Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
File: mAScy5olSKAa-jAXQVFXSgx6QSw.mft (raw, json)
Hash identifier: GSjIZJ8/srWzd2zUfyW3O3jmFi6Bz1GEQWcY4VeiOk4=
Subject key identifier: BD:8B:6A:D8:35:21:98:DE:B9:97:CE:4C:C6:30:71:65:50:24:3B:FE
Authority key identifier: 98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
Certificate issuer: /CN=98049ccb9a2548a01afa30174151574a0c7a412c
Certificate serial: 019FA86248EDAAE27FBA34812261483003F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
Manifest number: 0164
Signing time: Tue 28 Jul 2026 11:00:41 +0000
Manifest this update: Tue 28 Jul 2026 11:00:41 +0000
Manifest next update: Wed 29 Jul 2026 11:00:41 +0000
Files and hashes: 1: mAScy5olSKAa-jAXQVFXSgx6QSw.crl (hash: e/a+/DbXWPMAFPwAeiezkVCuCJklqNfK+4nB2xqx0ys=)
2: v3rr5t_ahN3SGVp2ApT1qF3-fwA.asa (hash: RejTRkyxSV+Llox1LpfU1092WFQtRS38pK5lWPMIQNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:48:ed:aa:e2:7f:ba:34:81:22:61:48:30:03:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98049ccb9a2548a01afa30174151574a0c7a412c
Validity
Not Before: Jul 28 11:00:41 2026 GMT
Not After : Jul 29 11:00:41 2026 GMT
Subject: CN=bd8b6ad8352198deb997ce4cc630716550243bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:50:17:e6:92:b8:1c:bd:c0:70:16:2b:15:
57:3a:42:e1:a4:53:e6:6c:24:b3:f5:0b:9a:a9:69:
a3:02:74:a0:12:91:5e:2d:a7:d9:b7:cf:4c:6b:7d:
c6:ef:e5:19:8e:54:c5:19:cd:bf:6f:68:26:3a:c3:
2e:b2:5d:55:11:c0:1e:67:90:9a:ca:69:83:d6:e8:
e1:f4:05:04:51:1b:28:53:d6:59:a6:4c:69:6a:44:
c1:41:fa:73:15:c4:fc:a5:03:6e:4b:2a:9d:02:76:
ba:b3:21:76:3a:e0:11:3e:f9:d0:c5:82:53:f6:f9:
dc:79:a7:27:0e:65:e9:36:6b:e5:30:0e:f1:8f:cf:
0c:4f:46:e4:b4:5f:a0:9f:d0:ad:83:01:d2:37:34:
81:b2:01:9f:d7:aa:85:9c:7c:75:9f:89:85:a9:5c:
4b:4e:50:38:38:09:a1:f8:8b:f2:26:ea:24:5f:bc:
77:47:6e:9f:ba:3f:04:c1:03:f4:f1:c5:b4:a6:6e:
b4:23:4f:c1:d9:fe:92:a5:93:c6:15:ed:e7:1c:2a:
7b:94:a4:d0:39:55:ff:64:34:7c:77:8a:38:d7:0a:
3b:aa:17:5c:0f:95:eb:60:13:4b:df:4d:44:23:ac:
57:b2:15:ef:a7:6f:2d:6c:8a:ef:63:e7:78:34:07:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8B:6A:D8:35:21:98:DE:B9:97:CE:4C:C6:30:71:65:50:24:3B:FE
X509v3 Authority Key Identifier:
keyid:98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ba:71:48:53:dc:20:af:08:c6:81:f3:1d:88:f9:99:9b:99:
49:66:28:d9:2f:1b:78:85:d3:53:fe:11:ac:6d:f6:ce:1e:a5:
70:93:12:10:ab:9c:3f:b3:54:8c:0d:2f:a1:32:2e:b0:49:59:
58:1e:25:1d:2f:60:64:12:37:57:e6:9b:83:c4:9b:71:02:a3:
2a:42:7b:aa:52:11:a6:dc:92:c2:7c:b8:9d:3f:a8:7b:a1:39:
1c:c8:33:b9:b2:14:15:e7:b8:08:bf:0f:ad:74:ea:3d:07:be:
22:44:c6:e4:a4:8a:d5:dd:fb:bd:10:98:41:1d:58:c3:9d:84:
9a:6d:9c:d3:b7:b2:c5:6e:01:83:aa:47:16:9e:66:f3:c8:40:
09:0a:ab:9e:d2:7e:e1:f1:3e:d3:1a:d5:b3:20:37:c9:a2:f4:
7b:62:7b:14:f2:9b:25:db:5e:d5:5a:59:ff:58:d3:87:86:f6:
b1:dd:f2:05:33:96:9d:a0:2c:db:62:bb:7e:f2:bd:15:ef:cc:
09:df:b7:79:77:01:bf:6d:95:8e:eb:07:cc:b9:4e:ba:31:ad:
bf:82:d1:fc:db:45:cc:2f:74:95:a2:37:ec:c7:77:af:fe:91:
b6:2e:7b:a8:fc:d4:1f:23:bb:3b:0f:50:29:72:02:46:a5:c8:
22:77:fd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:01:38 2026 by rpki-client