Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
File: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json)
Hash identifier: ASyKM7Xr0h5G9dsoZaGIAmk02hOQZlFBK7iL8R3HUFc=
Subject key identifier: FB:52:C6:BD:E5:09:FE:58:94:40:84:65:CB:93:23:74:5E:BB:59:34
Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
Certificate issuer: /CN=02c4df5b74d99f9796718435c3afd2220cb56751
Certificate serial: 019CA9EAAF8E2945D2380508B22955B68E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
Manifest number: 05C1
Signing time: Sun 01 Mar 2026 15:00:55 +0000
Manifest this update: Sun 01 Mar 2026 15:00:55 +0000
Manifest next update: Mon 02 Mar 2026 15:00:55 +0000
Files and hashes: 1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: fM7ldlM4Hma2Ps9ZbUmyHz18CmpLKlNO4vOvwV2c4nQ=)
2: Eii8h6uaBr6fEXcjaJ5se8NVU0c.roa (hash: WAw9S4sN6yDFY1nBSSz2zmctfGBwQIAYJa1xn10MbIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:af:8e:29:45:d2:38:05:08:b2:29:55:b6:8e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751
Validity
Not Before: Mar 1 15:00:55 2026 GMT
Not After : Mar 2 15:00:55 2026 GMT
Subject: CN=fb52c6bde509fe5894408465cb9323745ebb5934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c0:53:32:87:2c:b9:f3:20:cd:74:f1:3f:99:
cc:0d:0a:7b:d8:fe:7c:78:70:54:15:3e:11:f0:af:
75:17:7d:18:f8:9a:6b:2a:f9:26:14:25:78:b3:a7:
10:ee:e3:70:34:28:fa:32:26:a0:e6:94:62:23:4c:
18:d0:6d:fe:74:31:b9:ce:54:37:53:1a:dd:a8:4d:
91:b9:04:b9:c5:c5:ff:c2:6d:e0:63:7f:d6:78:7b:
3c:3c:5a:13:90:ba:14:b5:a9:fe:4f:79:80:80:57:
c2:dc:bb:97:43:4b:a2:57:08:46:88:02:8f:6c:5b:
a4:47:f0:f1:b0:3e:e2:94:40:3f:0a:68:73:d3:6d:
5e:68:32:10:62:a5:f1:a4:b5:72:fe:84:11:d3:c9:
e5:69:3b:ca:ed:2b:97:ef:e8:39:bd:e6:47:22:44:
52:aa:0a:28:5a:69:47:70:d2:42:33:7b:77:64:20:
4a:32:a4:0b:2c:e9:98:53:c8:3f:e5:50:ce:da:c1:
a2:43:5b:e0:4d:d3:ec:bc:5b:82:47:6c:7e:55:cf:
88:d2:7e:a7:10:6f:7f:5a:c8:e3:c3:d0:b3:41:7f:
48:71:f5:08:ee:22:13:4c:37:99:42:ee:35:da:89:
00:d1:b1:56:9c:f9:a8:78:08:5b:71:3e:af:cb:d7:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:52:C6:BD:E5:09:FE:58:94:40:84:65:CB:93:23:74:5E:BB:59:34
X509v3 Authority Key Identifier:
keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:de:58:ac:39:1b:3b:a6:a0:4f:b6:3d:a3:c0:69:54:a2:ea:
55:fd:84:8c:c1:8b:7d:aa:ae:e2:24:b9:1d:7f:57:aa:a0:83:
b2:29:77:de:6e:7d:76:df:9c:23:2c:2d:90:8b:39:b8:ae:bc:
70:d0:cf:18:c5:f2:fe:65:df:45:7f:77:3b:0c:d7:42:d5:91:
d7:69:5b:5d:68:31:b8:e9:3d:da:3c:f2:bf:f1:d1:5d:31:40:
a4:9e:09:54:82:09:75:6a:0a:16:2a:fb:6a:57:02:6a:2d:4c:
5a:5a:b1:d0:9c:67:6d:48:51:f0:01:b9:b0:93:c4:10:90:74:
5c:71:09:d7:52:31:fe:a8:75:87:de:06:9d:e3:57:f1:a3:e8:
a5:b4:a8:ca:20:55:c8:7f:49:fc:ee:06:e0:d2:b2:58:8e:ce:
a0:67:ad:79:4f:ec:2b:a6:1e:9a:f1:d1:5b:c7:de:a4:ed:41:
b8:39:b4:92:53:86:54:62:e1:50:f1:27:37:34:10:66:6e:73:
c7:8a:f1:ab:a6:e3:32:5e:2d:50:c1:f7:47:88:e3:08:17:a8:
6e:0a:a8:9c:cd:66:d1:b0:c4:36:10:b3:4a:a8:55:67:b8:3f:
ea:4f:53:68:bf:bc:10:c1:10:1e:e7:ee:d0:0a:f8:31:1c:60:
08:fb:29:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:08 2026 by rpki-client