Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: Jp8aU61UDG1gsA3keYscMQQXq33VQxllfuhUTKNedn8=
Subject key identifier: A0:10:EF:B1:B7:71:26:3D:87:CD:10:2F:48:38:0D:BA:14:1D:62:3A
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 019E2091EFAF653BEFB67B22C06AF99FFB10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 1287
Signing time: Wed 13 May 2026 09:01:35 +0000
Manifest this update: Wed 13 May 2026 09:01:35 +0000
Manifest next update: Thu 14 May 2026 09:01:35 +0000
Files and hashes: 1: 3ko4FNTHS3dYJgP5A7wcLtBHA6o.roa (hash: tK64bc5P7HI3Kfo106hTjUUsaeAWlW26+32w7wIp23o=)
2: M9TO4mLPx12QNOxhU6_MrD2r794.roa (hash: 9JzmkneLii+LpnbpPrpyhCSpEye5RnU2UT4N+IzPQY0=)
3: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: Ms9hC1IeOndfME7RUCxO1j4aXN9OGTdbmRoXql7tVa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:ef:af:65:3b:ef:b6:7b:22:c0:6a:f9:9f:fb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: May 13 09:01:35 2026 GMT
Not After : May 14 09:01:35 2026 GMT
Subject: CN=a010efb1b771263d87cd102f48380dba141d623a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:ba:ab:15:26:5c:88:2c:3c:7d:a8:2c:c4:
68:49:97:63:18:63:42:c0:c8:bf:ec:b4:be:6e:87:
ab:d8:b3:00:cd:bb:9c:ea:ee:ab:3e:c2:62:00:40:
e1:10:b1:da:71:53:2a:9a:6e:4e:ce:41:19:b0:a0:
20:27:0a:1f:4c:55:c7:c9:12:95:03:db:fb:c4:e4:
bf:8e:8a:12:47:09:e5:3d:1b:32:8d:a2:91:bb:e9:
8d:97:4b:84:67:33:aa:39:12:90:12:84:52:1f:51:
82:9f:c3:7e:5f:41:56:b4:3a:71:4a:ae:8f:f9:70:
2e:cc:bf:c1:e1:ec:23:a3:22:61:1c:f8:4c:5c:4f:
c1:26:de:6a:08:9d:fd:c0:7a:da:b7:94:66:86:ec:
c3:b9:2c:50:ff:8b:a7:96:68:93:ca:14:9c:c2:40:
92:25:15:3e:c2:f9:5c:37:55:90:d2:ac:5a:f6:c9:
e0:e6:06:7f:79:b3:35:2d:e9:f4:e9:78:ac:de:0d:
1d:0e:9a:28:52:66:35:99:6e:e6:95:4b:f2:50:b8:
e7:17:2a:91:8d:f3:c5:14:a7:72:d8:6f:dd:0a:cf:
f9:e7:0f:95:d5:a8:a5:0b:57:2d:a9:6c:c5:f1:c0:
cc:1f:ce:7d:1d:31:79:73:32:c0:80:46:43:53:ae:
b4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:10:EF:B1:B7:71:26:3D:87:CD:10:2F:48:38:0D:BA:14:1D:62:3A
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:11:23:82:ba:87:d6:83:12:6b:2f:e8:27:73:c7:19:07:31:
cd:26:f4:5f:8d:3e:52:93:e6:83:a4:c5:3a:8a:d2:84:28:02:
e5:70:13:e2:f8:a9:07:b9:9e:3b:93:cc:d2:29:63:84:3e:ee:
4c:19:6f:c9:a0:a9:7e:f1:49:bd:ed:52:01:e5:30:a9:ba:b7:
e1:99:86:48:78:5d:af:ee:d6:1a:e8:d7:f8:9b:fa:1b:38:eb:
11:4a:87:e6:36:84:39:53:d1:10:5d:5c:bd:38:a2:89:1b:f4:
a3:dc:33:16:5f:e7:f6:e2:3b:bb:22:10:ee:c3:df:f6:b1:f6:
04:11:4a:d0:95:e0:a9:b1:83:8c:f1:47:89:2b:2c:e7:dd:30:
2a:e8:68:42:fd:7f:e6:6a:e5:24:ea:61:8c:a5:c6:9c:76:78:
e3:b1:6e:5f:85:99:cc:0a:fd:4a:0a:17:ca:d7:de:46:e0:5c:
1f:01:77:60:e7:4e:83:cb:3f:97:42:35:9e:15:b6:10:f4:92:
1e:10:83:ba:b1:9d:26:99:8e:42:11:0e:3d:ce:51:69:e4:17:
8f:91:5e:62:41:54:9b:90:ab:4b:89:1c:14:bb:af:60:dd:7b:
fc:3f:d6:ae:9d:87:d4:95:ac:d4:45:22:ea:a0:f8:c3:5d:c5:
5d:fe:3a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:58:42 2026 by rpki-client