Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
File: ASqMalgY9dVNG3VsFz0T8BygYsQ.mft (raw, json)
Hash identifier: zCfzp0+LTV0HIuYui87Zoc4WHWK1qt7rQT/A/fSBgX0=
Subject key identifier: 10:74:28:43:EC:27:5B:43:52:29:ED:42:2D:DE:65:CF:90:22:5B:D3
Authority key identifier: 01:2A:8C:6A:58:18:F5:D5:4D:1B:75:6C:17:3D:13:F0:1C:A0:62:C4
Certificate issuer: /CN=012a8c6a5818f5d54d1b756c173d13f01ca062c4
Certificate serial: 019F91A3DB5784A6A68594ED225697A8D47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
Manifest number: 024A
Signing time: Fri 24 Jul 2026 01:01:02 +0000
Manifest this update: Fri 24 Jul 2026 01:01:02 +0000
Manifest next update: Sat 25 Jul 2026 01:01:02 +0000
Files and hashes: 1: ASqMalgY9dVNG3VsFz0T8BygYsQ.crl (hash: EmkJxCVVS2Q9isfmjr64Q64njTyaJ/KBiwHQtBQz3gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:db:57:84:a6:a6:85:94:ed:22:56:97:a8:d4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012a8c6a5818f5d54d1b756c173d13f01ca062c4
Validity
Not Before: Jul 24 01:01:02 2026 GMT
Not After : Jul 25 01:01:02 2026 GMT
Subject: CN=10742843ec275b435229ed422dde65cf90225bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:16:4b:b1:d8:d1:f7:4d:b0:dc:9d:d9:a8:
44:91:e4:3e:3b:19:56:6c:ef:b7:a0:0f:30:dd:46:
fe:c3:19:89:ee:f5:bb:9b:82:8b:48:16:8f:db:9f:
11:e7:d0:e1:28:ef:9a:60:ca:19:d4:9a:10:bc:de:
52:00:37:07:36:4e:83:ae:ce:e3:20:30:07:4f:a5:
ce:59:a4:5b:12:b3:16:6c:f6:1f:6c:b4:10:18:c5:
ef:6f:49:c1:24:6b:4a:e7:3c:02:70:77:34:e4:95:
6c:df:77:62:55:08:b1:e3:8b:d8:02:06:3c:64:80:
03:49:22:67:e6:e6:77:08:fd:44:1b:7b:f2:7f:45:
b9:e7:d3:00:ad:1b:70:b5:16:d3:bc:d3:d9:9a:90:
ad:12:28:49:31:f9:09:b0:d1:62:bd:f0:bf:cd:a7:
cd:7c:4b:04:ca:46:59:cd:4a:03:eb:c9:5d:dc:d7:
ef:38:ea:46:18:d0:e3:27:14:a8:82:bd:b6:86:c6:
ec:9b:b9:81:e7:9d:58:52:2e:ea:00:0e:2d:e4:05:
c7:91:dd:77:61:be:57:fc:09:e8:76:e6:26:ee:f3:
0f:3d:f4:55:a8:58:da:0d:a1:45:88:53:f5:a7:8c:
43:d7:67:d1:73:7c:79:46:6f:fc:59:77:25:90:47:
81:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:74:28:43:EC:27:5B:43:52:29:ED:42:2D:DE:65:CF:90:22:5B:D3
X509v3 Authority Key Identifier:
keyid:01:2A:8C:6A:58:18:F5:D5:4D:1B:75:6C:17:3D:13:F0:1C:A0:62:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a6:52:8c:d0:0b:56:a5:8d:3e:82:6c:c7:43:24:5e:0b:d3:
10:0a:84:52:67:d3:2b:4e:cf:36:5d:4c:60:0c:47:e9:8a:32:
df:98:04:a0:ec:83:84:33:fc:42:98:62:a8:ac:45:3c:c9:9b:
71:5f:0f:e5:0d:f9:e2:70:88:fa:6e:93:ba:46:34:db:ed:ea:
1c:f3:41:65:e0:ce:0a:67:e1:5f:66:db:d9:ec:fd:32:f7:84:
9e:3e:89:c3:75:80:36:cd:4b:7b:38:47:07:ea:c9:8c:ff:9e:
ee:6d:03:66:fd:dc:35:f5:70:e0:7e:c4:4c:7a:8a:bf:81:2c:
03:79:c2:11:9b:c6:6c:65:4c:01:48:6e:be:49:2b:95:d9:c7:
4e:c4:a0:fb:50:24:33:b4:bf:f5:57:d4:4e:88:ed:0f:48:17:
64:18:65:a6:03:03:5f:39:32:bc:0d:14:4c:39:01:62:c9:b5:
07:af:42:ce:57:64:72:23:37:50:7b:aa:81:e7:97:0a:55:0d:
93:0f:0d:a8:be:ab:af:df:96:67:e1:0a:e0:4e:b5:fe:6d:b0:
13:fd:6a:99:f7:b0:8b:e3:50:a5:af:8b:16:c2:ef:3a:db:76:
5f:02:3c:ca:58:30:6e:30:32:cf:ea:8a:f9:d2:f3:52:bd:aa:
bf:5c:20:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:20 2026 by rpki-client