Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier: cGglCv1xAOvyysJ7R6KWrZo/iBhHGcst1p8Sm0moKtU=
Subject key identifier: 72:3C:11:0F:B0:5C:5E:65:55:45:B4:69:B9:31:9C:AF:FF:22:9D:07
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial: 019D98F45C348F7809DDDCC31A41FFE30B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:00:44 +0000
Manifest this update: Fri 17 Apr 2026 01:00:44 +0000
Manifest next update: Sat 18 Apr 2026 01:00:44 +0000
Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: f4VbFwfgjgw1fAF9CCGtj53uHZj3VYdaWaqxQTOlEG4=)
2: ScJK2ivQIxsBlhkpxe_Fy41_8xc.roa (hash: TSQwrA/vSc9MyjbkX9qzVifKTyWOKyvXJf3qefMx3B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:5c:34:8f:78:09:dd:dc:c3:1a:41:ff:e3:0b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Validity
Not Before: Apr 17 01:00:44 2026 GMT
Not After : Apr 18 01:00:44 2026 GMT
Subject: CN=723c110fb05c5e655545b469b9319cafff229d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:f8:dd:a7:02:ba:78:99:69:43:68:1b:c8:
da:a9:22:e4:bb:26:df:ad:44:a0:d1:32:23:17:bc:
f8:44:b3:03:a6:ab:ba:9a:e3:e9:d4:a3:76:19:73:
47:c9:d6:58:a6:c9:64:93:90:6c:3f:d3:af:e7:f5:
94:88:bf:af:bb:4b:87:97:0c:d8:67:dc:cd:4e:44:
e0:4b:01:ff:ab:a0:af:8f:75:7d:a1:ba:c4:be:06:
05:60:53:9d:ce:96:53:64:b9:af:eb:cc:b2:60:c5:
08:36:03:c4:fd:b7:d0:50:97:87:72:f2:9c:be:27:
16:f6:6f:f9:04:64:9c:59:2f:71:71:6f:a4:d4:ed:
e8:30:8a:f9:4c:a0:7d:46:6b:cf:97:05:e4:10:d6:
d5:a2:95:c3:0c:af:05:28:bd:b9:1a:2a:c9:c3:ce:
3c:85:40:32:8d:02:17:37:f9:c3:d7:13:50:7e:00:
f2:c4:d4:a8:d6:96:2f:01:79:95:31:ee:50:51:5d:
95:20:08:4a:3f:8d:ed:f5:6b:91:3b:e4:07:bc:ac:
a0:91:9d:5f:67:55:c0:c0:17:02:e7:53:4e:38:36:
5f:a3:ac:c7:c0:0f:7f:a8:05:3a:a4:a5:d5:ab:a9:
2b:4a:14:c4:7b:60:c0:36:22:2e:d3:3b:c4:98:76:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3C:11:0F:B0:5C:5E:65:55:45:B4:69:B9:31:9C:AF:FF:22:9D:07
X509v3 Authority Key Identifier:
keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:aa:64:77:cd:fd:bf:60:71:ff:e4:3d:37:27:b3:e4:b1:10:
65:11:f3:49:c0:29:3f:07:32:52:f3:f2:1b:6d:8d:7b:0f:fc:
f9:ca:4c:ea:da:c1:29:ce:54:74:ec:94:07:4f:d4:f2:df:70:
3b:b0:2f:84:cc:3e:3a:09:c4:64:06:6f:2f:a3:0d:5c:35:46:
e1:10:03:cc:47:a8:11:77:e9:66:8a:8e:39:ad:d9:82:39:c4:
6c:e9:bc:c5:ef:e1:1d:41:27:a6:b9:1a:5f:46:17:86:25:af:
9e:5f:ec:26:5b:31:64:9b:31:6a:02:d9:9b:74:2d:25:3a:ac:
24:b7:6c:42:1c:6f:54:2b:9e:0b:7a:11:6f:9f:6f:64:91:51:
b5:49:82:4c:d3:54:c6:f2:b0:dc:e5:e7:d6:05:8e:aa:49:fc:
31:5d:8c:9e:3f:63:53:db:33:d5:7c:6d:e8:cd:f6:59:23:47:
d8:3c:a0:d3:32:b3:5d:3b:7e:3f:5f:1a:82:78:07:43:28:43:
3f:98:0a:80:96:d6:13:f9:f6:3d:82:76:d2:96:0f:b6:66:6d:
cc:d9:98:46:bf:f5:01:1b:a9:04:c1:84:9e:6b:45:7c:ab:60:
3f:5c:f0:5f:73:3e:ec:37:ea:87:47:67:de:58:4d:ae:76:69:
74:ec:f2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:20 2026 by rpki-client