Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
File: AsLBh9mLRgOATtEWWttFCbYwqDo.mft (raw, json)
Hash identifier: rqjL7nlVltYUeVwxUDVkpRwOBbgBVf4bKrsg9f/dRTk=
Subject key identifier: 4B:07:12:E6:76:08:0B:7B:D7:4A:3C:E5:CD:3B:85:27:61:C6:8D:A8
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Certificate issuer: /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial: 019E1C0FB168F3A83CFEA2494709A6AF7F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
Manifest number: 0DFA
Signing time: Tue 12 May 2026 12:00:50 +0000
Manifest this update: Tue 12 May 2026 12:00:50 +0000
Manifest next update: Wed 13 May 2026 12:00:50 +0000
Files and hashes: 1: AsLBh9mLRgOATtEWWttFCbYwqDo.crl (hash: uudwukn/B/xmmID1sHSzD+Sh6gmYhoZSG6Rjm0cxAJw=)
2: WuVnfkB6n82FOg4W-IcUzY3Fe0M.roa (hash: DZE6yI97kbfPPegu/0turhmXzDIWBsKrThF8bRlEJlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:b1:68:f3:a8:3c:fe:a2:49:47:09:a6:af:7f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
Validity
Not Before: May 12 12:00:50 2026 GMT
Not After : May 13 12:00:50 2026 GMT
Subject: CN=4b0712e676080b7bd74a3ce5cd3b852761c68da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:6c:87:5c:6a:c9:56:83:8c:01:3d:6f:0e:
3a:fc:23:ff:b2:cc:07:13:f3:a5:3c:29:14:0a:b2:
e7:ee:d2:9e:4f:92:25:08:63:23:a7:a1:32:6f:f8:
2c:4e:8c:2f:a7:6e:14:00:96:29:0a:63:5c:d4:e5:
68:5d:87:15:2b:d8:8b:75:57:b2:e7:cb:21:b8:fe:
60:55:94:a0:97:90:12:47:16:61:c8:0c:a8:4c:4d:
c4:aa:09:dd:51:6d:e9:18:78:60:32:5e:ad:4f:9e:
51:d0:2f:14:e3:56:8b:94:f7:c9:50:f7:b0:69:5b:
a1:2e:2e:4b:0e:e5:10:90:40:65:e6:48:4f:27:5a:
e9:f9:33:a6:09:82:54:b4:16:0c:7d:36:8c:55:86:
7f:82:0e:29:dc:45:af:a0:f1:24:f4:4b:70:71:7a:
ea:76:c1:1a:80:42:bb:4e:7d:e2:25:1b:19:0c:83:
9f:62:c8:91:d8:ec:3f:fd:73:b1:b7:e3:5c:59:56:
86:6a:a0:7c:d9:9d:e4:b3:e3:65:04:52:86:ef:a9:
ff:43:b1:b4:fe:60:7f:24:fa:8a:50:d1:b8:44:d1:
5a:f0:d3:65:53:68:64:f9:da:5f:7a:93:17:fa:d0:
23:43:4d:9f:96:6a:f1:67:0f:99:72:9d:b7:31:e1:
03:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:07:12:E6:76:08:0B:7B:D7:4A:3C:E5:CD:3B:85:27:61:C6:8D:A8
X509v3 Authority Key Identifier:
keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fc:d3:dd:26:64:9d:c1:68:a0:e0:44:a3:02:94:a4:7f:c9:
eb:02:5a:5f:e1:a2:ca:3f:61:09:16:01:6d:18:8b:a3:80:12:
9d:3a:7c:64:07:2e:d3:1b:de:95:4f:01:17:37:af:9f:fd:35:
f2:8e:35:ad:f2:af:a1:36:7e:fa:d3:a8:1b:61:fb:b6:1b:cf:
41:03:46:da:07:e1:f9:6f:6a:ac:f2:f8:31:6b:37:1a:2e:04:
f0:5a:e0:79:6a:78:56:98:6c:87:9f:8c:b1:9b:5e:61:4c:99:
f6:29:fa:19:d6:ae:f2:ab:58:9f:0a:4a:39:15:bb:c0:aa:9c:
4c:15:b1:6c:97:a3:fa:ba:1f:44:96:44:53:94:05:ab:fe:23:
55:74:18:c9:ee:67:1d:7c:b9:80:f7:54:9e:3f:0b:d1:69:b0:
a2:6c:42:06:25:62:97:b4:c7:d7:85:71:3e:33:6f:c2:01:d4:
f6:c1:9f:19:c9:8e:af:34:95:c5:df:e7:15:8a:6f:8f:f1:c9:
64:51:48:54:c1:bf:0a:08:50:f5:3b:f0:32:34:e0:56:51:14:
db:01:22:22:04:63:69:dd:02:5c:0a:be:99:be:fc:e5:1d:73:
9c:ca:e6:d5:43:0a:ae:77:6a:0c:f5:fe:e8:c6:d3:e1:09:ed:
8e:aa:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:35 2026 by rpki-client