Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
File: rAsK5lTCnX8fDU4tNRarfe8Msp0.mft (raw, json)
Hash identifier: zQ7ZJNV/UL8Ctba0lbhpoHdr5Cl5ZE04untZ3vgRq8w=
Subject key identifier: 55:C8:A5:63:BB:61:07:CF:A5:DD:E5:E8:6D:A0:BA:7B:44:53:29:2B
Authority key identifier: AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
Certificate issuer: /CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Certificate serial: 019CABD91EDA525ECC0D2BDAB645E3298E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
Manifest number: 0765
Signing time: Mon 02 Mar 2026 00:00:58 +0000
Manifest this update: Mon 02 Mar 2026 00:00:58 +0000
Manifest next update: Tue 03 Mar 2026 00:00:58 +0000
Files and hashes: 1: rAsK5lTCnX8fDU4tNRarfe8Msp0.crl (hash: 0AFrzqVDeL/ZyezoHCqw2exdKLU+HEuMuqGPv2dIlKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:1e:da:52:5e:cc:0d:2b:da:b6:45:e3:29:8e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Validity
Not Before: Mar 2 00:00:58 2026 GMT
Not After : Mar 3 00:00:58 2026 GMT
Subject: CN=55c8a563bb6107cfa5dde5e86da0ba7b4453292b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:4c:4a:86:7a:40:f9:ab:14:db:ed:a9:b0:
b8:3f:8f:16:83:00:0c:e4:78:ed:b2:5d:de:27:94:
3f:19:b4:b4:09:c7:7e:56:27:90:e6:da:9b:ce:15:
e7:65:59:6e:de:f7:0c:f7:e9:c9:61:d5:49:58:94:
87:1d:eb:6f:ff:45:fd:6b:c9:ae:1f:07:f3:a6:2a:
15:74:59:e8:ec:cd:fc:0a:35:4a:b3:6d:fd:a5:53:
be:c9:69:9d:96:f7:ab:97:a2:fd:b3:58:c5:88:bf:
af:25:12:89:d2:6c:2f:1f:7a:08:a3:02:8a:12:70:
e8:5e:e1:3f:6e:c1:0d:3c:f1:44:6a:56:a0:cb:02:
91:20:fb:6f:1b:39:fd:f6:97:fc:bd:8f:3c:77:ad:
38:cd:33:0b:ec:a2:18:97:ea:f4:10:06:b2:41:59:
ad:32:bf:79:d9:f1:82:41:f4:87:8b:93:00:cd:d9:
1d:93:32:22:eb:d4:f9:cb:60:50:e7:59:38:41:54:
05:75:ff:e6:80:d6:19:f5:11:2b:d2:97:90:3c:31:
83:77:ec:3b:b5:ff:c1:a0:f5:45:ed:11:a9:d4:e5:
c3:a9:a1:4d:34:9b:80:95:c4:9f:49:0d:4c:98:f5:
5a:49:9d:bf:bd:1d:eb:88:ec:84:c4:48:49:12:78:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C8:A5:63:BB:61:07:CF:A5:DD:E5:E8:6D:A0:BA:7B:44:53:29:2B
X509v3 Authority Key Identifier:
keyid:AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:35:1c:99:46:1c:88:af:34:6d:12:a3:fb:77:cc:2a:52:2d:
05:a2:e7:32:e7:2b:7d:42:c2:22:c0:54:9c:fb:a1:bb:c4:0f:
af:5f:82:0b:2e:fd:c0:64:91:9e:75:d5:a7:ed:de:18:a5:dd:
3a:65:20:f5:ce:fc:f0:ea:2b:b3:2f:31:53:f1:49:28:75:b2:
85:62:c7:48:45:8e:19:ba:6f:ee:31:48:40:2c:ad:6a:04:5f:
d5:12:44:b7:0c:64:db:d2:17:e4:1c:6d:c0:a8:d3:53:8f:d0:
c3:88:07:dc:7f:a0:1f:be:8a:90:d5:71:04:7f:94:35:7b:6a:
9f:c0:eb:9f:29:0a:21:a7:69:65:e5:90:96:33:0f:dd:42:58:
63:c9:1e:29:5e:c8:8a:6b:10:ae:2e:3a:99:a2:21:d5:44:9e:
6c:2b:b3:5d:df:e0:b5:92:20:f7:a9:4d:fd:a7:cb:4d:43:f3:
c5:c5:38:83:3e:3d:07:23:d6:fc:e8:59:b3:cc:03:86:1b:22:
60:ea:ba:c6:87:f3:d3:a5:3b:b7:6f:c1:76:01:f5:32:a4:58:
d4:46:7f:79:49:d0:95:95:c4:e9:3e:93:e2:98:ad:f7:07:dd:
48:1a:54:cc:12:7d:72:f8:3e:16:4a:55:e1:cc:ad:84:fa:70:
be:d1:6d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:55 2026 by rpki-client