Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: h5rWISDcCh+VzFz1NYffdp3jTNjeJyrBrvYv/iEQxmo=
Subject key identifier: 68:C3:1C:4D:7A:69:91:C1:A8:B3:F3:C4:A1:20:BD:AD:0C:46:67:87
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 019EBEEC3BB40C6AC37E6EAED8030472B48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 0A71
Signing time: Sat 13 Jun 2026 03:00:13 +0000
Manifest this update: Sat 13 Jun 2026 03:00:13 +0000
Manifest next update: Sun 14 Jun 2026 03:00:13 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: js62TWC2aVunuWnf5qSxHNQGxJ3nujhDT4pNwSkRlRs=)
2: D-pDOX5ZXtdIZnyN7bsDrJe1gOo.roa (hash: JQkmlm3wSiHNU9bdVvmkiiM/K5jDVTyxbR5FyQCgkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:3b:b4:0c:6a:c3:7e:6e:ae:d8:03:04:72:b4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Jun 13 03:00:13 2026 GMT
Not After : Jun 14 03:00:13 2026 GMT
Subject: CN=68c31c4d7a6991c1a8b3f3c4a120bdad0c466787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:bf:6b:f0:ee:cb:b1:0a:3e:68:62:ef:3b:
59:01:06:ae:94:ef:fd:77:6f:d7:6c:fd:8f:38:f9:
ad:25:29:8b:06:3b:29:13:31:d5:9f:70:0f:81:f4:
6b:c9:b5:24:58:d5:fc:bb:18:14:01:d6:73:67:f7:
e4:1e:d1:50:04:22:c5:34:71:0c:7d:07:62:98:b2:
07:cd:64:b9:fb:60:f1:2f:37:83:43:56:04:03:02:
2a:b1:c4:19:64:b8:09:76:94:5f:11:21:6d:f3:bf:
d8:62:15:e2:8c:10:92:81:49:7a:9c:c6:78:ee:98:
0f:79:db:e7:54:ce:a0:67:2d:02:ac:04:7c:08:83:
f7:1d:79:ca:de:8e:ac:bf:1e:c5:fe:77:10:94:48:
7a:52:c1:9d:ac:6e:73:e9:c7:c7:8a:00:2e:6f:bf:
45:17:29:51:7e:31:d9:6d:c4:2b:67:7f:da:6d:d2:
95:7e:01:2a:22:2c:a3:14:d1:c5:ff:d7:c4:af:31:
87:b0:ff:b6:10:7d:0a:47:5d:35:ff:ea:f1:49:22:
04:b3:08:4a:b6:10:24:d3:c7:25:36:48:d2:33:8c:
5d:6f:93:4e:aa:fe:f0:a0:96:9a:88:61:a9:9c:15:
19:8f:0d:fc:c3:65:ee:9f:77:5c:52:cc:cd:18:ef:
70:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C3:1C:4D:7A:69:91:C1:A8:B3:F3:C4:A1:20:BD:AD:0C:46:67:87
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5f:37:f9:f3:99:80:c8:00:e6:a8:6d:a4:5a:7d:af:0f:46:
14:30:eb:bc:f2:65:8e:f5:f1:83:e2:7b:dc:c5:44:9c:b9:23:
30:f5:95:e2:fd:5f:98:f6:57:58:94:67:e5:fd:d5:d9:1a:7f:
7c:1f:af:7c:df:c1:3a:8a:1c:7b:e5:3c:c6:ec:99:f8:e0:9c:
21:35:a2:1b:dc:ff:0b:60:2f:20:b2:3a:8c:5d:d1:e8:1c:69:
95:8d:15:fc:5e:7b:90:b2:6b:b2:c0:ee:b7:4b:c2:6b:3e:69:
53:6f:a2:ff:05:9e:cb:89:0e:1d:f3:2a:eb:dd:4f:00:b1:6c:
b0:e0:42:5b:09:89:3e:ca:bc:9a:f0:c3:d5:37:8d:ae:e6:81:
bf:18:24:e8:c9:76:90:c0:95:fe:78:6d:34:53:40:fe:65:5a:
0d:d0:26:9f:0a:d0:0f:fa:20:a8:f9:65:7c:d2:2e:1a:49:2f:
66:6c:61:c7:b2:a0:38:78:34:9e:fe:44:b8:b9:43:f6:68:f2:
ee:2e:bd:59:f6:70:65:2f:ae:e8:33:72:f1:7d:52:6b:28:f8:
33:d1:bd:bd:5e:fa:84:0f:97:e0:cf:2d:b9:d6:98:47:f0:3e:
a1:d3:98:fe:ad:5d:36:45:5d:6f:3b:84:1c:7b:81:6d:08:5b:
10:e0:a5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:01:12 2026 by rpki-client