Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
File: ASqMalgY9dVNG3VsFz0T8BygYsQ.mft (raw, json)
Hash identifier: t+suhcKDDHuJFID1TPwnUBtqLSfXXFejig1sMfpncmI=
Subject key identifier: F2:38:9F:E0:CA:65:A2:9D:78:66:FD:D4:5F:00:8D:0F:4F:85:58:64
Authority key identifier: 01:2A:8C:6A:58:18:F5:D5:4D:1B:75:6C:17:3D:13:F0:1C:A0:62:C4
Certificate issuer: /CN=012a8c6a5818f5d54d1b756c173d13f01ca062c4
Certificate serial: 019E1CEB859AC8FD0FF9268F989CB488E54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
Manifest number: 0189
Signing time: Tue 12 May 2026 16:00:57 +0000
Manifest this update: Tue 12 May 2026 16:00:57 +0000
Manifest next update: Wed 13 May 2026 16:00:57 +0000
Files and hashes: 1: ASqMalgY9dVNG3VsFz0T8BygYsQ.crl (hash: apKi0CESr/LefyS86k0Po4ia+GQlGmkyEixM6abVPPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:85:9a:c8:fd:0f:f9:26:8f:98:9c:b4:88:e5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012a8c6a5818f5d54d1b756c173d13f01ca062c4
Validity
Not Before: May 12 16:00:57 2026 GMT
Not After : May 13 16:00:57 2026 GMT
Subject: CN=f2389fe0ca65a29d7866fdd45f008d0f4f855864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:e9:fa:0b:e2:92:17:ae:cd:21:3e:a6:c0:
15:c0:8e:76:b3:e3:ca:9b:d2:29:5b:f4:9d:8b:e3:
2e:77:81:37:f6:be:96:31:df:02:99:94:7b:b2:b3:
65:fc:66:90:30:0f:54:8d:8a:1e:a7:aa:62:82:b3:
12:d9:28:48:2d:c9:d0:fd:7d:31:72:71:50:a2:dc:
70:23:b9:40:14:ae:4b:39:9e:e8:dd:0d:03:8a:fa:
ed:6f:35:e4:34:e6:f3:e8:bb:5f:50:8a:5c:f8:be:
d0:5e:98:6b:54:07:b8:b1:91:60:42:ba:4b:07:18:
bf:c4:b5:f5:99:33:11:52:38:2f:c0:20:4a:9b:98:
f2:7c:c0:a1:83:66:b7:9e:5f:41:21:f7:2b:22:b5:
0a:85:49:c0:14:51:81:7b:ae:34:81:37:27:eb:9f:
0e:0a:83:6b:47:46:44:f2:cb:2d:e3:c5:60:b1:a8:
9b:4d:ac:a4:d9:81:44:17:e6:d1:90:4b:10:10:64:
ab:93:8c:2b:f9:71:08:67:80:a5:73:a7:fd:8b:d7:
db:44:7e:fa:9d:0c:36:18:0d:d2:42:4e:bb:1c:fe:
80:27:fa:69:07:f8:e7:e9:f8:c3:fb:58:da:e3:16:
3d:1a:f9:03:c9:1b:77:92:51:ed:e6:b5:0e:f5:47:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:38:9F:E0:CA:65:A2:9D:78:66:FD:D4:5F:00:8D:0F:4F:85:58:64
X509v3 Authority Key Identifier:
keyid:01:2A:8C:6A:58:18:F5:D5:4D:1B:75:6C:17:3D:13:F0:1C:A0:62:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:72:33:da:a8:ff:62:fa:11:e6:fe:8e:c6:e4:2a:72:22:c1:
da:12:3b:58:b5:69:fa:af:b5:9c:13:3f:06:78:09:29:be:5f:
ae:9c:1d:9c:82:57:cc:56:35:e2:55:b9:98:d0:aa:d4:86:87:
8b:1a:9f:4e:c2:aa:3c:b5:fb:78:82:a9:59:99:84:ea:84:91:
fd:64:bf:54:61:67:b5:e0:ce:ab:1b:52:d8:43:15:3d:c3:2a:
5e:32:b2:cb:78:9c:35:e7:c2:42:ad:9c:b9:82:57:9c:43:b1:
15:6c:72:3e:1d:d5:ba:c4:d0:89:c1:d0:96:a2:02:ed:fc:ac:
da:f8:1e:41:18:f3:0f:75:d2:ad:fb:14:6d:b3:35:5a:df:4c:
0a:28:15:60:c8:26:02:e5:2d:e6:b8:d3:60:1b:4b:da:8d:f7:
55:2d:cb:2e:0b:39:0b:7f:aa:c2:01:7f:44:e8:f7:4c:11:6c:
f8:9a:c4:a3:18:2c:43:4e:70:46:e0:2b:fc:70:17:ba:b5:4b:
0f:fe:46:fb:e4:73:8f:0c:f7:f4:fb:41:39:8b:83:dc:21:d4:
80:55:e1:bb:4b:62:3f:c7:90:80:0a:ec:3a:64:3e:9b:4b:04:
12:ac:77:98:44:ea:3f:e3:03:7c:a2:ae:8a:57:e0:96:71:a1:
a5:0d:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:06 2026 by rpki-client