Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: x8KSV+LV1ap3iwp95WL16UcNK6+JG9yWo/7k3pCnNs0=
Subject key identifier: 11:FD:94:D3:ED:1B:0E:B9:78:86:7F:AD:B1:4C:22:CD:A7:2A:7A:B6
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 019F935BD5E77B70230DC0BBE868EBAFC64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 1347
Signing time: Fri 24 Jul 2026 09:01:37 +0000
Manifest this update: Fri 24 Jul 2026 09:01:37 +0000
Manifest next update: Sat 25 Jul 2026 09:01:37 +0000
Files and hashes: 1: 3ko4FNTHS3dYJgP5A7wcLtBHA6o.roa (hash: tK64bc5P7HI3Kfo106hTjUUsaeAWlW26+32w7wIp23o=)
2: M9TO4mLPx12QNOxhU6_MrD2r794.roa (hash: 9JzmkneLii+LpnbpPrpyhCSpEye5RnU2UT4N+IzPQY0=)
3: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: uHG1+h/qLMGv1zZHJtRl5q7SAFmczJx/G18DbU22qqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:d5:e7:7b:70:23:0d:c0:bb:e8:68:eb:af:c6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Jul 24 09:01:37 2026 GMT
Not After : Jul 25 09:01:37 2026 GMT
Subject: CN=11fd94d3ed1b0eb978867fadb14c22cda72a7ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8f:cf:bc:43:24:df:c0:3d:c1:3f:bc:bd:14:
42:4f:93:5c:63:5d:e1:06:18:6b:af:f2:fc:71:f8:
61:2e:b8:f1:68:c4:38:97:57:f2:92:90:13:e8:c6:
71:81:2c:7b:95:28:8f:fc:e6:f6:c4:2a:5b:0c:42:
25:c7:f8:72:ad:e5:b2:1b:1a:0c:02:80:a6:d0:19:
00:34:54:ce:e1:8f:67:fb:b5:ae:6d:17:59:f5:28:
c6:b1:a2:e3:c1:2a:76:b4:e3:d4:76:cd:44:c4:7e:
1e:1c:05:6c:85:76:38:97:83:c0:ca:30:56:74:89:
fe:b7:c1:af:72:f5:fc:d1:52:61:a2:79:88:e2:7d:
26:a7:42:2e:b4:f1:5c:dd:5d:b0:38:0f:7f:bd:bc:
8b:64:26:7f:27:96:08:6d:32:15:81:81:1e:a0:c9:
94:f9:e0:47:95:5d:d9:12:76:8a:63:3e:c8:8f:d4:
00:79:bc:2e:7d:f3:d4:f4:c4:74:59:c3:68:76:84:
38:13:c9:be:ad:ef:34:41:7a:01:68:39:84:27:a4:
41:57:53:13:02:0d:a3:65:ab:02:19:43:c2:7b:e7:
bc:34:65:1c:b6:a0:01:15:e3:99:49:e6:95:26:38:
68:1e:b0:79:bb:e9:04:4d:98:60:ea:6b:c3:73:8c:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FD:94:D3:ED:1B:0E:B9:78:86:7F:AD:B1:4C:22:CD:A7:2A:7A:B6
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ff:e2:a5:c9:5e:e0:18:3e:d7:76:60:80:1a:a6:b9:95:c4:
2a:a1:4c:7d:46:6f:68:d2:f9:14:83:ab:28:b1:cf:0b:20:96:
41:c6:ef:f3:07:c6:57:ec:bd:d9:e3:ff:9c:bb:03:12:8e:9e:
c5:1d:69:8f:3b:eb:46:9c:26:a1:5a:16:2c:1e:9e:b8:57:fb:
5e:5d:44:4e:c3:24:34:3c:38:5f:46:0a:9a:49:88:1f:3d:98:
32:1a:79:2b:e9:21:0f:0c:41:db:37:8f:f6:56:f4:7b:34:df:
2c:d6:9e:28:b1:7b:7e:15:24:2e:6f:fe:31:f9:c7:67:b5:ad:
2c:e3:15:1f:f9:04:93:58:81:eb:13:5e:95:09:e4:c9:d8:6f:
1e:6a:c8:13:10:ec:1e:a9:db:16:b7:42:1d:d2:aa:f3:b4:51:
b0:d2:18:e1:09:a1:76:58:19:ee:62:14:17:8d:59:5a:ac:8d:
c1:c0:ae:ee:d4:91:bb:85:c8:0c:4b:ac:a4:a6:1d:e6:01:79:
22:66:b8:11:de:d5:44:4a:cf:3a:ac:da:f5:c8:8b:58:5b:3a:
a0:ba:24:ff:90:61:ad:fa:42:df:8e:76:a2:8a:0b:e1:8c:9b:
e1:87:2d:cd:ad:31:d5:59:98:67:94:1f:13:f3:49:b3:db:94:
e1:fb:2d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:55:48 2026 by rpki-client