Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
File: ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft (raw, json)
Hash identifier: H7lSA4yF/eQzzaGAwxJoc7hPApSMvfA/7P1FKYZ98W0=
Subject key identifier: 1A:07:EA:D1:0C:E9:84:F5:A9:8B:F4:BD:DE:E1:DE:63:5E:52:89:C8
Authority key identifier: 01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22
Certificate issuer: /CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
Certificate serial: 019D27046B84BD24C7D5212CE555BA49CC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
Manifest number: 09B5
Signing time: Wed 25 Mar 2026 22:01:34 +0000
Manifest this update: Wed 25 Mar 2026 22:01:34 +0000
Manifest next update: Thu 26 Mar 2026 22:01:34 +0000
Files and hashes: 1: ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl (hash: eI+z7wx2G0Mf5fGbWVCWpfSkddHzMtenXHva2XsJ0kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:6b:84:bd:24:c7:d5:21:2c:e5:55:ba:49:cc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
Validity
Not Before: Mar 25 22:01:34 2026 GMT
Not After : Mar 26 22:01:34 2026 GMT
Subject: CN=1a07ead10ce984f5a98bf4bddee1de635e5289c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:58:d6:67:99:4b:30:ff:fb:a1:75:3c:f2:b5:
47:fe:d0:82:96:3c:77:52:e8:62:33:4d:3f:61:60:
e4:9b:29:ca:31:0d:cb:19:db:1a:9f:c6:a4:b7:d7:
88:9f:31:3e:71:eb:3d:7e:2a:c0:53:39:6f:d4:1a:
9f:b6:bd:1b:30:fa:ca:0a:a2:e9:d8:0b:6d:5c:cb:
41:da:47:fb:d6:83:64:04:a1:f0:53:bb:cc:0c:f4:
a1:1e:c7:55:42:fe:21:d9:36:60:68:92:17:1f:29:
56:71:de:7e:08:7f:ef:20:94:00:dd:06:64:6b:38:
b3:1a:84:b2:ae:66:c7:a0:ae:9a:5e:24:6e:de:e0:
ba:1c:32:2a:03:47:cb:37:07:b7:9c:8f:93:7c:d3:
b0:f3:77:63:fd:ad:a4:07:1e:72:6e:97:48:6a:85:
85:3f:d9:e9:0d:fb:3f:ff:eb:54:f9:2d:8c:3f:d9:
21:a7:8c:63:86:e5:a1:f9:8b:64:e9:01:d7:43:49:
27:98:7e:e2:4e:08:7b:a2:29:93:92:1d:90:60:64:
69:20:75:77:78:36:45:80:ae:b1:05:fa:e1:07:e5:
d9:6f:d2:62:d4:b7:6b:6a:68:9b:f2:0d:57:f6:b3:
92:b1:8e:ea:f3:e4:6b:03:40:b9:f8:06:45:ea:ef:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:07:EA:D1:0C:E9:84:F5:A9:8B:F4:BD:DE:E1:DE:63:5E:52:89:C8
X509v3 Authority Key Identifier:
keyid:01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8a:f9:82:73:45:4e:71:88:fe:d1:7d:26:62:4f:ec:26:99:
d9:d6:42:07:27:84:62:ef:3c:65:db:18:19:23:5b:15:21:f5:
98:3b:9e:7f:5e:89:ae:d7:43:46:b5:bc:62:3c:a6:12:aa:ec:
1a:af:49:a5:0f:8b:f1:28:22:76:ce:5a:02:3f:58:73:87:d1:
80:03:4b:a4:5e:2b:59:55:e0:e7:28:7d:96:51:58:7c:23:41:
5e:5a:e9:f4:4d:f6:dd:9f:36:39:75:6c:1c:20:3b:58:d7:d5:
4e:f4:bb:60:6a:23:d1:0e:72:9a:e0:2b:cc:9f:1f:f0:2c:75:
b8:de:f6:5c:92:1a:c8:53:b7:2d:97:6d:63:f6:6c:6d:b1:af:
bc:f0:a8:48:a8:b2:75:ea:34:7a:70:10:f2:ff:30:b7:dd:be:
e5:2e:34:3d:80:a9:11:cb:0d:bb:3c:e7:79:6b:ca:03:22:da:
2a:9b:3a:2d:9e:b3:01:b1:13:3f:f2:68:9e:c3:af:0b:d5:1a:
0d:b1:26:be:da:1a:dc:c5:c1:a0:b7:9d:c4:ad:1c:6b:e4:53:
f5:cc:e7:8c:6f:9c:6e:d3:bc:59:9b:b0:e7:47:76:7f:e4:a8:
99:00:54:6f:93:0c:6a:52:21:0c:dc:34:4a:87:97:05:fc:34:
fe:11:0c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:12 2026 by rpki-client