Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
File: ASqMalgY9dVNG3VsFz0T8BygYsQ.mft (raw, json)
Hash identifier: JQOeJadMWfNHrXJW4sBT7qCD2g4tkfSmuC29Vlok77Q=
Subject key identifier: 29:D8:F2:00:3B:C9:47:A5:F1:31:88:17:EE:B1:47:D2:9E:B3:2E:61
Authority key identifier: 01:2A:8C:6A:58:18:F5:D5:4D:1B:75:6C:17:3D:13:F0:1C:A0:62:C4
Certificate issuer: /CN=012a8c6a5818f5d54d1b756c173d13f01ca062c4
Certificate serial: 019D333F0E99EE38F459347EAA495D67F161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
Manifest number: 0110
Signing time: Sat 28 Mar 2026 07:01:03 +0000
Manifest this update: Sat 28 Mar 2026 07:01:03 +0000
Manifest next update: Sun 29 Mar 2026 07:01:03 +0000
Files and hashes: 1: ASqMalgY9dVNG3VsFz0T8BygYsQ.crl (hash: 1aBU5Wb87+W6/NPwlPdmp90FYdz2gotTheI/eiL6v64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:0e:99:ee:38:f4:59:34:7e:aa:49:5d:67:f1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012a8c6a5818f5d54d1b756c173d13f01ca062c4
Validity
Not Before: Mar 28 07:01:03 2026 GMT
Not After : Mar 29 07:01:03 2026 GMT
Subject: CN=29d8f2003bc947a5f1318817eeb147d29eb32e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:97:a0:dc:eb:a9:ed:fc:e4:0e:dd:22:ec:
83:73:68:db:5f:28:83:e0:3b:58:30:4b:d4:bb:21:
db:f0:6a:7f:7d:e1:8b:3c:98:8b:bc:78:0d:33:84:
8a:c9:88:09:83:42:fe:ae:36:05:bc:33:3d:7d:c0:
c8:10:1f:9a:a3:a5:32:44:60:9c:71:4e:5e:4e:1d:
c9:76:a9:4e:56:69:1b:66:dc:6a:c3:ec:38:5f:c2:
eb:86:0d:f4:15:00:58:d0:57:a9:0f:df:2a:15:3e:
fa:df:ba:43:98:37:50:99:7c:8a:63:67:7b:2c:eb:
2d:86:5c:5b:39:1e:8b:e1:7c:eb:0f:c8:57:77:2a:
e4:60:f3:e4:a3:2f:88:7a:bb:dc:e6:4e:3d:a6:ef:
0e:9c:5d:b1:67:0f:cc:13:fc:36:ed:c5:8c:c3:7a:
8a:2e:2c:4f:ef:c0:43:c1:9a:dd:4a:22:be:0c:17:
49:58:84:0f:7c:41:f3:aa:af:f0:7c:8f:85:e5:e1:
0f:6d:53:4f:5d:3c:77:fb:f7:4e:94:f3:d3:02:eb:
68:2e:41:17:22:ee:5d:78:6b:14:17:80:f4:25:d7:
f3:1e:69:5c:d8:b5:da:61:93:74:e4:3c:60:85:30:
f0:aa:e5:33:e0:a7:e9:05:f4:4e:88:3d:af:6f:72:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D8:F2:00:3B:C9:47:A5:F1:31:88:17:EE:B1:47:D2:9E:B3:2E:61
X509v3 Authority Key Identifier:
keyid:01:2A:8C:6A:58:18:F5:D5:4D:1B:75:6C:17:3D:13:F0:1C:A0:62:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fe:72:c8:68:52:8a:3a:9a:25:24:94:16:b9:68:3d:47:c4:
24:e3:e6:cd:ba:81:dd:9e:ac:25:2e:a3:3f:bf:2b:c6:4d:43:
85:90:90:26:ce:ab:54:cc:03:dd:7e:4d:75:36:bc:d8:f9:e9:
bc:50:2c:63:4d:ff:d0:99:ff:ba:89:3e:9d:d5:ff:0e:42:62:
56:99:53:1a:7a:86:c7:ca:cb:d5:66:19:a3:50:41:2b:f9:22:
ea:d9:a2:19:a1:94:ed:ba:c5:3c:1f:3e:7e:6e:d0:68:9c:06:
e8:d5:ee:c5:82:65:d8:ee:b8:55:e7:bf:88:4f:90:80:28:aa:
e4:e0:a1:36:fa:fe:83:67:35:6c:4a:ff:3b:b3:f9:82:1e:5a:
89:4c:a3:03:6e:1e:01:44:96:1e:de:1b:9c:24:c2:3a:3e:c9:
e1:98:0c:b0:af:f9:9a:a0:25:c7:13:c9:36:ae:5b:74:6a:c2:
17:73:41:7f:7d:05:da:d0:42:f4:45:9c:03:a6:7e:aa:58:ce:
cc:4c:36:c2:b6:a2:e3:19:45:45:a8:86:40:22:0f:63:bf:0c:
b0:dd:23:ae:58:86:b9:34:6e:80:34:40:f6:1f:56:79:5f:6a:
53:0e:c6:b0:1e:b6:a2:43:0c:2f:ed:44:4a:09:75:77:56:56:
c6:64:15:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPw6Z7jj0WTR+qkldZ/FhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMmE4YzZhNTgxOGY1ZDU0ZDFiNzU2YzE3M2QxM2YwMWNh
MDYyYzQwHhcNMjYwMzI4MDcwMTAzWhcNMjYwMzI5MDcwMTAzWjAzMTEwLwYDVQQD
EygyOWQ4ZjIwMDNiYzk0N2E1ZjEzMTg4MTdlZWIxNDdkMjllYjMyZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS2XoNzrqe385A7dIuyDc2jbXyiD
4DtYMEvUuyHb8Gp/feGLPJiLvHgNM4SKyYgJg0L+rjYFvDM9fcDIEB+ao6UyRGCc
cU5eTh3JdqlOVmkbZtxqw+w4X8Lrhg30FQBY0FepD98qFT7637pDmDdQmXyKY2d7
LOsthlxbOR6L4XzrD8hXdyrkYPPkoy+Iervc5k49pu8OnF2xZw/ME/w27cWMw3qK
LixP78BDwZrdSiK+DBdJWIQPfEHzqq/wfI+F5eEPbVNPXTx3+/dOlPPTAutoLkEX
Iu5deGsUF4D0JdfzHmlc2LXaYZN05DxghTDwquUz4KfpBfROiD2vb3LHlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnY8gA7yUel8TGIF+6xR9Kesy5hMB8GA1UdIwQY
MBaAFAEqjGpYGPXVTRt1bBc9E/AcoGLEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNxTWFsZ1k5ZFZORzNWc0Z6MFQ4QnlnWXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80Y2M4NTEtNTViZS00M2I4LWJlYWQt
NTg0YTc4MjYxYTQ3LzEvQVNxTWFsZ1k5ZFZORzNWc0Z6MFQ4QnlnWXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80Y2M4NTEtNTViZS00M2I4LWJlYWQtNTg0YTc4MjYxYTQ3
LzEvQVNxTWFsZ1k5ZFZORzNWc0Z6MFQ4QnlnWXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/5yyGhS
ijqaJSSUFrloPUfEJOPmzbqB3Z6sJS6jP78rxk1DhZCQJs6rVMwD3X5NdTa82Pnp
vFAsY03/0Jn/uok+ndX/DkJiVplTGnqGx8rL1WYZo1BBK/ki6tmiGaGU7brFPB8+
fm7QaJwG6NXuxYJl2O64Vee/iE+QgCiq5OChNvr+g2c1bEr/O7P5gh5aiUyjA24e
AUSWHt4bnCTCOj7J4ZgMsK/5mqAlxxPJNq5bdGrCF3NBf30F2tBC9EWcA6Z+qljO
zEw2wrai4xlFRaiGQCIPY78MsN0jrliGuTRugDRA9h9WeV9qUw7GsB62okMML+1E
Sgl1d1ZWxmQVXA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:03 2026 by rpki-client