Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
File: ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json)
Hash identifier: QYE+vSxGm4UU+Tj7viKM3g2jjlfLMMNwnVEEvs0XtPc=
Subject key identifier: 2A:03:92:88:FF:B3:C6:92:71:68:3B:E3:63:4F:72:40:F7:39:29:73
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial: 01A0D42652CD2D503E886E3CB011C4EDD9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
Manifest number: 0F38
Signing time: Thu 24 Sep 2026 16:01:16 +0000
Manifest this update: Thu 24 Sep 2026 16:01:16 +0000
Manifest next update: Fri 25 Sep 2026 16:01:16 +0000
Files and hashes: 1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: gY+0Et4443vZfXAKeBxVcbXp+CusJoQJ3awlB1bY290=)
2: rlozkrq9ZzNHCZUtQGPTzboWxmI.roa (hash: +ky2eseP0hm1lozQb5MU58tNSrjncRM2hPrTaQ0J6cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:52:cd:2d:50:3e:88:6e:3c:b0:11:c4:ed:d9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
Validity
Not Before: Sep 24 16:01:16 2026 GMT
Not After : Sep 25 16:01:16 2026 GMT
Subject: CN=2a039288ffb3c69271683be3634f7240f7392973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:82:71:2d:c7:8e:59:54:ab:e3:4d:c0:26:f5:
f0:21:0d:8a:77:05:22:41:f4:36:b7:cb:77:0d:9b:
11:e3:8d:b8:f8:48:19:55:3f:1b:7c:9d:12:05:6d:
5d:c0:9e:83:9e:61:ec:a8:bd:8c:1a:03:f8:f6:86:
c7:3f:ff:fb:4c:08:2a:54:e6:3f:cb:75:3e:94:8f:
88:57:9f:5d:3a:9f:c4:66:9e:86:0a:1c:4a:0b:69:
76:34:2e:c4:06:da:a5:07:ab:33:21:86:b5:02:9e:
2b:ea:a0:8e:ef:5f:f2:7d:ab:4a:87:18:ce:0d:4d:
62:3a:ae:19:ac:cf:63:5f:7a:fe:dc:1e:e5:7f:d7:
7c:dd:19:bb:fd:7a:15:74:f6:b0:bb:0a:44:41:89:
68:8f:11:bb:24:f1:fc:1d:3d:f8:c0:2c:f8:b2:ad:
c8:59:51:05:39:12:a0:49:87:ec:5b:5c:f9:b5:f4:
9a:91:68:eb:7f:2d:83:e7:0e:f8:df:a1:80:45:07:
2a:ae:9d:53:65:48:e1:0a:6f:28:77:9b:0b:3f:67:
e5:ee:2b:6f:53:cc:9c:37:8f:5d:31:70:83:cc:f7:
4a:ad:ea:45:bd:14:76:ee:13:f8:04:9b:88:56:24:
fd:d9:e2:03:82:78:65:a6:b0:49:ef:82:fb:0c:4e:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:03:92:88:FF:B3:C6:92:71:68:3B:E3:63:4F:72:40:F7:39:29:73
X509v3 Authority Key Identifier:
keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:97:0c:bf:29:a9:b1:c6:0f:2b:ff:c7:f5:74:d2:ed:75:be:
97:95:29:21:b8:ac:51:11:ae:70:84:99:21:08:7e:f4:6a:86:
16:d4:e3:f1:7e:4b:1a:d6:b5:10:4d:bc:f6:eb:35:20:af:d8:
e9:ac:38:4c:a2:23:7e:99:66:2f:ef:cd:ee:4e:a8:8c:ea:bd:
30:59:7d:d5:7a:88:bd:8e:e7:a7:ba:55:91:a4:e4:e7:cb:96:
96:9c:6a:24:63:35:3a:2f:ef:53:6f:71:64:bd:e2:15:9f:7c:
4b:f9:cf:48:76:b1:79:e3:e0:62:2b:07:58:10:e2:60:e8:75:
a8:60:fa:0d:96:2e:6c:e0:19:77:1d:d7:9f:9c:16:c8:87:e6:
bf:65:4a:1b:00:c1:0a:65:c9:d9:1f:88:70:7c:3e:5b:c3:0f:
02:38:ac:88:aa:b7:98:35:ed:13:6d:d7:a8:e6:0c:0c:f9:be:
0c:eb:9e:66:99:46:2d:d8:06:ad:3d:9b:a8:2c:70:8e:4a:50:
ab:7b:a8:25:46:79:d8:bb:2a:75:00:57:42:16:06:a4:d1:bb:
b4:6a:85:27:b4:f8:8f:3f:82:25:67:b0:2f:58:41:5b:cc:30:
26:91:f5:26:15:22:5b:35:20:64:be:d3:2b:e7:2f:e8:80:25:
0f:5c:cd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:27:38 2026 by rpki-client