Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: B7sOMLGGa65Mlx2cLlZt+Lt+P64EkijdzUPUjyitE9o=
Subject key identifier: 5B:2A:33:C0:26:94:99:E5:E2:1B:6B:43:CF:41:7D:EC:53:30:08:0F
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 01A0D011E255EE81D071B4220FE7DC49EE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 0B83
Signing time: Wed 23 Sep 2026 21:00:28 +0000
Manifest this update: Wed 23 Sep 2026 21:00:28 +0000
Manifest next update: Thu 24 Sep 2026 21:00:28 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: kmSA6jyvh4vROr5OlwBi/rc2i48gP+leIABDAUn4j+o=)
2: D-pDOX5ZXtdIZnyN7bsDrJe1gOo.roa (hash: JQkmlm3wSiHNU9bdVvmkiiM/K5jDVTyxbR5FyQCgkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:e2:55:ee:81:d0:71:b4:22:0f:e7:dc:49:ee:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Sep 23 21:00:28 2026 GMT
Not After : Sep 24 21:00:28 2026 GMT
Subject: CN=5b2a33c0269499e5e21b6b43cf417dec5330080f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:ca:24:2b:e4:25:e5:ce:60:4b:1d:2a:f8:
25:b2:51:75:21:d4:b4:2d:3f:f1:ac:bb:28:07:b2:
34:c1:18:d6:7a:ab:e8:f1:b9:b4:65:6d:2f:47:01:
be:d4:73:82:f6:b3:12:a7:9f:5e:3d:2a:3d:ad:5b:
a4:44:b3:8a:30:0f:b3:9c:64:c2:87:7e:1a:ca:71:
d1:70:10:40:49:41:f7:3e:c4:09:40:1d:c2:2d:c6:
70:74:0e:e7:b5:a4:e0:8f:91:46:92:94:7f:be:1c:
5f:78:12:54:be:60:40:b5:d9:b3:21:5a:cd:05:85:
19:2d:44:86:9b:20:e8:37:50:ac:60:57:7e:f9:16:
0c:a9:9b:14:f3:1e:09:d7:1e:7a:12:8e:28:3c:b5:
97:5e:82:1e:5c:f9:df:17:6b:37:0f:e7:0f:9f:62:
6d:72:48:a1:ff:b0:94:23:91:9b:15:8b:07:ce:6d:
bd:88:f2:51:05:7a:1c:88:f5:fe:d5:b3:ab:fa:1e:
30:57:75:ce:f8:45:f8:87:c6:18:43:ac:bc:d6:d7:
9d:f8:0e:96:0a:67:cf:fe:9d:d3:cb:bc:86:58:ec:
6f:19:01:64:37:0b:4b:ca:f3:75:ed:24:5a:61:0d:
72:72:76:a8:6c:a3:44:a1:8d:aa:c4:f6:6e:08:b1:
06:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2A:33:C0:26:94:99:E5:E2:1B:6B:43:CF:41:7D:EC:53:30:08:0F
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c1:59:da:c5:d3:86:99:f3:d2:df:0e:f5:2c:34:d1:c2:db:
d8:08:d7:cd:57:6d:01:17:66:52:98:06:4d:3a:a8:d4:3f:25:
2c:61:c9:65:19:fe:54:56:58:60:c4:17:c5:72:c8:a8:52:6e:
a1:93:f6:2d:32:f0:0e:56:06:8f:28:18:6c:96:85:72:c4:e6:
3a:ec:db:34:bb:89:25:ff:3e:21:8b:c6:dd:55:a9:ab:ab:18:
f1:de:27:30:12:90:1f:a9:ac:a0:c4:a6:19:8c:27:59:a0:12:
7a:9e:cd:17:c0:57:6b:4f:6c:c0:a7:e9:69:cc:4d:e5:d9:88:
b4:d1:b7:12:52:53:4c:fe:76:fa:8b:e7:ab:62:ae:eb:8d:57:
fb:cb:20:a0:e5:57:f7:60:f0:83:f9:cd:45:a2:6d:af:72:2f:
c2:16:41:aa:b0:28:55:d0:0e:83:e2:75:5c:8f:f7:b0:94:75:
5d:46:e8:10:49:54:64:27:6d:f5:5c:53:b1:c5:8f:34:ed:af:
04:b2:c7:49:ff:90:19:8d:13:36:b7:ed:1e:96:a8:0b:1f:9f:
ae:2e:c6:23:08:f4:45:9a:ed:07:dc:92:98:b2:0e:bc:1a:d9:
9f:ea:1f:93:98:1d:49:e8:cc:4e:4c:df:af:b8:b0:f0:f7:01:
89:ec:dd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:25:00 2026 by rpki-client