Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
File: mAScy5olSKAa-jAXQVFXSgx6QSw.mft (raw, json)
Hash identifier: KDSHUckOSg2FvXqzUSaeGhFk4HkILqZ9UR9+UlgzpvM=
Subject key identifier: 19:99:64:4E:6D:84:31:CD:EE:1C:B5:FB:63:82:1A:DB:0E:2B:8B:E9
Authority key identifier: 98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
Certificate issuer: /CN=98049ccb9a2548a01afa30174151574a0c7a412c
Certificate serial: 019F8F4770EC66D94800CC2A6C1E98836D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
Manifest number: 0157
Signing time: Thu 23 Jul 2026 14:00:51 +0000
Manifest this update: Thu 23 Jul 2026 14:00:51 +0000
Manifest next update: Fri 24 Jul 2026 14:00:51 +0000
Files and hashes: 1: mAScy5olSKAa-jAXQVFXSgx6QSw.crl (hash: uz5CO5+aWHujZuF3ySVT22P8yJWbW0Ywu6igQM8BnD8=)
2: v3rr5t_ahN3SGVp2ApT1qF3-fwA.asa (hash: RejTRkyxSV+Llox1LpfU1092WFQtRS38pK5lWPMIQNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:70:ec:66:d9:48:00:cc:2a:6c:1e:98:83:6d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98049ccb9a2548a01afa30174151574a0c7a412c
Validity
Not Before: Jul 23 14:00:51 2026 GMT
Not After : Jul 24 14:00:51 2026 GMT
Subject: CN=1999644e6d8431cdee1cb5fb63821adb0e2b8be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d4:07:71:6f:18:21:1a:aa:42:89:a1:1a:7a:
a9:14:6c:0c:a0:6f:22:8d:34:f2:96:57:c2:fb:70:
1b:6d:41:a0:29:43:44:4e:c3:6d:c0:d1:21:d2:9e:
ca:26:2b:10:c7:e6:58:ef:a1:1a:46:f8:02:4e:bd:
64:34:6d:24:56:32:f9:30:6e:2f:f6:c1:a3:b3:72:
e1:49:9d:4a:bb:dc:95:51:1c:ff:8a:c6:e9:e4:e3:
dd:02:e5:77:a3:fc:59:a4:f5:4e:ed:58:c0:99:6b:
c9:80:ec:b9:8d:9d:ef:77:d0:a0:03:70:7b:aa:f5:
c8:28:57:ea:01:23:d8:c9:b5:4a:50:d3:3b:b0:3e:
38:d7:a7:29:75:07:4e:c3:f3:43:ef:f9:d6:2c:ea:
26:f1:54:6c:35:30:40:d8:20:35:f7:f5:ed:bb:57:
81:82:24:d4:ea:bd:97:a8:68:5b:63:92:79:6f:e5:
9b:fa:0d:bf:f9:09:16:39:30:c3:07:57:02:4a:7f:
ee:fc:1d:21:8d:49:a6:f4:51:3c:93:2e:9e:2b:13:
e1:af:6e:fb:73:c8:6e:bc:31:dc:94:5a:be:5b:4d:
20:78:1e:f5:d9:95:69:c2:87:8e:70:e5:69:b5:0e:
12:f0:41:6c:9a:17:56:36:02:de:a2:32:48:f1:02:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:99:64:4E:6D:84:31:CD:EE:1C:B5:FB:63:82:1A:DB:0E:2B:8B:E9
X509v3 Authority Key Identifier:
keyid:98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:28:33:51:6b:85:1e:cf:42:39:2b:32:66:8e:1c:c8:c8:0b:
5a:79:5f:5e:30:8f:a5:1c:f4:49:5d:88:24:36:d6:4c:81:f8:
1a:1f:da:75:52:43:30:b9:c8:65:d2:40:c0:67:a7:8f:c7:cd:
93:14:41:a6:b1:b8:77:b8:f2:35:f9:ae:29:c8:32:25:14:93:
d4:89:93:ee:72:22:52:05:a8:b9:69:6b:96:b8:c2:a0:df:bc:
f8:72:89:99:a4:c2:a2:07:0a:05:d7:d4:69:07:6b:03:6f:f6:
86:3c:60:fd:8e:f5:57:b3:0f:f2:2d:ba:9a:88:66:1d:0f:b6:
5f:c8:58:25:95:69:b1:f8:d5:a3:ca:ca:2f:19:81:37:2e:90:
5e:5c:0c:21:f0:8e:48:9f:67:bb:66:85:17:51:fc:f7:ed:de:
15:d2:fd:21:f6:48:e0:22:fd:88:97:6b:31:7e:79:d3:f1:61:
32:ef:5c:0e:27:19:e8:42:54:9a:88:f2:2e:1f:13:9b:2e:4f:
2c:cd:d5:f9:52:e7:b0:09:e8:92:5a:10:40:ef:01:2c:fe:0f:
8b:a7:89:d2:4c:8e:1a:00:37:bb:d2:a4:01:eb:33:da:ea:d0:
59:bf:a5:e5:f6:25:a5:6f:a4:eb:d6:38:41:ab:1c:3e:fd:17:
c7:72:41:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PR3DsZtlIAMwqbB6Yg20LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MDQ5Y2NiOWEyNTQ4YTAxYWZhMzAxNzQxNTE1NzRhMGM3
YTQxMmMwHhcNMjYwNzIzMTQwMDUxWhcNMjYwNzI0MTQwMDUxWjAzMTEwLwYDVQQD
EygxOTk5NjQ0ZTZkODQzMWNkZWUxY2I1ZmI2MzgyMWFkYjBlMmI4YmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dQHcW8YIRqqQomhGnqpFGwMoG8i
jTTyllfC+3AbbUGgKUNETsNtwNEh0p7KJisQx+ZY76EaRvgCTr1kNG0kVjL5MG4v
9sGjs3LhSZ1Ku9yVURz/isbp5OPdAuV3o/xZpPVO7VjAmWvJgOy5jZ3vd9CgA3B7
qvXIKFfqASPYybVKUNM7sD4416cpdQdOw/ND7/nWLOom8VRsNTBA2CA19/Xtu1eB
giTU6r2XqGhbY5J5b+Wb+g2/+QkWOTDDB1cCSn/u/B0hjUmm9FE8ky6eKxPhr277
c8huvDHclFq+W00geB712ZVpwoeOcOVptQ4S8EFsmhdWNgLeojJI8QLpywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmZZE5thDHN7hy1+2OCGtsOK4vpMB8GA1UdIwQY
MBaAFJgEnMuaJUigGvowF0FRV0oMekEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUFTY3k1b2xTS0FhLWpBWFFWRlhTZ3g2UVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kMmViMmYtNTE1OS00MTQ0LTgxMmQt
OTJjN2NmYWE4YjdkLzEvbUFTY3k1b2xTS0FhLWpBWFFWRlhTZ3g2UVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kMmViMmYtNTE1OS00MTQ0LTgxMmQtOTJjN2NmYWE4Yjdk
LzEvbUFTY3k1b2xTS0FhLWpBWFFWRlhTZ3g2UVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSgzUWuF
Hs9COSsyZo4cyMgLWnlfXjCPpRz0SV2IJDbWTIH4Gh/adVJDMLnIZdJAwGenj8fN
kxRBprG4d7jyNfmuKcgyJRST1ImT7nIiUgWouWlrlrjCoN+8+HKJmaTCogcKBdfU
aQdrA2/2hjxg/Y71V7MP8i26mohmHQ+2X8hYJZVpsfjVo8rKLxmBNy6QXlwMIfCO
SJ9nu2aFF1H89+3eFdL9IfZI4CL9iJdrMX550/FhMu9cDicZ6EJUmojyLh8Tmy5P
LM3V+VLnsAnokloQQO8BLP4Pi6eJ0kyOGgA3u9KkAesz2urQWb+l5fYlpW+k69Y4
QascPv0Xx3JBlQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:34 2026 by rpki-client