Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
File: mAScy5olSKAa-jAXQVFXSgx6QSw.mft (raw, json)
Hash identifier: 1qmw8eCJD1bLL6gqGQlyvkVFdy/r587oiETKrR1Ddd0=
Subject key identifier: DE:DB:EA:E3:89:49:DD:35:DF:34:E0:40:F1:66:A9:34:7C:FF:04:5B
Authority key identifier: 98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
Certificate issuer: /CN=98049ccb9a2548a01afa30174151574a0c7a412c
Certificate serial: 01A0C82189D36AD7F542C52F846CAD2DBDDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
Manifest number: 01F9
Signing time: Tue 22 Sep 2026 08:00:36 +0000
Manifest this update: Tue 22 Sep 2026 08:00:36 +0000
Manifest next update: Wed 23 Sep 2026 08:00:36 +0000
Files and hashes: 1: mAScy5olSKAa-jAXQVFXSgx6QSw.crl (hash: b92W/35cArFWVS/ONwOBWamQO+CCyy/avPs/UmCnTqQ=)
2: v3rr5t_ahN3SGVp2ApT1qF3-fwA.asa (hash: RejTRkyxSV+Llox1LpfU1092WFQtRS38pK5lWPMIQNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:89:d3:6a:d7:f5:42:c5:2f:84:6c:ad:2d:bd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98049ccb9a2548a01afa30174151574a0c7a412c
Validity
Not Before: Sep 22 08:00:36 2026 GMT
Not After : Sep 23 08:00:36 2026 GMT
Subject: CN=dedbeae38949dd35df34e040f166a9347cff045b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:68:23:6a:6d:00:64:49:f1:f5:38:2a:8b:
24:bc:e2:ae:0d:55:0e:3c:3c:69:96:9b:63:9c:c6:
1e:a0:dc:c8:ed:45:50:0b:c8:a8:44:c9:d4:89:b3:
5b:c4:0a:fa:43:9e:f8:0a:06:58:ea:45:b5:ef:b3:
fe:56:8e:b2:5b:23:c6:27:9d:54:83:1d:dd:0b:1b:
e1:af:e0:d5:64:53:48:47:46:0c:86:02:82:43:79:
4f:d3:6f:3d:75:b4:d1:aa:f7:5b:df:32:17:7c:27:
83:43:97:78:b9:0b:ae:0a:f6:0f:47:01:14:c6:ba:
8c:da:20:b0:55:6e:52:1b:7c:4d:f2:0b:12:41:d5:
63:67:c0:0d:55:11:c2:08:f9:a6:33:ca:6f:7e:0b:
3b:0b:f9:3a:fd:b1:0f:0e:e1:c4:bd:fc:80:51:84:
b2:08:ce:02:b3:02:80:15:9c:c3:bd:19:c9:44:f0:
b4:c9:13:3d:20:6e:9f:b4:fb:43:18:22:cc:63:fd:
f6:c6:d7:54:b9:c7:f9:cf:09:33:16:e4:59:04:58:
c0:11:b4:ad:c4:fd:74:68:e9:78:a3:0f:f8:56:08:
84:ed:61:54:93:98:ff:06:42:88:61:c5:b9:66:3d:
9b:cb:4e:f8:48:44:89:40:2a:7b:4b:9b:a0:42:b4:
9f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DB:EA:E3:89:49:DD:35:DF:34:E0:40:F1:66:A9:34:7C:FF:04:5B
X509v3 Authority Key Identifier:
keyid:98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0e:82:9a:d8:5b:aa:0f:39:07:d0:4d:e6:3e:f5:7a:47:57:
17:90:65:f3:31:cb:90:06:80:71:35:3a:74:8c:7f:d7:a6:23:
f1:77:aa:35:ad:eb:1d:14:1e:bc:b8:35:6c:b3:98:29:46:57:
1b:a1:dd:78:98:9f:b5:9d:cc:4a:36:69:b9:24:92:1e:26:ae:
ec:22:40:1b:a3:f8:b3:20:7c:bb:5a:2e:3e:e4:66:65:11:63:
98:df:4d:ef:17:aa:09:59:f2:e2:8d:d4:e8:6b:78:ca:d3:ff:
2a:18:ac:96:1a:14:31:86:8b:80:fb:52:f9:1c:20:3c:1f:c1:
9c:7f:d2:d2:55:2d:4f:73:53:86:47:64:fa:45:d1:99:b9:69:
47:56:b6:7c:fd:c8:81:2f:45:5c:e1:94:5d:7d:33:a6:07:a5:
78:f3:0a:04:aa:2d:58:2a:7b:b4:6e:3e:11:e5:ab:c7:0c:d8:
13:96:cd:d5:c6:63:60:4b:51:00:2f:86:2c:c8:40:f7:ba:17:
0b:57:67:16:a4:6a:f7:cd:0b:55:4a:9e:f7:1f:22:61:38:b6:
02:f3:89:b7:e4:c0:58:77:64:3b:35:ad:ea:b1:58:c8:02:88:
22:f9:4a:f7:0e:c1:47:be:b2:6c:ae:53:cd:3f:0d:dc:e5:92:
9f:33:8d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:05:05 2026 by rpki-client