Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier: Sn+G5fgx+48akG1Lj8uPNjrNK/g9lLuBK99iod0U7Dg=
Subject key identifier: 93:6A:B7:AC:A8:6C:00:BF:75:63:2F:F4:5C:57:5E:77:06:2A:C7:2A
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial: 01A0CFA3D4935C6E7BA0B96C4800D5CFE434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 19:00:15 +0000
Manifest this update: Wed 23 Sep 2026 19:00:15 +0000
Manifest next update: Thu 24 Sep 2026 19:00:15 +0000
Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: IQA9wtAuO4miYi7mwv2zpBeJpfSZRrjGH4liQ9Kv2C8=)
2: ScJK2ivQIxsBlhkpxe_Fy41_8xc.roa (hash: TSQwrA/vSc9MyjbkX9qzVifKTyWOKyvXJf3qefMx3B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:d4:93:5c:6e:7b:a0:b9:6c:48:00:d5:cf:e4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Validity
Not Before: Sep 23 19:00:15 2026 GMT
Not After : Sep 24 19:00:15 2026 GMT
Subject: CN=936ab7aca86c00bf75632ff45c575e77062ac72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:83:ef:3d:cd:66:4b:7b:43:93:5f:18:50:
08:26:2d:c2:54:85:92:2e:34:ad:d4:d4:7c:31:3f:
50:07:2a:93:48:e5:05:25:41:d0:7e:d0:65:49:4e:
ec:93:45:f1:9c:f6:80:5b:2c:7f:28:48:c5:9e:5a:
a8:b4:db:53:3d:c1:ee:4e:1c:d0:ab:c2:1b:5c:9f:
bd:97:1a:1a:56:8f:4f:df:29:23:bd:16:a5:e1:81:
a4:a4:67:9a:70:9d:74:4a:b8:e3:f2:9d:64:ce:96:
78:5a:f4:93:52:a1:64:c5:8d:d9:0d:db:43:cf:97:
d2:74:aa:b9:97:a6:a8:0c:e0:f0:2d:5a:8e:ab:09:
1c:af:7d:4b:53:c4:f6:ea:49:61:a8:40:28:a2:23:
d7:43:73:60:b6:49:d5:ed:a3:a5:bd:36:e1:e3:05:
07:9f:e6:44:8e:71:76:32:95:3e:cb:46:28:48:85:
eb:c6:ac:da:f6:de:07:34:e6:da:52:82:aa:5c:a6:
5c:76:b0:55:e3:be:34:52:96:1f:60:47:66:07:71:
fa:55:e7:1e:c7:da:99:07:af:9f:83:28:3c:17:08:
9e:20:55:7d:13:12:b5:62:9c:8e:f3:fb:70:e4:6d:
3b:f1:49:4b:25:66:ef:a4:74:07:7d:53:65:db:12:
85:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6A:B7:AC:A8:6C:00:BF:75:63:2F:F4:5C:57:5E:77:06:2A:C7:2A
X509v3 Authority Key Identifier:
keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6e:77:d1:61:82:ce:19:fc:49:37:3c:34:76:0b:18:e6:dd:
e4:39:90:4d:3a:28:6e:19:d7:ad:a7:0d:62:d1:40:e6:64:bc:
b6:17:a9:da:78:75:aa:32:9a:a9:32:c1:f1:50:66:d0:a8:2f:
9d:fb:03:2b:07:ac:de:83:aa:90:d1:76:be:d4:30:c9:85:77:
2e:65:6a:12:a0:22:8d:e2:2f:7a:fb:c1:1a:8d:14:3d:9b:c8:
e7:85:3c:4a:66:0c:31:70:f2:da:ae:0c:3a:fc:9e:99:c5:1d:
7e:26:3a:c2:a5:41:1f:51:34:4b:16:16:a0:e6:44:fe:2b:97:
d2:6b:6f:63:83:e4:7e:24:00:85:15:74:17:17:e7:db:b9:d2:
f7:16:bc:70:f3:f4:79:98:da:3f:36:5c:e2:ed:58:c5:d2:fd:
4a:83:5c:ee:d1:f3:f5:cf:c6:bc:dc:de:e5:f2:af:1e:64:99:
54:33:14:bb:94:4e:90:b1:d7:89:a8:fc:02:f4:2e:59:da:60:
82:61:03:c2:d0:4c:e1:19:2e:90:ae:b9:6f:b4:c2:33:03:f6:
18:e9:8d:a0:b2:07:0c:92:6b:3d:8c:f0:f9:21:d1:13:c9:9d:
d6:cd:96:a6:69:92:1f:1a:5d:c3:35:21:b5:ef:cb:7a:42:a2:
7d:f0:51:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:22:16 2026 by rpki-client