Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: 4reR/gX0ctJjNUa57LWn+uZswp+SGC6ZEIOJIOA8y7w=
Subject key identifier: A3:FC:9E:80:F8:96:AC:80:07:13:96:B8:57:BD:6E:B6:99:14:B9:E6
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 01A0C47CCC10EB128FDE9CD40BC6762946C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 0B7D
Signing time: Mon 21 Sep 2026 15:01:48 +0000
Manifest this update: Mon 21 Sep 2026 15:01:48 +0000
Manifest next update: Tue 22 Sep 2026 15:01:48 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: wSzWWb0KRzql0/SOSULcy5lJmAJvuYJPxI88POA1Kq8=)
2: D-pDOX5ZXtdIZnyN7bsDrJe1gOo.roa (hash: JQkmlm3wSiHNU9bdVvmkiiM/K5jDVTyxbR5FyQCgkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:cc:10:eb:12:8f:de:9c:d4:0b:c6:76:29:46:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Sep 21 15:01:48 2026 GMT
Not After : Sep 22 15:01:48 2026 GMT
Subject: CN=a3fc9e80f896ac80071396b857bd6eb69914b9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:17:59:a5:4f:c7:b4:45:63:d9:f8:7e:17:9e:
99:d1:34:12:69:f1:e1:f9:b3:d5:cb:5f:87:38:44:
57:07:ff:e6:09:c5:24:66:2c:bf:09:34:01:ea:64:
f4:9f:a2:c1:ec:a6:bf:59:51:ab:ff:4c:33:27:72:
6e:bc:01:d4:22:54:6f:f4:e8:06:b5:eb:58:eb:df:
bc:2a:0a:97:eb:d9:a8:58:99:29:bf:aa:74:3e:78:
0d:8c:da:02:b8:51:dc:3e:69:61:f9:b3:ce:e1:57:
1f:20:09:c5:7f:52:bf:d5:74:f6:d4:72:c3:8a:b0:
aa:78:77:de:a3:64:93:a0:88:d8:15:39:4f:bc:90:
35:c7:30:d2:f4:0f:a7:78:43:83:30:bc:74:f5:22:
46:d7:b4:ea:56:89:44:ab:12:0a:d3:53:b2:c6:1d:
0d:27:c4:79:38:0a:fd:18:86:08:9d:3f:73:af:e5:
d9:d8:ec:2e:bc:8f:75:88:7b:03:a5:5b:2c:45:f6:
80:b6:59:c4:f8:98:fe:db:79:f5:2f:6d:2d:01:8e:
06:6c:d2:d6:a5:4d:27:c0:c4:ff:b3:c9:43:ee:e2:
1d:49:12:f5:40:ed:f3:1b:92:d1:10:19:4a:fe:4b:
84:38:fc:6e:2f:1f:fd:59:94:82:f6:32:6d:7d:4e:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FC:9E:80:F8:96:AC:80:07:13:96:B8:57:BD:6E:B6:99:14:B9:E6
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d5:8e:7a:da:55:a6:8d:b8:07:59:84:ed:9d:01:60:83:8f:
e0:b7:93:9e:b7:05:3a:38:00:4b:f2:f9:e5:5d:ab:d0:77:8e:
9e:73:73:1d:6e:2c:79:2a:49:75:0f:3a:45:00:6c:77:20:c6:
e7:bc:bb:9a:b8:ab:a6:21:01:78:67:22:dc:5d:2a:f9:db:ad:
e5:49:35:56:58:d3:42:7c:1a:48:bc:8c:c6:ff:98:12:d3:1a:
66:82:f6:68:ba:c9:b0:e4:ad:ad:df:f5:f8:a1:92:5f:2d:8c:
4b:a4:c6:ab:8c:03:64:b2:00:97:a1:3c:aa:b5:44:e9:a7:ee:
d9:92:c3:1d:4e:05:8a:a5:f7:24:d9:eb:a8:09:b9:93:c7:9d:
ec:3b:9d:ae:39:58:c7:9f:fc:4a:b4:92:db:3d:f4:1b:72:a8:
b0:0c:47:63:64:e0:54:b6:69:21:8c:77:1e:19:76:be:4f:c4:
b5:05:5a:03:b9:c2:c6:1d:19:ec:61:a6:58:dd:28:a0:ba:ce:
07:7c:1d:0e:94:c1:41:4a:a1:67:00:75:4d:c9:6b:83:26:a4:
b9:b7:91:7b:e4:8b:93:27:7b:0c:a4:95:95:f8:13:91:18:04:
93:30:61:2f:86:3f:19:2d:65:d2:04:6b:40:ca:d1:aa:9c:cb:
62:16:c9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:59:59 2026 by rpki-client