Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier: iymco4WYMi0DjusXMrXI+Ru/rgAueAMl8g3kA/gRRwc=
Subject key identifier: 87:16:8A:E9:C4:10:0E:91:E0:B9:3E:89:7B:07:39:87:2E:25:D1:BB
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial: 019FAA1A1687109A57D85C7C82CE0724EE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 19:01:04 +0000
Manifest this update: Tue 28 Jul 2026 19:01:04 +0000
Manifest next update: Wed 29 Jul 2026 19:01:04 +0000
Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: x3y1bMXPehY6wTDWk8alRUTyukqSxHQ3sac4Si86B1A=)
2: ScJK2ivQIxsBlhkpxe_Fy41_8xc.roa (hash: TSQwrA/vSc9MyjbkX9qzVifKTyWOKyvXJf3qefMx3B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:16:87:10:9a:57:d8:5c:7c:82:ce:07:24:ee:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Validity
Not Before: Jul 28 19:01:04 2026 GMT
Not After : Jul 29 19:01:04 2026 GMT
Subject: CN=87168ae9c4100e91e0b93e897b0739872e25d1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:76:a4:36:e4:74:51:cd:bd:0e:e2:72:e3:
1b:e9:ee:99:16:0b:0d:4d:95:df:ea:f3:c4:55:db:
0d:13:d4:af:6b:9b:70:35:5d:66:e3:24:09:07:17:
dd:10:17:00:b1:ef:1e:97:6a:0d:cb:21:55:29:4f:
eb:27:0d:7b:0c:9a:e1:84:ad:ff:8a:75:4f:75:fc:
ec:1b:b3:1a:89:48:7a:cb:0a:6b:54:29:62:98:7c:
d0:40:07:bb:cb:47:2b:08:6b:dd:36:de:2a:38:ad:
cf:be:6d:f1:7c:43:e9:6e:89:c0:24:50:a7:d6:42:
82:e4:d2:f3:6c:ec:0b:c4:06:f5:ca:24:ee:f4:90:
30:b2:55:db:02:e5:89:78:87:74:05:d1:10:cd:55:
81:3e:11:cb:8b:16:fe:12:b6:a3:ee:8c:11:20:48:
f7:18:8f:3a:dc:a6:dd:9f:6d:92:e6:77:a6:97:c8:
a5:6a:c5:de:76:22:c1:08:da:4b:e0:6a:32:e5:ce:
2e:c4:6a:e2:d4:74:e8:c8:19:e8:ba:9b:ae:6e:0f:
d1:4d:7d:d9:f3:fe:d0:ca:38:05:87:12:7c:fe:69:
4d:40:2f:39:ba:57:f6:88:1c:e6:2b:2f:57:61:e1:
c2:c9:70:e4:d5:e1:0f:9f:a8:6d:fd:a8:3f:c7:4c:
ec:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:16:8A:E9:C4:10:0E:91:E0:B9:3E:89:7B:07:39:87:2E:25:D1:BB
X509v3 Authority Key Identifier:
keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bc:63:e8:f9:1d:1e:53:a3:ed:2b:5c:8d:3a:45:7e:89:8d:
97:40:76:c5:1c:9d:f0:0a:35:56:8b:ab:9a:9b:59:76:ea:38:
93:9b:cf:39:bc:b3:8e:a1:9b:0b:27:4c:71:53:ee:ce:3d:cb:
cc:d5:97:73:d5:11:e6:fb:b3:51:e8:86:9c:82:ef:ee:60:dd:
1c:88:65:86:16:5f:7b:f9:ce:68:24:47:cb:0a:10:11:74:f0:
85:c8:5c:df:de:8b:f6:d3:ed:ab:ff:43:17:dd:53:ba:2c:18:
ed:2c:6e:c9:9e:74:6d:de:f7:58:fe:3e:b4:c3:d8:6d:b2:c9:
08:b2:e2:34:13:82:a8:28:6b:e4:ec:3e:24:de:5a:70:3e:18:
81:c4:bb:bf:c0:7c:51:90:38:70:20:39:18:eb:78:99:83:7f:
f8:95:e9:8a:50:2a:de:e7:bd:fd:35:a0:cd:43:82:2f:69:c6:
06:5b:44:35:a7:48:65:ff:1d:b2:af:60:ad:d4:c2:d6:b7:28:
c1:c7:27:86:c4:ce:a0:8b:b1:5d:f3:53:21:b1:e1:25:72:04:
a3:19:53:84:2c:26:72:51:69:86:5d:9e:eb:86:d8:49:86:d5:
0b:f6:9b:08:e2:22:fc:8f:c5:e8:e4:05:79:f0:f6:76:73:5f:
89:b2:34:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:28:09 2026 by rpki-client