Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier: 0v0Umnkt7Oef8okf1PR1MZomsVqHldAhEc4+b9olKtM=
Subject key identifier: 05:0E:52:F5:8B:13:1A:51:0B:C7:77:2E:59:11:7F:69:3B:1C:FF:E7
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial: 01A0C40E1B5AB9786A67DC4F4FB18B46BC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 13:00:53 +0000
Manifest this update: Mon 21 Sep 2026 13:00:53 +0000
Manifest next update: Tue 22 Sep 2026 13:00:53 +0000
Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: 8D+hJcDqBsc6x6JDPh2fSiOIQODFxM1RZSRml8s5+dU=)
2: ScJK2ivQIxsBlhkpxe_Fy41_8xc.roa (hash: TSQwrA/vSc9MyjbkX9qzVifKTyWOKyvXJf3qefMx3B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:1b:5a:b9:78:6a:67:dc:4f:4f:b1:8b:46:bc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Validity
Not Before: Sep 21 13:00:53 2026 GMT
Not After : Sep 22 13:00:53 2026 GMT
Subject: CN=050e52f58b131a510bc7772e59117f693b1cffe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4b:4c:86:9a:f3:76:e0:9d:06:ba:16:35:ef:
68:8e:9c:bd:7c:23:40:58:78:f0:34:14:4a:6e:5b:
ab:a4:6f:dc:6d:15:1e:5f:81:bc:3f:58:df:2b:3b:
39:e3:d3:55:65:bc:6c:76:42:e6:21:8d:46:26:bd:
39:89:68:bb:16:4c:a4:6e:ee:5b:fc:bc:a4:64:65:
25:22:b8:26:9d:de:7f:b2:72:06:11:a6:f1:36:c9:
86:f0:60:22:91:a0:b1:9a:bf:42:65:34:1e:4c:d1:
20:54:e1:c3:8c:22:27:5f:97:8b:ff:90:9a:14:ee:
5e:7c:c2:da:2f:7f:d8:3c:f7:2d:d3:ba:54:08:3b:
63:b3:1f:23:e0:64:b3:86:e0:21:f5:0c:02:f6:db:
f9:80:8e:f2:84:ed:27:d1:d2:bb:da:8c:42:a1:07:
a4:87:c7:e4:74:54:03:3a:2a:79:62:67:6d:74:de:
31:81:c8:12:a9:68:65:4e:e3:2b:e4:80:11:de:14:
13:bc:cb:0f:f7:78:2a:1a:db:66:88:a3:1e:e1:08:
63:27:4b:70:b1:90:96:98:17:40:5e:c4:fc:91:b0:
eb:5f:52:13:aa:d5:58:18:65:4e:f6:3c:30:f6:28:
50:b3:5b:a3:9a:99:81:6c:44:85:fb:d7:1c:00:1d:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0E:52:F5:8B:13:1A:51:0B:C7:77:2E:59:11:7F:69:3B:1C:FF:E7
X509v3 Authority Key Identifier:
keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b2:fe:77:ec:ac:50:f8:a1:49:76:01:59:0f:b4:bd:ba:3b:
93:49:ef:cc:b4:21:e3:c6:3a:88:c3:f2:62:40:cb:63:d3:48:
4d:a4:70:98:73:c8:e3:01:bb:71:46:c3:db:20:53:c0:0d:dd:
15:ed:57:cf:32:75:91:f1:42:9f:3d:02:40:c3:2a:bb:e2:47:
7e:c7:24:39:ce:51:7e:3c:98:42:f4:57:e9:de:0b:fc:ea:ff:
6b:ee:42:a1:ec:dc:8f:49:cb:d8:b3:90:16:b2:ae:48:76:1b:
ab:4e:65:fa:2b:90:5c:bc:c6:65:f3:80:73:15:60:59:8a:81:
34:56:5a:07:cb:e9:58:ea:3f:9c:75:87:14:f4:fa:56:2d:48:
41:c1:7a:7a:fe:a1:01:88:f5:25:88:05:0a:38:87:4c:4d:d7:
64:b2:90:47:86:01:30:92:8b:c5:e2:6b:ca:4b:13:06:f7:c9:
1c:0a:49:79:6e:8a:1a:bc:e4:a3:8d:13:7b:9a:66:9c:b4:af:
46:de:52:04:59:88:74:f1:0c:69:dc:23:37:3d:88:77:ab:cb:
27:ba:39:47:fc:99:9b:fe:70:54:b6:24:eb:cf:db:d4:45:0e:
a6:3e:0a:35:29:68:8e:ec:b6:80:fd:70:62:a4:2f:34:74:ce:
ad:20:4a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:54:27 2026 by rpki-client