Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: 3jDTjTuNdZ5uNP2zD7e+m9tuYH1NnpxoHEXC9mihqXs=
Subject key identifier: 18:7A:8E:A2:EC:87:40:5E:0F:13:92:19:2C:07:D6:DC:88:73:47:E3
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 019D99630F6410E2DA2528F2EB3E4AF74F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 1241
Signing time: Fri 17 Apr 2026 03:01:39 +0000
Manifest this update: Fri 17 Apr 2026 03:01:39 +0000
Manifest next update: Sat 18 Apr 2026 03:01:39 +0000
Files and hashes: 1: 3ko4FNTHS3dYJgP5A7wcLtBHA6o.roa (hash: tK64bc5P7HI3Kfo106hTjUUsaeAWlW26+32w7wIp23o=)
2: M9TO4mLPx12QNOxhU6_MrD2r794.roa (hash: 9JzmkneLii+LpnbpPrpyhCSpEye5RnU2UT4N+IzPQY0=)
3: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: 7Hm7hDyMtZG5wN1eKiMJsa8z67tijX7ooXnhW61tP+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:0f:64:10:e2:da:25:28:f2:eb:3e:4a:f7:4f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Apr 17 03:01:39 2026 GMT
Not After : Apr 18 03:01:39 2026 GMT
Subject: CN=187a8ea2ec87405e0f1392192c07d6dc887347e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:82:dc:fb:e3:02:6a:92:09:37:b5:2a:9f:
27:89:04:6b:29:16:fb:d4:ed:27:a6:6e:84:25:44:
84:98:d4:4e:8d:b3:72:80:6c:4a:b4:40:a3:4d:d6:
fb:b3:04:a6:ce:ec:4a:ae:d3:17:90:ba:8b:de:2a:
7f:9c:1b:19:c8:75:47:55:56:c1:e9:70:81:5a:01:
eb:72:ee:e1:cb:4c:74:b6:61:89:8c:7e:0f:a7:c4:
3f:05:a3:ed:e4:d2:0b:e9:de:ec:bd:1c:83:01:0b:
28:aa:66:9c:b1:6b:c2:eb:fa:1e:cb:1f:f6:08:92:
83:c2:c3:68:ac:3c:b1:58:0d:5f:32:3f:00:4f:c9:
a1:68:48:7c:16:0b:b8:96:ca:40:a6:eb:b4:96:f2:
56:d5:94:82:58:5f:78:52:01:bb:57:5e:21:42:71:
b3:27:90:46:0a:6d:50:d0:59:9a:d8:77:19:ab:a6:
2d:09:f2:3a:e4:2f:07:31:77:4e:72:c9:77:95:bf:
ef:fa:40:11:9c:52:75:e4:89:27:f0:7b:72:a5:f9:
c4:0a:22:6d:03:02:97:39:c4:f7:27:66:fd:59:40:
f6:28:73:c1:62:7e:67:4d:40:33:e2:2e:97:0a:8b:
5d:90:a5:0f:45:4c:cf:ba:97:b5:27:e4:bc:dd:72:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7A:8E:A2:EC:87:40:5E:0F:13:92:19:2C:07:D6:DC:88:73:47:E3
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:97:84:43:76:55:ec:d4:69:09:f2:c5:73:9d:9e:b4:6e:dd:
6f:0e:e1:5c:35:49:e9:b2:32:12:44:b2:61:06:9c:3e:f3:52:
92:60:ef:6a:0e:eb:5c:0d:93:5d:ff:1b:de:97:70:91:e0:51:
9e:55:6e:85:93:63:7c:d2:79:38:e6:76:ad:4d:c3:bc:08:b1:
50:8d:07:7a:1f:fd:4a:3c:b2:b4:6e:1a:54:bc:60:45:ac:06:
bf:11:75:ed:73:8e:7d:c2:6a:56:f1:20:b8:54:26:9b:aa:fc:
3b:a5:12:7c:a6:58:2b:f2:13:48:fe:20:ff:c5:59:15:58:b4:
f4:99:fb:de:43:1d:99:7b:8d:82:7c:68:75:11:d7:ae:5c:17:
ae:6d:04:eb:24:1d:08:99:33:1b:e3:2c:de:e3:d0:11:c6:59:
d7:d7:39:07:a8:8a:cd:15:6e:02:65:dd:71:c6:a5:9c:f1:1f:
00:45:43:b9:cf:d6:cc:68:22:4f:ca:7f:3b:02:d3:86:eb:ea:
27:4d:e3:b4:79:0d:29:32:cf:85:ba:3c:e2:57:4e:ad:32:05:
39:f1:89:e7:9f:8d:50:a3:71:c2:45:ca:31:74:3b:dd:35:f9:
75:a6:0c:ac:78:44:60:ed:45:56:47:d1:9f:20:aa:e9:7e:e7:
bf:8c:38:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:30 2026 by rpki-client