
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier: A17LmpgH8/KvbPchy2yVK89PTlO85f83xeORf03Jy4U=
Subject key identifier: 24:BA:9A:05:70:23:BC:70:FC:C5:09:57:18:AF:F7:12:33:B7:57:C0
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial: 019F92ED9CA809BE7E11BC3CA7E5C1DCF1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 07:01:13 +0000
Manifest this update: Fri 24 Jul 2026 07:01:13 +0000
Manifest next update: Sat 25 Jul 2026 07:01:13 +0000
Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: dJz/j13yG88W3qtY8uw6ptVyQCnawEv0dxR37xzCXMk=)
2: ScJK2ivQIxsBlhkpxe_Fy41_8xc.roa (hash: TSQwrA/vSc9MyjbkX9qzVifKTyWOKyvXJf3qefMx3B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:9c:a8:09:be:7e:11:bc:3c:a7:e5:c1:dc:f1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Validity
Not Before: Jul 24 07:01:13 2026 GMT
Not After : Jul 25 07:01:13 2026 GMT
Subject: CN=24ba9a057023bc70fcc5095718aff71233b757c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cc:ce:64:ca:61:c0:2d:d5:86:11:b7:f1:f0:
93:6a:6b:16:75:7e:04:d7:cb:a7:86:a5:16:a8:a3:
f0:d9:28:9b:75:6f:23:d4:bf:a9:5e:62:8a:5f:00:
6d:c2:c6:38:5c:b1:f4:94:d3:81:be:4e:2a:19:f5:
17:fb:33:77:8b:be:14:f7:b0:c7:3f:d8:00:b1:06:
be:c0:40:19:19:35:c3:7f:ec:dd:44:b3:27:38:65:
9f:db:38:64:73:00:c6:50:af:67:8c:1e:f9:15:76:
95:04:fe:cb:03:77:72:46:75:aa:af:11:4f:fb:48:
d5:50:e3:9a:7c:5e:f5:92:17:6f:2a:f8:c1:79:80:
45:cb:62:75:4b:3a:8b:25:46:e7:c9:af:74:3f:75:
eb:bf:66:7b:30:b3:fa:3a:3b:6d:40:9b:0b:fd:5d:
60:38:9e:3f:27:d6:32:99:24:5e:de:30:7c:3d:a1:
1c:5b:11:3d:09:4c:a0:f5:82:63:c1:1e:f3:5f:df:
27:2b:3a:18:26:c0:bc:3a:75:6b:5c:03:12:39:78:
a0:8f:b6:a7:ca:a1:99:15:8a:8b:d6:e8:1f:03:11:
c1:ee:d5:0c:7c:d3:89:0f:fb:40:c1:74:33:03:89:
97:61:50:04:74:b7:4f:42:18:f5:f0:ec:cc:cc:41:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BA:9A:05:70:23:BC:70:FC:C5:09:57:18:AF:F7:12:33:B7:57:C0
X509v3 Authority Key Identifier:
keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:06:7e:c7:9d:47:e2:44:26:f7:db:26:40:4e:78:3b:c8:6d:
f7:52:17:8c:68:47:af:8d:6e:6e:2e:81:f7:be:93:54:8b:a3:
9c:ef:7b:f7:e3:39:a4:ad:d8:f5:53:9c:fe:a6:38:66:d2:33:
81:85:f3:6b:c2:45:44:11:31:bd:ae:dd:d7:65:8b:6e:c6:a2:
71:6a:da:11:b2:76:a1:be:cd:c5:a6:a2:6a:95:87:1c:5b:1f:
e7:47:ad:08:21:0f:4e:86:85:dc:0a:79:b9:ed:62:ee:d6:08:
aa:08:06:bd:77:fb:f3:19:81:ae:a9:18:97:8e:cd:e3:76:1b:
c2:88:b5:91:04:34:3d:75:9f:0f:6e:f8:51:6c:6a:f3:11:9b:
24:88:f5:20:28:1b:63:24:e0:18:ca:c9:5a:b5:c4:67:12:f6:
23:a6:91:6f:f9:ce:b0:52:59:a6:6a:d1:74:fd:77:8f:e1:19:
e5:87:02:ef:46:f4:34:33:a0:cb:c6:a8:78:76:64:c1:2e:6c:
32:52:a5:c5:43:b7:6d:8b:36:ee:cd:dd:ea:cd:98:ce:9a:14:
ab:d9:33:a6:00:9a:60:11:01:84:95:96:fc:fc:19:b4:f4:57:
0e:c0:d0:eb:08:69:4f:0a:71:ad:7d:92:e3:67:e3:38:6c:ce:
0c:17:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:48:33 2026 by rpki-client