Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: +b0UqtHuv7iqc2CUuCwlOzTxDwRLUjHMHCTCvm7OHmM=
Subject key identifier: 3C:DF:E8:DE:F0:50:42:CE:1C:29:BD:D2:6A:63:10:C6:67:FF:61:09
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 019EC2C9EBE04F610C1BBE8B9BD324F04FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 12DB
Signing time: Sat 13 Jun 2026 21:01:13 +0000
Manifest this update: Sat 13 Jun 2026 21:01:13 +0000
Manifest next update: Sun 14 Jun 2026 21:01:13 +0000
Files and hashes: 1: 3ko4FNTHS3dYJgP5A7wcLtBHA6o.roa (hash: tK64bc5P7HI3Kfo106hTjUUsaeAWlW26+32w7wIp23o=)
2: M9TO4mLPx12QNOxhU6_MrD2r794.roa (hash: 9JzmkneLii+LpnbpPrpyhCSpEye5RnU2UT4N+IzPQY0=)
3: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: X31ZOFxGR3Dho5Ip6vOPcq5R5zLrqGkZ2yiaPrU5mgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:eb:e0:4f:61:0c:1b:be:8b:9b:d3:24:f0:4f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Jun 13 21:01:13 2026 GMT
Not After : Jun 14 21:01:13 2026 GMT
Subject: CN=3cdfe8def05042ce1c29bdd26a6310c667ff6109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:01:5f:ce:f6:84:4f:e6:3a:3a:2e:62:63:
62:b5:fe:96:e6:d6:e6:13:15:9a:35:48:a1:66:7c:
45:d8:98:bc:6f:32:8a:f4:13:0c:20:9f:1b:27:a5:
0e:fd:dd:97:db:26:fa:b3:e3:68:f9:5b:7a:ba:c0:
32:93:00:c7:74:1b:d5:c3:dc:2b:38:1f:47:fd:a1:
5a:ef:33:99:14:35:d9:85:53:a8:ff:d9:0a:ee:f2:
50:3d:d0:2f:08:c0:1d:9b:36:fb:64:08:08:da:fc:
c6:c3:98:9c:2c:d3:88:f6:26:86:bc:56:d5:23:29:
bf:38:a3:ad:e8:5a:fc:8c:61:2d:5f:2e:62:21:81:
86:7b:73:17:63:4b:07:17:19:25:ae:55:ca:5f:49:
eb:9a:ed:9c:60:3b:59:74:64:d4:2c:d5:ed:10:4c:
92:fc:98:6b:a6:8b:0a:24:5c:cd:c2:88:a5:1e:80:
8d:b7:39:78:11:40:43:fa:5f:c5:a7:f0:89:7f:bf:
2f:8b:e2:cf:22:d3:7e:d5:0f:b5:08:12:b7:63:de:
fd:9f:df:28:4a:e8:78:c1:3f:c2:56:c6:f6:c7:36:
4c:5d:50:94:fd:3d:22:df:9c:ea:f1:79:8e:88:ac:
2e:34:6f:7e:f5:58:9a:a5:23:ea:88:d0:5d:67:8b:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DF:E8:DE:F0:50:42:CE:1C:29:BD:D2:6A:63:10:C6:67:FF:61:09
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4f:10:2b:e6:61:96:2c:d7:36:b7:ec:74:73:03:9c:44:02:
db:13:3b:c2:1c:eb:32:3e:75:33:71:8e:17:72:54:7a:44:48:
7a:ad:7f:53:11:9f:5e:22:96:08:93:ed:5a:00:f5:59:f0:a6:
1a:b5:1e:37:76:06:e3:6f:6d:6f:49:2b:62:3a:d4:df:fe:54:
1c:b7:e7:41:73:f5:0a:e8:63:af:06:a1:97:ae:79:57:0d:1b:
af:aa:1c:7b:ab:90:b2:c7:d0:26:47:64:2f:a7:ec:7a:62:14:
2f:86:98:f7:45:19:d5:01:4f:00:00:6e:c3:bc:00:23:ce:57:
41:74:85:d1:55:e8:43:73:b9:6f:d3:b9:52:ee:1c:32:0e:54:
6f:a7:3c:eb:b4:64:90:d5:e8:2f:aa:65:e8:55:cd:c4:39:55:
f0:d7:67:82:ed:be:82:01:57:e7:bc:f8:65:7c:a8:f5:a2:d1:
a7:f8:c2:8e:4d:e5:8e:bf:49:b3:b8:99:4f:3f:d0:47:a6:17:
3b:b2:77:2b:73:ef:e2:e5:63:68:a4:f9:07:df:2a:43:d0:03:
48:75:5e:7a:5f:1f:1e:13:54:75:eb:cd:2d:5a:3d:37:7e:ae:
05:04:73:b2:21:e5:8d:59:39:ee:46:4d:c4:a3:37:fd:47:a5:
de:6e:98:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:11 2026 by rpki-client