Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
File: _ASHoE9apEK-UZoXyyuyLXg98js.mft (raw, json)
Hash identifier: oCWLAxmlCXA36mw0peJ9XF/WAS1l0dSnAfSHLhFsCoI=
Subject key identifier: 16:2B:AC:DD:69:14:92:FA:3B:FA:52:2A:EA:DB:64:4F:6E:29:72:79
Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
Certificate issuer: /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Certificate serial: 019CAA8FA3565C55CC1AE4EEB77B4B59D4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
Manifest number: 13C7
Signing time: Sun 01 Mar 2026 18:01:06 +0000
Manifest this update: Sun 01 Mar 2026 18:01:06 +0000
Manifest next update: Mon 02 Mar 2026 18:01:06 +0000
Files and hashes: 1: _ASHoE9apEK-UZoXyyuyLXg98js.crl (hash: kp2gcn2F30uBc2zEmUCBuuDLK2pcO+vLZaxJAbxH40g=)
2: bKdz8rFHyrzAIFA57TIT19mDKGc.roa (hash: 22Fu9At8wBjrLfQsilSYa4ZG0swleKB41MAi2nrwzHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:a3:56:5c:55:cc:1a:e4:ee:b7:7b:4b:59:d4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Validity
Not Before: Mar 1 18:01:06 2026 GMT
Not After : Mar 2 18:01:06 2026 GMT
Subject: CN=162bacdd691492fa3bfa522aeadb644f6e297279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:44:f2:72:61:7a:92:17:63:87:08:be:70:
f9:9c:9a:93:81:1f:ce:01:f8:43:93:81:1b:b3:c7:
f2:ba:2d:0d:17:c1:8f:dd:ac:40:54:fb:ad:98:05:
88:9b:88:4c:b4:d2:9a:cf:b7:cb:16:89:4d:f8:fd:
8e:af:a4:d5:49:76:76:82:dd:ee:e1:fd:5e:8e:97:
f9:9f:b5:c3:69:84:5c:0b:ba:54:d1:83:57:23:a5:
be:16:0b:95:60:ac:46:ff:48:91:9d:7c:71:0e:3b:
eb:ff:0a:c7:ca:04:9e:43:5d:fc:d1:5a:9a:ca:30:
42:5d:d6:0b:d3:af:fe:08:c6:bd:52:a3:86:ef:92:
12:d8:80:a4:a8:dc:dc:54:d9:49:39:f7:0b:d0:f4:
f2:6b:70:36:52:b6:15:c0:7a:6c:74:b5:b9:a2:34:
7c:77:f1:59:b6:9b:4b:8c:7f:da:79:b5:40:02:43:
42:be:9d:b9:0b:23:b1:2e:37:38:f3:4d:2a:5b:83:
20:8a:27:83:bc:d8:9d:fd:5c:ef:4d:69:9e:71:a5:
3c:fc:56:d4:22:df:b3:b9:9c:19:4e:fa:b7:7e:22:
88:5c:57:cd:14:a1:2a:8f:c0:eb:b9:8c:b7:85:4a:
56:dc:4c:0b:34:61:1b:7e:b7:8e:4b:43:ab:43:0c:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2B:AC:DD:69:14:92:FA:3B:FA:52:2A:EA:DB:64:4F:6E:29:72:79
X509v3 Authority Key Identifier:
keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:75:72:ea:cc:a3:9a:b9:5e:53:e3:19:c9:b7:ca:ab:01:05:
57:87:e2:e2:26:c6:f1:1b:31:f1:47:b2:a0:15:e0:49:cf:7a:
3b:ca:e4:d6:f6:42:9e:d7:8e:51:e9:e5:0c:b8:91:82:a2:bf:
24:92:a5:0e:ac:d8:f9:52:e3:bc:0f:2e:04:63:0c:31:fa:dd:
55:77:d3:2e:a3:e5:bd:4d:0b:92:54:a3:b8:3f:06:32:0c:3f:
b7:b8:55:cb:3e:a2:00:77:0c:b2:91:27:3a:db:df:fa:e0:1e:
94:6b:a8:cd:ae:d7:46:f3:4c:5e:5b:68:25:30:5b:f5:40:46:
ea:a2:99:26:7a:1f:49:db:0d:f7:0b:df:3d:fb:e8:cf:a1:b7:
55:73:08:ef:9a:15:8d:d8:0f:84:d7:0f:02:ed:60:2b:ae:3e:
37:54:ef:62:68:0b:bd:0f:82:dc:98:bd:4b:85:17:b6:8e:17:
20:9a:4e:9e:41:e3:9f:6a:57:70:b9:b4:c6:f7:16:73:f3:2a:
d8:04:58:a3:ed:34:f4:41:b6:a7:5a:dc:04:80:0b:38:31:be:
61:82:83:92:44:3a:3c:4d:66:ec:d1:63:99:ed:e0:24:99:fb:
74:61:4c:50:f6:79:d7:3f:89:44:43:99:03:74:67:f3:04:67:
c7:7b:4b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:32 2026 by rpki-client