Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: E1WHRwSaLMmafUKE98N6JNb2RMDK700PTn8Z0EvdkkE=
Subject key identifier: 13:96:1E:AE:4A:56:52:13:D3:2C:00:32:CA:81:F9:DE:28:DB:A4:7E
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 019CABD922F50DF8FFEAB8A3AA7BB025978A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 11C6
Signing time: Mon 02 Mar 2026 00:00:59 +0000
Manifest this update: Mon 02 Mar 2026 00:00:59 +0000
Manifest next update: Tue 03 Mar 2026 00:00:59 +0000
Files and hashes: 1: 3ko4FNTHS3dYJgP5A7wcLtBHA6o.roa (hash: tK64bc5P7HI3Kfo106hTjUUsaeAWlW26+32w7wIp23o=)
2: M9TO4mLPx12QNOxhU6_MrD2r794.roa (hash: 9JzmkneLii+LpnbpPrpyhCSpEye5RnU2UT4N+IzPQY0=)
3: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: ANZiQj26Bq2tCRHG47YAYn95lU78OE3c2t+u/e+/d50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:22:f5:0d:f8:ff:ea:b8:a3:aa:7b:b0:25:97:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Mar 2 00:00:59 2026 GMT
Not After : Mar 3 00:00:59 2026 GMT
Subject: CN=13961eae4a565213d32c0032ca81f9de28dba47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:d4:d4:e8:23:61:1b:ff:5b:b9:e0:1a:8a:
d4:f0:8d:c4:39:3c:b7:44:87:f4:e5:26:25:c8:8d:
17:7c:51:89:00:57:43:47:68:a3:58:58:fa:fe:36:
c1:d1:bd:35:ae:9e:b4:cd:47:72:4b:e3:f0:f4:e6:
e4:d1:98:a9:5d:44:47:db:be:6e:03:fd:96:4f:73:
66:1b:b9:2f:26:94:c8:25:86:58:9f:67:85:93:90:
ac:f7:a6:cf:95:17:92:24:c6:fb:6c:c7:5d:83:1d:
b8:c3:21:47:e6:13:9b:be:d2:69:50:7f:00:f8:1a:
73:05:7b:e3:b3:c7:7e:5c:4a:1d:6c:5e:cb:88:9f:
d1:a9:40:da:ba:4a:53:a8:17:98:44:a1:f4:d9:d8:
b7:20:b7:7e:06:3a:2a:3b:6b:f5:67:51:10:4f:99:
d6:a4:51:11:b3:1d:4a:55:24:90:39:c3:19:29:e1:
d9:68:47:20:71:22:ca:76:e9:1a:c6:74:26:49:4a:
98:f2:0f:08:0a:8d:f1:60:77:98:38:8e:22:14:a7:
be:10:14:a6:e6:9b:69:06:74:ea:e1:80:a3:87:37:
45:e1:cc:b4:64:01:37:4f:a9:b9:4d:ee:cf:c3:5a:
93:c1:6e:c9:63:32:16:c4:28:92:18:40:8c:cb:59:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:96:1E:AE:4A:56:52:13:D3:2C:00:32:CA:81:F9:DE:28:DB:A4:7E
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b2:1c:17:b5:63:c6:bd:9d:99:7a:16:5c:8d:a1:90:f9:2c:
dc:24:9e:cb:b9:d7:70:0d:25:b4:d9:79:63:13:52:d5:e1:36:
4f:fa:87:f2:f2:ba:ea:50:9f:a9:c4:61:c3:fc:d2:94:47:de:
3a:5d:58:1b:db:89:69:13:f8:4f:71:ce:07:41:d3:5b:3b:58:
5f:88:2c:cf:f2:b6:ff:68:9b:76:ed:26:e6:4d:3b:86:ec:9c:
4b:87:a6:16:7c:9d:8b:a8:0f:1d:0c:d9:6c:84:42:73:69:81:
1a:ec:11:58:3c:f6:f4:e2:e4:f2:4b:69:1b:43:b0:51:e2:fa:
b0:6d:49:29:c6:ad:27:ea:e2:af:6a:24:54:2a:77:78:d6:2d:
7b:96:8b:76:4c:4c:f5:16:83:31:1e:59:19:f9:a6:7f:b9:24:
39:c3:55:62:9f:ff:35:79:9f:17:be:4a:ca:10:2a:40:dc:b8:
e7:b6:fc:b0:4b:08:ab:81:fa:15:6b:a2:42:6e:c1:1c:ae:e2:
f2:3b:8d:ab:8d:28:12:e5:5a:88:36:09:71:05:0a:8e:20:75:
9e:a3:ae:31:9f:70:c7:31:51:a9:25:16:fc:1e:85:1e:77:60:
aa:06:2f:54:46:82:06:0f:61:9d:96:db:b9:c1:70:50:8d:1d:
e4:7e:a8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:58 2026 by rpki-client