Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
File: mAScy5olSKAa-jAXQVFXSgx6QSw.mft (raw, json)
Hash identifier: A7KBU/wEg21VHysAqKfEEAxAQCHr4VayyJRdBabQSDI=
Subject key identifier: 3E:6D:E6:BA:BD:54:E8:F7:2E:DF:43:26:0E:84:76:50:A8:8B:09:EE
Authority key identifier: 98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
Certificate issuer: /CN=98049ccb9a2548a01afa30174151574a0c7a412c
Certificate serial: 019DA4C1AE8DACA50C542F39B2B7005AA5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
Manifest number: 59
Signing time: Sun 19 Apr 2026 08:00:49 +0000
Manifest this update: Sun 19 Apr 2026 08:00:49 +0000
Manifest next update: Mon 20 Apr 2026 08:00:49 +0000
Files and hashes: 1: mAScy5olSKAa-jAXQVFXSgx6QSw.crl (hash: TfWg+GCwGIVEmiF0yWVdwPI+0RqlwtMqzWMQWqg7bas=)
2: v3rr5t_ahN3SGVp2ApT1qF3-fwA.asa (hash: RejTRkyxSV+Llox1LpfU1092WFQtRS38pK5lWPMIQNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:ae:8d:ac:a5:0c:54:2f:39:b2:b7:00:5a:a5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98049ccb9a2548a01afa30174151574a0c7a412c
Validity
Not Before: Apr 19 08:00:49 2026 GMT
Not After : Apr 20 08:00:49 2026 GMT
Subject: CN=3e6de6babd54e8f72edf43260e847650a88b09ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:0f:aa:00:bc:9a:25:95:ec:18:cf:b0:86:
f4:74:2c:64:52:c2:68:e4:bf:b3:8a:f3:05:ec:73:
0e:e9:09:6b:9e:d2:00:59:c3:86:35:15:e0:a1:69:
ae:00:96:70:6a:37:d1:6a:33:f2:2f:b2:db:5b:8b:
88:51:f3:fb:e6:d9:a1:6d:59:1b:f6:8e:f2:7f:d6:
c4:09:71:bb:b3:d6:fb:e9:07:38:e8:b2:4d:1e:2b:
56:56:76:f6:38:c9:37:63:d1:94:e4:ad:5a:24:dc:
fc:8a:e6:4a:45:21:4b:f3:8a:a8:c1:3b:f6:76:fd:
3c:a5:1c:bc:f2:51:67:b3:03:11:9b:78:f7:17:e2:
d3:1d:a8:e4:ac:70:1b:ac:43:35:f5:23:c7:87:d2:
a0:83:db:7d:53:ac:b4:01:77:1d:57:49:d7:56:0f:
6d:73:1d:fb:c1:c8:c7:67:07:2a:1c:2c:5e:27:11:
9b:19:e5:55:38:b3:b8:f1:d8:e8:54:51:17:da:50:
9b:c4:9a:ce:ac:44:5a:63:10:62:eb:2c:63:6c:af:
c3:bf:7f:4d:10:52:85:17:f1:2e:2b:33:9b:c1:ff:
57:42:99:45:98:79:83:03:7b:44:15:9a:5f:9c:50:
7b:78:57:33:bc:6b:09:65:72:c1:97:77:03:46:97:
d7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6D:E6:BA:BD:54:E8:F7:2E:DF:43:26:0E:84:76:50:A8:8B:09:EE
X509v3 Authority Key Identifier:
keyid:98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:00:95:d1:ab:4d:6a:08:17:f9:d8:85:5d:ec:de:54:ab:85:
e7:e0:ea:ac:c6:c7:38:86:a2:7a:40:4a:3e:4a:b7:c9:15:94:
d5:0a:39:2b:f8:82:2c:8a:58:d5:fe:ca:80:03:3e:3d:c0:1a:
ab:a0:83:3e:80:ac:ef:f9:e3:a0:2c:c8:2b:87:7d:0f:41:22:
4f:cc:29:37:23:63:bb:77:70:ed:2a:29:c4:ba:ee:ab:2a:58:
45:ce:d2:47:ee:56:9f:16:eb:be:01:d1:9a:e0:49:58:e0:28:
f8:01:c7:2d:5a:53:fb:93:bc:2e:91:40:0e:dc:ca:15:ae:8a:
db:22:47:a6:ef:16:30:ff:a1:bd:e6:23:16:6d:25:7e:bf:0d:
a9:c6:57:b3:e4:1d:c4:4e:bb:a5:46:f5:37:20:99:fd:6c:a9:
be:82:a6:db:49:5d:53:27:5a:12:f1:45:67:eb:c1:30:37:7a:
54:fe:dc:4b:20:93:78:d1:e9:f3:fc:70:c0:bb:41:db:30:f5:
aa:cf:0b:e8:f0:1b:5e:3c:d9:ad:52:73:52:51:76:cc:52:a9:
15:3c:c5:d0:9e:0d:e8:ba:f9:c9:ee:f5:a5:c6:05:b4:64:0e:
e6:3d:be:75:65:42:c4:ab:f0:ec:a1:25:e7:7e:26:8e:9c:36:
ce:df:39:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:39:24 2026 by rpki-client