Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
File: mAScy5olSKAa-jAXQVFXSgx6QSw.mft (raw, json)
Hash identifier: U6Yeco0WCcn6VpBh4M/0PYrq+rexkTdIfSLVvjlbEiU=
Subject key identifier: D7:26:33:9D:65:16:DE:3C:0C:B3:1D:E7:27:67:FD:26:60:9E:07:65
Authority key identifier: 98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
Certificate issuer: /CN=98049ccb9a2548a01afa30174151574a0c7a412c
Certificate serial: 019D254C337E09D44769DB91F00B3325E5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
Manifest number: 17
Signing time: Wed 25 Mar 2026 14:00:44 +0000
Manifest this update: Wed 25 Mar 2026 14:00:44 +0000
Manifest next update: Thu 26 Mar 2026 14:00:44 +0000
Files and hashes: 1: mAScy5olSKAa-jAXQVFXSgx6QSw.crl (hash: FgkayPkO66ofLRPGEO7RHhwQuMlpzLpb4DTSbfOZ0SM=)
2: v3rr5t_ahN3SGVp2ApT1qF3-fwA.asa (hash: RejTRkyxSV+Llox1LpfU1092WFQtRS38pK5lWPMIQNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:33:7e:09:d4:47:69:db:91:f0:0b:33:25:e5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98049ccb9a2548a01afa30174151574a0c7a412c
Validity
Not Before: Mar 25 14:00:44 2026 GMT
Not After : Mar 26 14:00:44 2026 GMT
Subject: CN=d726339d6516de3c0cb31de72767fd26609e0765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:77:d5:a3:eb:86:03:69:19:60:75:36:44:
cc:1b:ff:1e:93:a1:ab:84:61:56:37:39:b2:a2:50:
39:94:51:b3:10:f3:76:77:c7:bb:59:8c:21:0d:5d:
64:d9:02:65:40:fd:e4:36:c3:78:62:7c:ee:97:aa:
62:6a:91:8a:b7:fa:bd:6a:7e:10:18:4e:82:a1:fb:
25:38:79:fc:11:8c:af:35:79:4d:6a:74:7e:22:8f:
45:99:9e:c0:18:40:c0:c3:00:25:93:b0:17:2b:a2:
24:85:39:c0:4c:e5:64:63:9a:ff:f0:9f:97:68:dd:
74:86:a7:55:70:f2:b2:64:49:42:b7:79:7b:ee:34:
b4:6a:0b:f6:f4:c1:f9:9b:fb:03:d7:fd:1c:dc:30:
f1:c7:c2:2d:cb:48:5d:d3:c9:78:8a:74:8d:2e:ab:
c4:e2:68:c7:d5:d4:b4:ac:5b:28:51:1d:b9:8a:d6:
19:b3:e1:39:d3:6e:72:7d:1b:11:b1:6a:97:e8:43:
21:8b:5f:b8:45:41:63:a9:f7:cb:d5:30:91:23:f8:
be:7d:26:81:77:aa:7c:ec:8d:ca:b0:57:66:f7:d6:
d9:3c:06:a2:f3:7c:55:ba:32:fc:1d:9a:16:a2:32:
fc:57:a5:20:2a:38:42:a2:e0:b0:a4:3c:ed:56:36:
80:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:26:33:9D:65:16:DE:3C:0C:B3:1D:E7:27:67:FD:26:60:9E:07:65
X509v3 Authority Key Identifier:
keyid:98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:95:fc:05:8e:e0:af:8c:48:fe:66:24:74:5b:8f:fe:39:17:
bc:54:a4:fa:95:2e:e9:02:3a:fc:ce:75:11:6b:4c:c6:4c:0f:
74:79:c6:87:ed:49:b5:be:dc:0b:f0:c6:a9:5c:2c:b2:4f:af:
c8:bd:93:7a:1a:75:ad:ee:4d:46:01:9d:62:d1:ca:a1:f3:17:
37:4a:6b:60:5f:1f:b8:16:b6:a2:85:39:0a:a9:8d:d2:11:a3:
8b:ff:33:ca:b9:70:5e:bf:16:b7:d8:90:be:b7:6a:5f:cb:2a:
86:3a:b8:37:d8:4f:2e:ed:6e:1f:05:65:dc:fc:71:eb:dd:7f:
1d:c2:33:95:16:73:e1:7b:52:ef:f5:14:35:62:e7:f3:a9:fd:
59:37:7b:34:47:9f:52:58:56:eb:c0:a7:ff:ec:db:f5:3f:1a:
ec:bc:55:f4:2a:4d:d4:36:08:f7:ae:34:9d:d7:b0:f9:cc:96:
a7:8c:ea:07:76:49:5f:78:a0:cc:d6:48:26:37:55:ba:2c:b4:
50:17:ec:13:f3:a3:6c:d7:5c:be:88:37:6e:4c:5b:db:79:c6:
c7:3f:7e:89:9b:55:9d:fd:67:12:be:92:25:f4:a7:19:fe:1e:
40:74:d5:92:08:31:23:f0:da:ec:d1:5f:c2:15:89:38:94:a7:
77:94:5e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:35:34 2026 by rpki-client