Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
File: ascqc0OS9s95Kz0MPtEYIChvGfQ.mft (raw, json)
Hash identifier: XPYOw7DRkkRd4JX9+IG2Igo2uxCH7CGfB3coGfEevKA=
Subject key identifier: 5E:1A:75:A6:5F:B1:7D:4F:B9:9F:5C:B6:F6:46:3D:AA:D9:73:FB:C0
Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
Certificate issuer: /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Certificate serial: 019DA41D31A04AE534AAA60000D13526D77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
Manifest number: 1406
Signing time: Sun 19 Apr 2026 05:01:09 +0000
Manifest this update: Sun 19 Apr 2026 05:01:09 +0000
Manifest next update: Mon 20 Apr 2026 05:01:09 +0000
Files and hashes: 1: ascqc0OS9s95Kz0MPtEYIChvGfQ.crl (hash: vUPaueW5SREi/AarhDoOeeOXb/QKRqVxfT+dc2NyII4=)
2: zLtpRSkwBaEeDbTwaD6T5utFTwo.roa (hash: SBHcL2OtAzM2LvNd+W8Dn+LVXeCDUc5xiuOmwRuEFKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:31:a0:4a:e5:34:aa:a6:00:00:d1:35:26:d7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Validity
Not Before: Apr 19 05:01:09 2026 GMT
Not After : Apr 20 05:01:09 2026 GMT
Subject: CN=5e1a75a65fb17d4fb99f5cb6f6463daad973fbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a3:46:1b:4a:1c:46:e7:9b:79:3d:85:e3:cb:
b8:9c:82:69:0f:22:28:d0:b4:7e:cc:72:ab:6a:3d:
92:ea:f0:97:0a:43:4e:df:1b:70:b3:d7:dc:ce:b0:
a0:88:e3:97:b2:06:44:eb:79:12:6a:1a:b2:cf:60:
c4:52:55:b7:bc:83:89:be:ae:21:a3:40:7a:e1:42:
8f:12:a7:cc:5c:a7:ef:8d:2b:58:68:06:a8:81:3e:
56:60:ba:e2:cd:f7:d0:e5:be:3b:c4:94:02:03:1f:
77:dd:63:ef:5d:7f:8f:66:4c:5a:fb:86:23:0f:80:
71:dc:db:b7:f2:29:f9:80:47:c4:69:36:6e:06:3d:
fc:2b:0d:2c:55:3d:77:4a:45:b7:51:ab:70:29:71:
83:ba:be:c3:4a:0d:fb:a7:6c:58:44:cb:38:81:68:
37:c3:33:88:24:97:dd:14:f9:e8:51:69:a8:af:ae:
f7:14:3a:72:02:51:a7:15:f4:dd:7b:37:64:75:71:
b6:e6:ca:56:b6:61:88:9f:7d:47:30:7f:d9:6e:4f:
dd:58:d2:22:05:3c:63:69:cc:c6:15:7a:12:94:11:
83:a5:dc:22:4e:62:b4:48:30:be:3b:cc:1a:74:4d:
da:65:62:87:0c:79:e1:24:20:41:99:76:dc:f0:ef:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1A:75:A6:5F:B1:7D:4F:B9:9F:5C:B6:F6:46:3D:AA:D9:73:FB:C0
X509v3 Authority Key Identifier:
keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6c:82:7e:b7:8a:13:74:ba:94:e5:c9:8c:a8:a4:27:ff:d7:
db:64:4e:3b:89:ce:1b:0f:d3:31:a7:a6:30:75:31:7c:5f:42:
5e:c2:54:ff:99:b4:ab:b2:55:a3:2a:b5:9c:c8:a7:b4:9c:0b:
8a:f0:f1:1c:25:ec:2d:c4:58:41:dd:a7:c0:db:d2:1f:18:5d:
95:f7:8b:af:c1:4c:21:16:76:be:93:9f:34:40:8b:17:b0:7d:
54:89:c2:e3:61:d2:2a:7d:32:ba:3c:e8:55:44:a9:b1:7d:06:
8d:44:30:c1:7e:ff:fa:bc:e6:0e:d8:4c:fa:69:70:0e:e3:55:
19:c8:b3:35:b5:7d:01:a2:3b:28:9b:6e:57:9b:13:15:1b:91:
cf:fa:f6:59:64:33:9c:d5:8e:2d:a0:bd:23:22:4f:9e:c4:4d:
92:34:d4:db:da:86:cc:64:69:5e:84:53:29:2c:c4:83:c7:a1:
a3:d8:98:ce:af:5e:3f:eb:58:44:b9:6e:6f:7e:d0:57:ad:1d:
3b:2d:7b:06:90:70:5b:21:e6:ab:3b:0e:ae:8f:84:83:b1:1e:
1f:8d:32:bf:78:ac:9e:bf:9c:19:3a:d9:3a:93:08:30:6a:3b:
5b:ea:73:30:d7:8f:13:ed:2d:46:87:44:4e:33:e4:9f:95:41:
a6:81:c9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:13:26 2026 by rpki-client