Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
File: AsSROCOjGf66InDhuiygnkNb1Vs.mft (raw, json)
Hash identifier: Hl5nFWnOMkbqF8U7ZPhAxN4N7R68XkcLw89Tx4CX3AQ=
Subject key identifier: 3D:57:91:0F:D1:EC:AD:98:D9:B8:05:A9:F0:94:04:3F:A2:EE:E7:77
Authority key identifier: 02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B
Certificate issuer: /CN=02c4913823a319feba2270e1ba2ca09e435bd55b
Certificate serial: 019D27DFFF99C86A52E8406B5A416FFB38ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
Manifest number: 153D
Signing time: Thu 26 Mar 2026 02:01:24 +0000
Manifest this update: Thu 26 Mar 2026 02:01:24 +0000
Manifest next update: Fri 27 Mar 2026 02:01:24 +0000
Files and hashes: 1: 78GH541y_GC91MG56lJ3e17d5jY.roa (hash: i45PmY0T64j48BiGwibORCNORjlWsT5N8M4MLmyvoJs=)
2: AsSROCOjGf66InDhuiygnkNb1Vs.crl (hash: IokuiVskrvylbQ0mtpkH39pxMAvZsqhwGwfGNMH+Oi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ff:99:c8:6a:52:e8:40:6b:5a:41:6f:fb:38:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c4913823a319feba2270e1ba2ca09e435bd55b
Validity
Not Before: Mar 26 02:01:24 2026 GMT
Not After : Mar 27 02:01:24 2026 GMT
Subject: CN=3d57910fd1ecad98d9b805a9f094043fa2eee777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:66:89:f2:b9:3d:27:32:c2:87:55:bb:1f:40:
21:4e:c4:0f:60:7b:1c:59:8b:03:1b:8b:71:24:0a:
7b:ea:f8:18:43:7c:a7:69:72:ed:39:9a:ac:16:2a:
95:5c:22:ea:95:0f:08:91:1f:39:a3:63:7f:ec:a2:
8d:5e:2c:27:14:82:2c:59:35:1c:b6:02:13:cb:8a:
ef:21:17:22:30:80:5e:08:3b:a1:30:4c:5a:6d:ee:
42:7e:58:ad:e3:78:37:3a:61:2a:82:21:c9:17:1d:
cf:da:5b:63:ce:bc:78:76:58:12:15:db:92:68:0e:
8e:0d:4f:2c:19:ba:ec:3d:b3:82:af:ed:13:e8:0a:
12:72:f1:e4:5b:70:41:df:cf:22:de:34:f6:8f:e3:
fb:ae:40:1c:2b:2c:3c:52:6c:d5:7b:13:6f:9f:9e:
d7:dc:1d:32:58:7a:3e:9f:47:97:bb:df:24:04:bb:
ce:68:f4:eb:1c:7d:5d:52:0b:52:8e:b4:01:9f:4a:
44:63:87:bd:35:cb:5b:bf:1f:8e:f8:08:0d:22:df:
f0:da:72:76:18:a1:dd:72:c6:8e:9b:e2:ab:a9:cb:
26:4a:a5:f1:f1:a2:4d:ad:83:86:c4:41:85:7a:90:
db:4c:a3:34:3d:82:6d:5d:89:ce:4d:fa:b4:30:6e:
31:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:57:91:0F:D1:EC:AD:98:D9:B8:05:A9:F0:94:04:3F:A2:EE:E7:77
X509v3 Authority Key Identifier:
keyid:02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f1:f5:ef:1f:b7:04:73:2e:b1:86:53:9d:7d:0c:6f:18:6e:
ec:93:03:01:ce:9d:68:09:1f:cf:d7:18:c0:ad:68:b6:ba:b4:
a1:53:96:c3:aa:4e:35:a8:cc:71:01:99:28:46:dc:63:d7:cb:
b7:7e:03:7c:f6:e2:52:01:9a:8a:58:a5:7d:42:52:dd:86:e5:
e0:d5:6f:14:62:84:54:58:52:db:59:4c:02:1a:6d:01:0d:0e:
e7:68:7d:14:6d:92:64:28:07:9d:92:bc:e3:6c:17:f4:b3:5e:
d9:53:5e:06:9c:13:fb:9a:71:40:8c:50:67:b7:11:72:f8:b9:
fb:b8:4f:f0:5e:d8:a1:75:94:58:0e:48:b4:65:c6:c5:2c:df:
99:a8:64:13:e2:65:dc:29:eb:75:77:be:b7:37:d0:06:65:f6:
af:35:e3:bf:ae:3b:22:64:04:74:4e:43:b5:b3:bb:b3:33:6e:
73:91:27:89:6c:6f:50:e7:ce:96:3e:65:b5:c5:30:75:c3:24:
35:41:88:ef:d7:0e:15:1e:5c:0a:0a:3f:b2:c8:b8:fa:f6:e7:
89:9d:84:26:4f:6e:99:9e:c7:e3:6b:59:ff:dd:f0:ff:c2:de:
78:44:e2:7a:86:b5:ca:66:89:90:9b:e1:4b:f3:8d:d8:64:8f:
1e:63:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:40 2026 by rpki-client