C4hvDNl1XlzxTH6BXDbJaS86fLd8zLG6k=)
2: v3rr5t_ahN3SGVp2ApT1qF3-fwA.asa (hash: RejTRkyxSV+Llox1LpfU1092WFQtRS38pK5lWPMIQNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:62:77:91:8d:c0:8c:d0:31:c3:92:29:79:d4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98049ccb9a2548a01afa30174151574a0c7a412c
Validity
Not Before: May 12 23:01:20 2026 GMT
Not After : May 13 23:01:20 2026 GMT
Subject: CN=4fe090df5bdd85b306608b143bcf037e06e87d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:88:88:1b:3d:62:1a:08:89:c2:da:15:e7:
b2:aa:d1:e0:cd:bb:0f:4c:7d:69:28:c1:a9:4b:8f:
57:2c:e9:51:f0:02:54:a9:ad:30:f8:69:a4:40:a0:
5d:ae:31:81:de:5b:d4:f0:a0:92:65:0d:39:6d:4d:
56:8e:ea:35:af:8c:a1:49:39:e0:9e:2c:7d:fa:fc:
71:a6:70:39:71:c2:e1:5e:b7:72:a5:bb:1e:cb:f4:
96:04:91:90:51:6a:74:53:41:bb:95:98:66:27:a8:
ec:67:2e:a7:a2:be:02:ce:25:be:6d:50:37:4e:97:
1e:41:b9:34:ee:e5:97:13:b5:eb:91:6e:0f:a6:12:
ae:02:66:f0:89:3a:89:89:6c:57:ab:cc:dd:8d:6d:
13:30:ab:a7:ad:87:69:b3:5c:dc:62:df:f6:29:b2:
95:f4:cc:47:7c:c2:0c:5f:e8:73:83:d8:b1:96:36:
e3:af:1a:be:ca:c4:b8:5f:30:f7:e4:23:85:b5:e9:
6b:29:39:55:22:4c:7e:dd:23:3c:48:68:33:99:fa:
33:68:ba:26:a8:c0:d1:a0:c6:98:48:f9:e0:4c:fe:
54:b7:14:a1:28:9d:03:17:4c:3b:10:5b:da:ea:62:
f1:f9:12:5e:d3:d4:8b:0a:06:1a:84:f1:2d:a4:09:
2c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E0:90:DF:5B:DD:85:B3:06:60:8B:14:3B:CF:03:7E:06:E8:7D:1A
X509v3 Authority Key Identifier:
keyid:98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2a:37:64:d4:fb:0f:2c:8a:98:a8:26:5d:db:09:b0:26:3f:
6b:b5:1e:69:e0:c1:83:de:d8:f0:21:26:51:ae:ec:fb:71:77:
72:0b:0c:fa:cf:a8:5d:63:70:e7:72:27:30:ce:eb:9a:24:7b:
d6:c7:a4:53:97:de:93:cb:99:e9:cb:22:35:95:98:0e:36:55:
71:c1:e8:98:c3:73:cf:c8:65:78:85:92:09:94:6f:87:37:70:
7c:c8:f2:0a:da:cd:e0:bc:2b:1e:48:0a:2c:79:77:3d:06:31:
85:4a:d5:84:27:7a:e0:ed:70:5c:25:bd:dc:09:8a:5d:00:c7:
48:9b:97:35:08:3c:dd:81:fd:4c:6a:95:9e:b8:b4:98:79:19:
df:e6:e7:95:5e:e7:c5:42:6c:b9:1c:7f:1e:3e:ed:84:c5:d8:
9f:f5:f1:34:99:39:7b:ae:fb:56:cf:4b:5c:e9:e9:fe:9b:e9:
ec:82:16:20:04:bb:1d:51:31:a5:fb:ca:3e:9e:0f:2d:48:45:
b2:18:da:ff:55:04:be:1e:23:d4:07:41:37:81:67:6a:3b:5a:
a4:af:7f:f3:b9:10:fa:af:cb:4f:1c:80:3b:5e:8b:c1:46:97:
f5:fa:1e:ec:b6:58:03:02:f9:ae:18:4f:7e:54:c3:ac:5a:90:
8a:81:21:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:25 2026 by rpki-client