Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
File: ascqc0OS9s95Kz0MPtEYIChvGfQ.mft (raw, json)
Hash identifier: /tP3FtY5+gsx9cX47V7OJpGJEXtkf+OiR2PF5wZlXmg=
Subject key identifier: F4:44:DE:08:54:2E:AD:C5:2B:C1:E0:EC:A1:43:C1:D3:E1:16:20:86
Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
Certificate issuer: /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Certificate serial: 019CAAFD5D01C103934D518261604365D799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
Manifest number: 1385
Signing time: Sun 01 Mar 2026 20:00:56 +0000
Manifest this update: Sun 01 Mar 2026 20:00:56 +0000
Manifest next update: Mon 02 Mar 2026 20:00:56 +0000
Files and hashes: 1: ascqc0OS9s95Kz0MPtEYIChvGfQ.crl (hash: 8LnlZ8hU3gtouUjn0zzklz4hn0TgUdLXvQEdXFh7EUY=)
2: zLtpRSkwBaEeDbTwaD6T5utFTwo.roa (hash: SBHcL2OtAzM2LvNd+W8Dn+LVXeCDUc5xiuOmwRuEFKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:5d:01:c1:03:93:4d:51:82:61:60:43:65:d7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Validity
Not Before: Mar 1 20:00:56 2026 GMT
Not After : Mar 2 20:00:56 2026 GMT
Subject: CN=f444de08542eadc52bc1e0eca143c1d3e1162086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:23:a7:36:62:75:06:10:95:42:b2:57:46:11:
e3:25:44:c4:0b:61:4d:62:7b:06:a7:be:98:d8:cd:
88:ad:a1:0e:20:ca:95:b4:af:de:c1:a7:f9:f5:1f:
1c:00:42:ec:cb:ea:30:c3:17:90:46:2a:18:03:f4:
6d:37:88:04:03:6a:34:7f:e1:81:9e:1b:77:25:94:
5f:41:28:4d:82:29:5e:05:9d:da:b8:39:3f:06:51:
c8:de:27:ba:a6:2e:24:eb:b4:5a:d0:27:48:ce:82:
fe:e5:26:95:cb:bb:fa:3c:7e:cd:06:9b:ca:5b:8c:
3c:32:89:d4:69:43:fe:5a:b0:a5:ad:6d:dc:d8:8e:
74:93:1d:26:8e:20:3b:3b:f9:6b:b2:c4:24:b9:c8:
ec:9b:fb:d8:69:b2:90:0d:2e:c8:c4:37:55:ec:5d:
e3:2e:2e:09:00:96:b4:45:33:20:bc:89:f4:b2:c0:
1b:7d:35:0a:46:59:6e:85:c0:a1:90:10:fc:f2:94:
49:1f:a3:ed:2d:b8:0b:af:52:48:c4:bd:f2:13:19:
39:e3:ac:81:fa:05:d8:5e:a8:24:eb:50:b7:8b:93:
96:7a:9c:2b:9d:95:f6:fd:75:ca:59:99:6d:aa:eb:
fc:b6:dc:ee:c4:a8:e4:2c:74:ec:16:4b:a3:2b:bf:
04:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:44:DE:08:54:2E:AD:C5:2B:C1:E0:EC:A1:43:C1:D3:E1:16:20:86
X509v3 Authority Key Identifier:
keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:58:11:b0:cf:37:63:13:32:5c:56:c6:a8:63:2f:78:d7:79:
7e:0e:f4:12:ed:d0:47:10:0f:57:a8:bc:92:c4:c2:47:69:42:
83:9b:7a:5a:e2:2b:c5:9d:ce:4f:7c:24:46:bf:ea:e2:bd:18:
db:51:24:09:92:12:6d:fc:7c:70:8a:04:25:35:07:d6:47:dd:
21:4f:27:3d:96:e9:9f:59:1a:8a:41:d3:84:99:78:2c:5e:d8:
e9:d9:a1:83:43:bc:0e:5c:1f:15:0c:28:e0:c6:f3:94:a1:90:
db:f6:67:93:1c:b4:e0:90:f4:16:c5:30:6a:af:d3:64:f7:73:
e5:61:1c:0b:8b:b6:71:89:2d:a1:0b:1f:18:1c:a9:09:2e:a0:
dc:80:07:bf:3d:0b:61:08:5a:b5:6e:c3:b7:68:ee:23:00:29:
f6:66:04:11:a9:23:63:18:be:f9:1b:23:c2:a8:f0:71:cb:1b:
10:f1:f8:9c:f0:1f:f8:eb:59:5f:8b:d9:ca:3b:2e:fd:bd:cf:
c1:94:9a:6a:2b:c2:b0:58:17:51:4f:be:c7:29:a3:cb:12:64:
d3:50:43:61:36:60:29:84:e8:3e:4b:65:29:23:70:7f:ac:68:
da:09:31:85:72:3c:4a:c1:ca:e9:c4:41:72:45:67:b7:b5:49:
5e:d5:f8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:01:44 2026 by rpki-client