Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: r3GZ3DqenWvY8pegrA6OW0QDYTxgnDW95F8qiia/o6A=
Subject key identifier: E0:0E:9F:0C:84:1D:38:49:D9:3E:58:80:7A:E3:9F:27:C2:75:6C:BB
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 019D29616F6365684C201962B24E7B9756B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 099F
Signing time: Thu 26 Mar 2026 09:02:24 +0000
Manifest this update: Thu 26 Mar 2026 09:02:24 +0000
Manifest next update: Fri 27 Mar 2026 09:02:24 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: JQFRXz/TO18yYPlKx0Xc3agwh/LUxyfPPtHI46MzmpU=)
2: D-pDOX5ZXtdIZnyN7bsDrJe1gOo.roa (hash: JQkmlm3wSiHNU9bdVvmkiiM/K5jDVTyxbR5FyQCgkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:6f:63:65:68:4c:20:19:62:b2:4e:7b:97:56:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Mar 26 09:02:24 2026 GMT
Not After : Mar 27 09:02:24 2026 GMT
Subject: CN=e00e9f0c841d3849d93e58807ae39f27c2756cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:40:e6:c2:b9:93:f3:6f:8d:81:0a:1e:2d:0b:
2d:7e:e9:62:b5:ef:e9:43:7f:64:b6:9a:41:a7:77:
82:3f:d3:8a:05:09:9a:a2:df:5e:51:37:74:3a:35:
9e:ca:7c:69:35:af:54:9a:54:ab:aa:45:19:71:ae:
c1:c5:07:76:77:ad:0d:fe:2f:55:c8:e6:67:3c:3b:
47:1a:b7:bc:ef:de:8f:b8:dc:7e:df:04:99:0b:d2:
af:1d:95:e5:28:51:bc:87:83:5b:09:fc:aa:7c:e9:
e5:87:8b:7d:64:67:1b:58:8f:39:b9:99:06:89:81:
43:bd:0b:1e:fb:c8:f2:d1:ae:04:67:57:01:ce:8a:
92:f7:41:39:c6:83:8a:ca:13:86:aa:67:92:07:46:
de:44:ae:9b:01:b4:aa:32:6f:03:8d:99:86:26:12:
8f:50:6e:e5:dd:89:9c:0a:3f:b1:aa:31:5f:8a:ac:
58:8c:79:86:0b:ae:16:dc:3d:71:90:c0:8e:e8:98:
87:49:39:76:c5:01:5c:80:b1:30:97:97:27:91:aa:
45:64:82:e1:a6:39:29:c2:ad:ad:7e:f7:d6:14:2d:
de:6f:09:09:3e:f0:d0:ca:52:2e:96:94:83:c7:66:
18:99:c0:ca:f0:98:06:b9:c8:84:12:ec:d6:2e:98:
c4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0E:9F:0C:84:1D:38:49:D9:3E:58:80:7A:E3:9F:27:C2:75:6C:BB
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c9:ff:1a:49:2b:6d:6c:69:7b:d1:dd:be:af:b8:03:b1:42:
c4:2f:95:b0:06:b4:c0:79:1e:82:93:15:10:b8:55:36:79:c2:
e8:00:0e:a6:5e:77:27:69:22:ff:62:d6:49:d9:75:4f:6e:db:
12:42:ce:0f:9b:20:a6:97:d2:82:a5:ad:27:f5:57:27:f2:88:
3e:39:ed:6f:b4:ce:96:83:34:e8:17:35:57:4c:e8:b3:1b:d4:
f3:c6:89:07:13:27:0c:b8:e2:0f:27:57:52:97:c4:db:a5:47:
31:25:41:29:f0:6e:fe:8c:0c:2f:37:0e:96:59:8a:86:e3:00:
ea:f1:15:09:4c:6a:9f:a7:02:f5:72:c4:63:5c:83:49:49:d4:
6e:5a:f0:b2:60:cc:f4:49:1a:6e:da:bb:f4:6f:67:6e:89:2b:
2b:ed:e7:e1:79:14:6e:b9:9d:34:11:06:49:8a:49:41:15:3c:
11:43:24:f4:26:f2:b9:a5:18:7b:70:74:43:fd:f1:b8:85:2b:
da:e4:cd:de:90:cc:fa:fe:2c:ea:7f:05:a0:57:98:ff:70:d8:
63:e5:b1:32:5f:e8:28:0f:f7:be:54:6a:61:39:84:8e:4f:5b:
6a:21:f9:46:cf:c6:d5:47:d0:9a:6a:75:a6:1e:c0:f8:36:a3:
98:98:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:21:57 2026 by rpki-client