Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: o49cUv4k2SmYKVeY9ejY01y9fiAbWqjgJAEKGn2priA=
Subject key identifier: 40:AB:FD:47:41:8A:0C:4C:58:EC:AA:A8:2B:AE:14:FA:D9:34:B5:91
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 01A0F2D6C2923F4E2F9A2050E7FE90A7315C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 13FD
Signing time: Wed 30 Sep 2026 15:02:35 +0000
Manifest this update: Wed 30 Sep 2026 15:02:35 +0000
Manifest next update: Thu 01 Oct 2026 15:02:35 +0000
Files and hashes: 1: 3ko4FNTHS3dYJgP5A7wcLtBHA6o.roa (hash: tK64bc5P7HI3Kfo106hTjUUsaeAWlW26+32w7wIp23o=)
2: M9TO4mLPx12QNOxhU6_MrD2r794.roa (hash: 9JzmkneLii+LpnbpPrpyhCSpEye5RnU2UT4N+IzPQY0=)
3: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: /usxv/0TXd9fK0Q7+y7/Ki8T0mogKASCweBcbTBUeZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 15:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:d6:c2:92:3f:4e:2f:9a:20:50:e7:fe:90:a7:31:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Sep 30 15:02:35 2026 GMT
Not After : Oct 1 15:02:35 2026 GMT
Subject: CN=40abfd47418a0c4c58ecaaa82bae14fad934b591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:c8:06:4b:08:d4:9d:3d:62:a0:dc:d7:4d:
fe:b4:d7:6e:7e:a7:92:d2:5c:d8:1d:18:d8:fc:cc:
5e:dd:9d:da:2b:67:6b:8e:0e:4c:ab:81:ce:d2:80:
e3:e4:99:8c:04:71:c2:cb:49:04:a7:26:62:12:26:
d3:ce:b2:51:7e:8d:76:7b:69:11:47:65:7d:a8:17:
ab:56:55:95:73:a8:35:b4:6a:19:7e:e0:4b:d6:d0:
1a:f6:3f:40:e8:c0:83:e7:91:7c:6d:e4:1c:d3:59:
77:25:8d:b6:fb:6c:5c:d5:44:a1:e6:15:99:cb:ee:
cc:0a:f7:85:0e:be:2b:33:c6:73:cd:ff:1b:2a:2b:
e6:69:c8:1d:80:bf:bc:1a:d9:be:46:58:ba:1f:0e:
af:aa:bd:69:d9:71:90:04:7e:1e:9d:4d:a6:f6:45:
50:7e:ab:16:42:19:98:53:c3:4a:15:4d:14:7e:01:
20:c5:9d:5b:f4:b2:08:af:b9:62:42:fe:96:9b:01:
fa:39:4d:2b:45:1b:73:0b:e0:9e:fb:d8:b0:ca:61:
f1:0f:e6:d8:59:d2:87:8d:5a:50:4b:70:88:f8:ae:
89:0c:55:e9:1c:65:e2:25:3c:a1:d0:61:a2:aa:ef:
8f:2f:07:f7:5c:96:c5:e0:84:85:72:c1:a5:71:51:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AB:FD:47:41:8A:0C:4C:58:EC:AA:A8:2B:AE:14:FA:D9:34:B5:91
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e6:a4:0a:f3:20:4a:40:65:bb:47:5b:0d:3f:9c:43:23:6e:
f3:fe:55:b4:85:2e:dc:8b:ca:15:fb:50:6b:ef:55:e7:86:fe:
26:2c:28:a4:d5:3f:4b:4b:7a:da:4a:f1:cf:6b:17:db:21:dc:
97:17:3e:00:75:17:5e:60:a8:41:56:ec:16:e6:7e:26:ad:98:
fd:98:88:a7:db:4d:26:7f:81:e4:a7:02:86:18:aa:fd:fc:69:
68:ba:5a:50:3b:88:41:d0:d7:5f:2e:27:bc:e4:03:33:74:f5:
38:d7:21:2e:16:18:d5:0b:12:c6:78:04:c9:f8:fb:73:71:5e:
ea:3b:b4:ef:e4:f4:f2:c9:8a:b9:29:22:f4:14:7f:f3:75:9a:
a2:b7:c0:60:c6:3f:f9:83:f1:a8:97:aa:1b:cc:0a:9f:50:ab:
77:8f:e7:d6:71:75:22:c8:f1:57:b4:07:34:ce:fb:31:21:54:
33:0d:43:fb:9d:96:5e:87:e1:11:e9:c5:a6:c3:03:c6:79:3b:
90:91:97:64:8a:81:07:7a:33:dc:cd:71:11:54:13:52:24:7d:
50:a1:14:a3:fd:e4:ad:2e:64:4b:f0:de:ff:43:cb:13:78:cb:
51:0c:56:3b:fa:af:57:61:6a:89:c2:03:13:31:9f:cf:c7:ef:
44:4f:7d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:42:54 2026 by rpki-client