Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier: Krg9leK6WjEfVfgHiaJR1QR7FL7u9ukQM53OD0TAoDY=
Subject key identifier: 29:27:B1:A2:DD:03:5B:CB:87:8E:72:0D:0A:AB:CB:AC:89:7F:EC:C9
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial: 019CAB6BA131C6FDE15069E50EFF0424940C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:01:23 +0000
Manifest this update: Sun 01 Mar 2026 22:01:23 +0000
Manifest next update: Mon 02 Mar 2026 22:01:23 +0000
Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: gaqBZbld5NzE4UB6SZWVdsyGPcQBoXgMjGEvWyIuz9c=)
2: ScJK2ivQIxsBlhkpxe_Fy41_8xc.roa (hash: TSQwrA/vSc9MyjbkX9qzVifKTyWOKyvXJf3qefMx3B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a1:31:c6:fd:e1:50:69:e5:0e:ff:04:24:94:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Validity
Not Before: Mar 1 22:01:23 2026 GMT
Not After : Mar 2 22:01:23 2026 GMT
Subject: CN=2927b1a2dd035bcb878e720d0aabcbac897fecc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:90:4e:1a:48:37:d9:cd:81:95:df:b7:81:1a:
a6:db:9f:c9:29:0e:31:30:93:22:80:b2:a9:5c:e5:
d0:df:b7:eb:97:05:38:65:59:13:a6:9e:09:58:3f:
5b:68:15:dc:06:bc:3f:8c:6c:8e:8b:d2:7d:5a:c2:
f9:35:17:b0:10:d7:d8:b0:e6:36:d6:ef:c0:6e:4c:
7b:6d:de:32:26:5f:64:94:62:34:db:f7:d6:24:c5:
42:f5:5e:f6:02:30:27:cb:a2:b3:f6:f1:aa:10:2b:
bd:76:95:d0:da:13:14:6e:e8:a8:68:3a:32:52:f8:
7e:e7:c8:8e:4e:98:a7:53:60:20:f1:ab:0b:ce:fa:
56:cb:9e:6d:56:7e:0e:cc:eb:07:54:5e:b9:22:52:
4f:87:f5:e8:ba:80:26:66:e8:4a:52:37:a4:75:c9:
ad:f5:c5:59:21:e4:b4:dd:cb:10:42:7b:93:f0:1a:
76:a3:7b:d3:a7:c1:83:c7:29:9c:70:38:d1:4b:8f:
19:b1:3e:56:57:0b:b5:58:a7:95:4a:13:cb:ae:38:
f2:fb:bc:3e:3e:dd:44:f5:ea:aa:85:fa:8b:11:6c:
54:2d:da:25:96:4d:6f:63:8e:69:e2:f5:e8:f5:41:
1a:37:e2:45:3c:20:61:13:fb:d2:a2:5f:f0:10:d2:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:27:B1:A2:DD:03:5B:CB:87:8E:72:0D:0A:AB:CB:AC:89:7F:EC:C9
X509v3 Authority Key Identifier:
keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ee:f9:2e:59:c1:a8:bc:ea:58:b5:10:1d:05:ab:cd:12:d6:
d5:f3:61:d3:52:cd:f1:7b:a7:78:bb:11:a2:14:e2:35:c8:ef:
ff:8d:be:1b:fb:9b:13:22:f1:61:18:20:b0:37:6b:a7:3b:90:
9c:7b:21:77:fd:66:59:bd:17:87:a5:a9:35:c0:39:d3:18:90:
19:65:b7:be:1d:bd:af:b3:3e:ab:c4:71:e2:42:60:5d:4c:55:
eb:5d:66:c6:23:22:0f:62:e9:89:31:4a:12:4a:46:e3:19:71:
8a:e9:68:eb:bb:7d:2b:38:13:a2:26:7e:d6:86:b6:48:1e:1f:
b1:ce:65:0a:47:fd:c4:73:c5:38:e0:b8:4b:50:71:59:f3:52:
da:7c:80:94:af:ba:56:a7:fa:ca:fe:ab:19:32:b5:af:26:8f:
d8:cf:79:2a:cf:47:e4:db:17:d4:3d:c8:4b:a1:9f:57:39:22:
1d:e5:4f:3a:00:e4:15:21:ab:3f:ca:19:f1:d3:e0:77:c0:1b:
2c:75:2a:ad:59:56:03:4c:5e:da:d2:4c:00:70:a4:8c:17:be:
fa:02:80:d5:4f:56:6f:54:22:3d:0a:e7:47:7e:c8:c5:17:e1:
f1:92:a9:1b:a5:b1:ec:72:c8:eb:74:0d:7a:78:af:4d:30:84:
2f:a2:dd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:37:28 2026 by rpki-client