Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
File: ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft (raw, json)
Hash identifier: /vVs0U7YD19mHib6nLqlEqScURPpP3HRyzzavFWBeOM=
Subject key identifier: BF:A7:0E:91:C2:86:62:44:FC:62:14:0B:B1:A5:4B:61:88:1F:C3:40
Authority key identifier: 01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22
Certificate issuer: /CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
Certificate serial: 019D9AE39BB4348E81B2C8E3929DEF513804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
Manifest number: 09F1
Signing time: Fri 17 Apr 2026 10:01:40 +0000
Manifest this update: Fri 17 Apr 2026 10:01:40 +0000
Manifest next update: Sat 18 Apr 2026 10:01:40 +0000
Files and hashes: 1: ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl (hash: 6EMB4LdpnBIU9gZ2LyXqRUqB4VJiokXt7Qpk7L/9ec0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:9b:b4:34:8e:81:b2:c8:e3:92:9d:ef:51:38:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
Validity
Not Before: Apr 17 10:01:40 2026 GMT
Not After : Apr 18 10:01:40 2026 GMT
Subject: CN=bfa70e91c2866244fc62140bb1a54b61881fc340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:69:90:16:41:74:57:99:3d:a0:77:a2:f2:32:
5b:71:61:e8:0a:9d:9e:c8:63:9b:77:52:20:6a:54:
a3:3e:f8:de:f5:68:fd:cb:4f:d6:e7:aa:dd:38:1d:
6f:d4:55:11:62:46:11:11:37:13:2e:14:49:41:03:
07:f7:09:ae:c4:74:4b:d4:d1:ff:d8:6d:c1:8b:c8:
f9:94:03:52:15:90:94:7a:70:c7:dc:65:43:c6:88:
d3:1e:a9:2b:d4:d3:f8:46:96:92:05:4a:9a:21:d4:
63:b4:9a:28:b4:62:45:f6:0c:85:8e:75:e8:2a:22:
32:34:d5:62:ec:d2:b6:d8:96:8b:26:3e:b8:35:f0:
cc:5c:2b:ec:48:bc:d4:70:06:8c:92:5c:29:d3:93:
28:45:21:9a:3c:e2:3c:08:df:cd:8c:cf:3a:3c:7d:
ac:0e:2c:0b:42:d4:e0:b1:69:b4:82:b5:37:7f:15:
ed:b7:59:f8:bb:44:1a:2e:17:6f:7c:61:64:5b:d6:
ff:34:6d:8f:33:35:3a:90:fb:d7:89:b8:eb:43:14:
03:ee:f6:b3:a0:d9:17:c9:ac:fd:9a:73:1c:4f:c7:
1f:2d:09:13:ad:43:41:bd:bf:ff:fa:73:22:66:a1:
fd:44:f3:f0:78:07:7c:a5:07:bb:cb:5d:b0:ce:d6:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A7:0E:91:C2:86:62:44:FC:62:14:0B:B1:A5:4B:61:88:1F:C3:40
X509v3 Authority Key Identifier:
keyid:01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:df:78:d4:80:d2:67:5d:13:83:82:be:ab:11:c0:01:0e:c5:
91:24:ba:a9:fb:71:bb:ce:fb:77:27:c6:01:c8:11:c5:5e:c3:
c9:72:8c:3a:50:02:ea:8a:11:53:52:2a:45:32:c3:a1:ac:e6:
9e:c7:03:c2:45:04:11:34:c9:d8:9b:da:48:3c:6f:0d:61:bf:
f4:96:4d:af:df:d8:11:6f:c1:16:3c:a7:cc:cc:6d:14:f3:0d:
44:34:3c:05:2c:ba:42:54:68:c8:eb:75:3f:e8:6b:7f:53:40:
e0:a9:06:1c:55:73:39:64:a0:f7:87:55:4f:a4:b0:03:2b:a4:
0e:13:ee:60:dc:6b:81:e6:7e:95:3c:1d:4f:d4:2a:54:85:bf:
4b:e6:8f:e3:cb:08:71:fd:f0:4d:d3:be:8e:f6:96:b5:e7:a0:
88:81:51:e2:9f:c8:a3:73:ed:e9:69:98:4e:3c:60:9f:cc:45:
29:36:85:1b:f6:73:a8:40:b2:43:3c:55:b5:90:e6:d3:7e:be:
1d:15:f8:8f:1d:21:52:8e:ff:e2:48:b5:35:ca:a7:52:1b:5a:
ca:54:e8:4d:1a:05:73:2d:df:b0:1b:5e:83:08:f7:a2:67:dd:
e6:06:de:65:a9:f3:93:d7:24:5b:a6:dd:79:4a:4b:62:e1:db:
fd:20:7d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:55 2026 by rpki-client