Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
File: ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json)
Hash identifier: l/V9eU1+9MNK1rhrHiPGU9l4ts4IlQwn3cUBlB3jL0M=
Subject key identifier: 33:13:FE:BA:13:CE:54:2D:FE:BE:8F:C7:DA:82:CC:66:08:B0:B4:C6
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial: 01A0C6A0D6D0FD7EDAE3295AD4E9176A451D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
Manifest number: 0F31
Signing time: Tue 22 Sep 2026 01:00:24 +0000
Manifest this update: Tue 22 Sep 2026 01:00:24 +0000
Manifest next update: Wed 23 Sep 2026 01:00:24 +0000
Files and hashes: 1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: V4arxdEdzFMa013RLk492dPRngQDDPRZHbZL/NtcU2s=)
2: rlozkrq9ZzNHCZUtQGPTzboWxmI.roa (hash: +ky2eseP0hm1lozQb5MU58tNSrjncRM2hPrTaQ0J6cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:d6:d0:fd:7e:da:e3:29:5a:d4:e9:17:6a:45:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
Validity
Not Before: Sep 22 01:00:24 2026 GMT
Not After : Sep 23 01:00:24 2026 GMT
Subject: CN=3313feba13ce542dfebe8fc7da82cc6608b0b4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:43:91:f8:22:36:0b:d4:49:e4:91:c5:4d:2c:
e4:80:ea:c6:7a:c8:a3:8e:33:09:23:3a:6f:ca:a8:
c8:84:59:af:59:79:a6:9c:26:8b:47:00:8f:b6:17:
ab:48:fd:ab:fe:f6:69:01:56:19:c0:de:7e:a2:2f:
f6:61:f3:35:3c:77:53:7b:1c:31:a9:46:d2:0c:eb:
3e:26:6c:95:15:46:37:7b:fb:39:1e:aa:36:03:be:
98:b4:3c:36:b2:ff:5a:ab:39:35:f3:ff:f4:fc:78:
ee:d7:ba:bc:e9:c8:0c:b0:cf:76:a3:03:ba:52:76:
62:83:8d:eb:cb:89:ac:e9:4e:c6:07:85:07:58:66:
bb:4a:ef:81:33:2e:5d:35:b9:8b:12:51:3b:d3:14:
da:13:0e:28:90:c4:9a:46:30:14:7f:63:7a:3f:5e:
e1:ba:fe:65:8d:b6:46:64:dd:b9:ec:33:05:76:87:
a0:a1:b7:bf:a0:33:2f:b6:96:be:24:c6:1c:a3:3d:
40:0e:87:dc:99:16:28:59:44:0f:e3:07:48:57:1f:
57:8b:77:4d:52:cd:49:ff:06:6d:6d:31:75:a2:e3:
bd:8b:c1:26:2d:3b:d7:d3:9f:db:f3:3a:f6:62:e0:
23:95:c1:23:0e:7a:a4:39:e0:3c:9b:ce:c5:d3:10:
ef:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:13:FE:BA:13:CE:54:2D:FE:BE:8F:C7:DA:82:CC:66:08:B0:B4:C6
X509v3 Authority Key Identifier:
keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:74:2d:af:80:c1:cf:fd:8c:28:10:02:17:b3:33:27:b5:6e:
c6:b4:4f:21:4b:65:66:24:91:d0:71:0c:35:a5:08:2a:74:b9:
bc:5e:82:84:71:56:ab:8a:93:7a:b6:58:8c:87:b1:fd:ee:66:
ca:17:5a:7d:bf:08:f7:08:58:64:dd:dc:62:09:68:27:16:da:
99:17:e1:6e:15:3b:17:c3:06:db:3d:71:13:14:43:5f:96:e8:
5e:5e:44:f2:ee:83:21:17:bc:6c:b4:11:ac:09:85:e1:9d:d4:
34:1e:96:89:11:ba:15:06:2a:0e:a0:1c:16:f7:38:ac:3b:91:
68:0f:e0:6f:02:4a:7f:e2:33:ea:e7:3d:62:4b:31:97:1b:bf:
f8:85:b8:81:4c:3f:9b:c2:d6:ad:ba:33:83:53:72:93:67:40:
fd:29:d9:34:7c:00:f1:31:81:15:0a:b9:8f:4d:ed:36:0c:73:
5b:af:7f:f3:ed:64:91:68:78:c9:bd:05:5a:e1:78:21:a3:76:
0b:8f:f4:c4:a5:53:2d:86:52:47:c3:e8:e9:21:45:30:6e:e8:
2c:3a:15:cf:e8:88:46:58:0a:81:80:82:a7:f6:2d:c3:b9:1b:
99:7b:77:9b:70:1b:5c:7d:16:d9:5e:9c:31:d5:09:a4:4c:91:
40:ce:af:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGoNbQ/X7a4yla1OkXakUdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjAyNTk2ZDVjZWNlMzdkYzM0Yzg2MTA2NDU3OGZjNmRh
YTVlODYwHhcNMjYwOTIyMDEwMDI0WhcNMjYwOTIzMDEwMDI0WjAzMTEwLwYDVQQD
EygzMzEzZmViYTEzY2U1NDJkZmViZThmYzdkYTgyY2M2NjA4YjBiNGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EOR+CI2C9RJ5JHFTSzkgOrGesij
jjMJIzpvyqjIhFmvWXmmnCaLRwCPtherSP2r/vZpAVYZwN5+oi/2YfM1PHdTexwx
qUbSDOs+JmyVFUY3e/s5Hqo2A76YtDw2sv9aqzk18//0/Hju17q86cgMsM92owO6
UnZig43ry4ms6U7GB4UHWGa7Su+BMy5dNbmLElE70xTaEw4okMSaRjAUf2N6P17h
uv5ljbZGZN257DMFdoegobe/oDMvtpa+JMYcoz1ADofcmRYoWUQP4wdIVx9Xi3dN
Us1J/wZtbTF1ouO9i8EmLTvX05/b8zr2YuAjlcEjDnqkOeA8m87F0xDvRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMT/roTzlQt/r6Px9qCzGYIsLTGMB8GA1UdIwQY
MBaAFAEgJZbVzs433DTIYQZFePxtql6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUt
NDgxMTUxYWNmMzI5LzEvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUtNDgxMTUxYWNmMzI5
LzEvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInQtr4DB
z/2MKBACF7MzJ7VuxrRPIUtlZiSR0HEMNaUIKnS5vF6ChHFWq4qTerZYjIex/e5m
yhdafb8I9whYZN3cYgloJxbamRfhbhU7F8MG2z1xExRDX5boXl5E8u6DIRe8bLQR
rAmF4Z3UNB6WiRG6FQYqDqAcFvc4rDuRaA/gbwJKf+Iz6uc9Yksxlxu/+IW4gUw/
m8LWrbozg1Nyk2dA/SnZNHwA8TGBFQq5j03tNgxzW69/8+1kkWh4yb0FWuF4IaN2
C4/0xKVTLYZSR8Po6SFFMG7oLDoVz+iIRlgKgYCCp/Ytw7kbmXt3m3AbXH0W2V6c
MdUJpEyRQM6vyA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:21:00 2026 by rpki-client