Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
File: ASqMalgY9dVNG3VsFz0T8BygYsQ.mft (raw, json)
Hash identifier: pgNbBSJY92NRwL+Fn0LGpLxVUz6IRpvFtai+AQs6FME=
Subject key identifier: C8:CD:50:6A:9C:E8:32:49:6B:84:30:3C:E5:00:37:33:27:C4:31:07
Authority key identifier: 01:2A:8C:6A:58:18:F5:D5:4D:1B:75:6C:17:3D:13:F0:1C:A0:62:C4
Certificate issuer: /CN=012a8c6a5818f5d54d1b756c173d13f01ca062c4
Certificate serial: 01A0CA7DAA27BB9CBA3054DD6A1FA171AA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
Manifest number: 02EC
Signing time: Tue 22 Sep 2026 19:00:28 +0000
Manifest this update: Tue 22 Sep 2026 19:00:28 +0000
Manifest next update: Wed 23 Sep 2026 19:00:28 +0000
Files and hashes: 1: ASqMalgY9dVNG3VsFz0T8BygYsQ.crl (hash: W8D0k+619NyE3/p4mGehTW0hwtQ2A0QUp+x4s4F8i+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:aa:27:bb:9c:ba:30:54:dd:6a:1f:a1:71:aa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012a8c6a5818f5d54d1b756c173d13f01ca062c4
Validity
Not Before: Sep 22 19:00:28 2026 GMT
Not After : Sep 23 19:00:28 2026 GMT
Subject: CN=c8cd506a9ce832496b84303ce500373327c43107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:a1:35:c1:01:c1:97:1e:a4:e5:99:f8:55:
e0:65:b8:15:c7:5f:45:aa:4f:06:31:13:75:a9:fd:
9b:55:09:27:9e:c0:45:a0:9e:09:3c:89:ba:83:47:
79:67:da:d7:3e:7a:0d:4c:fa:d6:2e:09:ee:98:9a:
53:61:fb:b9:d0:3a:55:11:0f:07:02:87:ab:fb:fb:
4d:1c:21:d1:90:2b:6f:2b:9d:e2:7a:2b:14:e7:28:
a8:fc:2b:96:b9:00:6d:2d:e0:d6:1f:10:4f:d4:04:
40:c6:90:e0:a0:85:1a:29:b3:84:fc:92:d2:45:43:
5e:cd:b5:3b:0e:bb:9a:94:8c:7a:01:17:a0:5c:3e:
ab:25:a3:22:44:af:e2:9d:08:0b:b1:b3:4f:a8:96:
82:aa:02:d2:e8:f7:51:60:8f:90:e9:a0:b0:18:bb:
b9:f6:f7:b2:b5:83:4c:a7:f6:14:51:d3:ef:4e:5b:
d2:78:9b:20:c4:04:69:41:13:b3:24:67:a6:0c:08:
04:df:5a:36:bc:8a:99:21:6a:b3:da:3b:29:98:f2:
3b:19:5c:4f:80:b7:ff:41:ce:0b:50:dc:e7:34:38:
8f:aa:88:92:00:ad:4d:11:f2:22:22:9f:fe:bd:04:
68:81:12:6b:54:29:ab:41:54:73:12:4c:2c:13:e7:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CD:50:6A:9C:E8:32:49:6B:84:30:3C:E5:00:37:33:27:C4:31:07
X509v3 Authority Key Identifier:
keyid:01:2A:8C:6A:58:18:F5:D5:4D:1B:75:6C:17:3D:13:F0:1C:A0:62:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASqMalgY9dVNG3VsFz0T8BygYsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4cc851-55be-43b8-bead-584a78261a47/1/ASqMalgY9dVNG3VsFz0T8BygYsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1a:86:10:54:97:70:9f:d4:33:e3:c4:db:69:65:49:b5:9d:
5c:91:2e:43:dd:34:cf:5d:cc:cb:f0:a7:7f:35:c0:f7:69:c7:
15:b7:e5:4e:82:a6:ae:98:ab:c1:7e:c3:dd:74:f0:97:a1:03:
ee:8c:30:59:06:50:f1:59:e9:ac:37:54:93:a4:3a:86:00:ad:
1c:00:74:10:ac:ff:78:2e:fb:ce:14:de:cd:7e:24:ea:9c:44:
2c:d6:a7:e5:cc:48:4d:39:bc:ea:27:7f:34:24:4c:07:66:a4:
78:91:fb:32:48:02:f9:7f:83:bf:1b:59:12:df:cc:6d:97:22:
48:14:58:a8:ca:da:a5:85:b5:de:9a:45:e9:62:dd:85:60:1b:
4a:f8:66:10:f4:cc:74:57:3e:df:5e:dd:2c:1b:69:5c:f9:05:
e7:d7:c8:43:4a:a4:e3:1b:ad:83:70:2f:e5:32:0a:93:4a:fc:
dc:b3:58:0f:76:c2:2c:80:80:30:a8:c8:5e:31:a4:c2:80:1b:
7f:e7:9f:4d:e1:d5:94:96:be:46:df:12:b7:1b:37:ba:b7:a9:
e2:4c:32:52:02:96:68:db:53:80:2f:a9:dc:76:d8:dd:56:b7:
bb:13:1c:b9:9b:80:2b:81:b8:26:41:86:89:0e:1e:7b:24:56:
7c:28:d0:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKfaonu5y6MFTdah+hcapRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMmE4YzZhNTgxOGY1ZDU0ZDFiNzU2YzE3M2QxM2YwMWNh
MDYyYzQwHhcNMjYwOTIyMTkwMDI4WhcNMjYwOTIzMTkwMDI4WjAzMTEwLwYDVQQD
EyhjOGNkNTA2YTljZTgzMjQ5NmI4NDMwM2NlNTAwMzczMzI3YzQzMTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i+hNcEBwZcepOWZ+FXgZbgVx19F
qk8GMRN1qf2bVQknnsBFoJ4JPIm6g0d5Z9rXPnoNTPrWLgnumJpTYfu50DpVEQ8H
Aoer+/tNHCHRkCtvK53ieisU5yio/CuWuQBtLeDWHxBP1ARAxpDgoIUaKbOE/JLS
RUNezbU7DrualIx6ARegXD6rJaMiRK/inQgLsbNPqJaCqgLS6PdRYI+Q6aCwGLu5
9veytYNMp/YUUdPvTlvSeJsgxARpQROzJGemDAgE31o2vIqZIWqz2jspmPI7GVxP
gLf/Qc4LUNznNDiPqoiSAK1NEfIiIp/+vQRogRJrVCmrQVRzEkwsE+cyDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjNUGqc6DJJa4QwPOUANzMnxDEHMB8GA1UdIwQY
MBaAFAEqjGpYGPXVTRt1bBc9E/AcoGLEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNxTWFsZ1k5ZFZORzNWc0Z6MFQ4QnlnWXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80Y2M4NTEtNTViZS00M2I4LWJlYWQt
NTg0YTc4MjYxYTQ3LzEvQVNxTWFsZ1k5ZFZORzNWc0Z6MFQ4QnlnWXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80Y2M4NTEtNTViZS00M2I4LWJlYWQtNTg0YTc4MjYxYTQ3
LzEvQVNxTWFsZ1k5ZFZORzNWc0Z6MFQ4QnlnWXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBqGEFSX
cJ/UM+PE22llSbWdXJEuQ900z13My/CnfzXA92nHFbflToKmrpirwX7D3XTwl6ED
7owwWQZQ8VnprDdUk6Q6hgCtHAB0EKz/eC77zhTezX4k6pxELNan5cxITTm86id/
NCRMB2akeJH7MkgC+X+DvxtZEt/MbZciSBRYqMrapYW13ppF6WLdhWAbSvhmEPTM
dFc+317dLBtpXPkF59fIQ0qk4xutg3Av5TIKk0r83LNYD3bCLICAMKjIXjGkwoAb
f+efTeHVlJa+Rt8Stxs3urep4kwyUgKWaNtTgC+p3HbY3Va3uxMcuZuAK4G4JkGG
iQ4eeyRWfCjQJQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 03:38:47 2026 by rpki-client