Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: HavGrQEUWPFCF1hHtAHmK38cCxkXo2CeaRMuX2bpD6Y=
Subject key identifier: 36:8A:60:BD:1A:79:D4:7E:88:A4:71:4F:EE:41:DB:27:16:AC:29:F4
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 019E1CB4E481419AB3331967EC56BBBF2425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 0A1D
Signing time: Tue 12 May 2026 15:01:17 +0000
Manifest this update: Tue 12 May 2026 15:01:17 +0000
Manifest next update: Wed 13 May 2026 15:01:17 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: JOhgtTw4zWbyXQrwsPQgqzhXC6T0upT1N3JgEvoelYM=)
2: D-pDOX5ZXtdIZnyN7bsDrJe1gOo.roa (hash: JQkmlm3wSiHNU9bdVvmkiiM/K5jDVTyxbR5FyQCgkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:e4:81:41:9a:b3:33:19:67:ec:56:bb:bf:24:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: May 12 15:01:17 2026 GMT
Not After : May 13 15:01:17 2026 GMT
Subject: CN=368a60bd1a79d47e88a4714fee41db2716ac29f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:02:46:64:20:48:9b:ee:fd:7f:e0:49:5d:
9a:20:e7:3a:2e:6e:17:78:37:92:28:a1:24:a0:f2:
30:b8:dc:17:75:79:cd:99:d8:48:bb:1b:74:55:25:
cf:f0:68:7f:a3:e7:03:be:a8:60:c3:83:36:ea:03:
8c:ac:07:b5:cd:35:fc:42:66:d4:28:34:62:56:95:
1a:3c:7f:09:37:c7:e3:64:d2:d5:2d:30:a9:ca:96:
e1:a0:27:49:fb:b0:05:74:d9:b3:c0:c2:44:36:61:
0b:ae:c9:8d:f1:f1:45:e5:7b:65:06:9e:3c:f1:9d:
c5:c6:94:68:d8:6f:5f:eb:ce:7b:2f:44:f3:b9:ba:
12:04:7c:fa:62:bb:8f:fa:bc:2a:0b:83:21:fe:fd:
36:34:3e:d6:2b:be:95:19:94:08:3f:df:98:a2:25:
c3:13:2e:a3:53:6b:b3:92:0a:7c:f4:72:84:13:ac:
26:f0:6d:fa:65:ac:78:85:a0:17:bd:53:35:67:b7:
74:43:82:88:79:df:f6:c9:57:df:69:38:f6:fe:10:
48:8c:82:36:b8:70:d5:29:5b:cd:5f:b0:8f:9f:28:
60:f6:09:82:19:fb:a9:64:33:bc:c7:06:89:a2:b1:
b5:35:eb:5a:f3:53:6b:91:33:2b:72:a2:a7:02:fd:
29:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8A:60:BD:1A:79:D4:7E:88:A4:71:4F:EE:41:DB:27:16:AC:29:F4
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b3:4b:c1:0f:a0:41:1c:44:5d:41:c0:e0:ed:bf:89:4e:13:
d7:de:d1:c4:fc:40:66:94:3a:ef:85:6e:fd:5e:1f:14:25:66:
6e:b6:56:a1:97:e0:06:f1:cf:5b:bd:b4:75:c0:2c:d5:11:c0:
d4:61:92:88:a0:81:8d:c9:a8:16:fd:64:44:a0:ea:1b:2c:b1:
50:92:d2:5e:4c:58:37:e2:1e:cc:9a:1a:45:9a:04:b3:e8:91:
12:a5:3a:64:6d:de:a0:d6:ce:7c:37:32:ff:d8:2e:49:b1:e9:
ab:d1:f1:6d:25:af:d0:1e:6d:99:d5:e7:21:24:f6:74:94:bc:
8b:55:73:1d:8e:d0:00:e7:81:42:be:4a:dd:d2:c7:70:36:c6:
7b:c3:51:17:dc:8c:2b:e3:1e:e9:59:06:a7:ee:56:6b:71:f1:
f2:bd:85:ec:a0:e7:43:01:c8:35:dd:d9:1f:0a:99:dc:d5:a2:
ef:60:2e:d7:40:74:42:0a:0c:1d:4c:4f:e8:c1:81:da:61:4d:
04:ec:5c:65:69:80:88:86:1a:38:92:a4:ba:15:7b:63:c3:31:
1b:12:f9:f6:36:f3:1e:d1:d1:cf:64:88:20:1e:39:3a:c9:c8:
c8:7b:fc:48:29:b1:c3:f5:0f:c9:6b:de:2e:96:dd:10:ab:9e:
a6:b6:0a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:20 2026 by rpki-client