Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
File: ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json)
Hash identifier: uWlRzCJIOj3T/zuBgpgbYiizJr9X3UpwrCba4g7utWI=
Subject key identifier: 4B:6E:E2:02:88:4C:A8:6A:00:F3:83:8F:7D:1D:B3:17:5F:20:CA:5A
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial: 019CAC0FBD2914B6D994F1B421795FDA9EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
Manifest number: 0D11
Signing time: Mon 02 Mar 2026 01:00:38 +0000
Manifest this update: Mon 02 Mar 2026 01:00:38 +0000
Manifest next update: Tue 03 Mar 2026 01:00:38 +0000
Files and hashes: 1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: 7uZSVtOt5NlJWscmrTxjvgys3HMWeLOxmMXyuKGhfaU=)
2: rlozkrq9ZzNHCZUtQGPTzboWxmI.roa (hash: +ky2eseP0hm1lozQb5MU58tNSrjncRM2hPrTaQ0J6cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:bd:29:14:b6:d9:94:f1:b4:21:79:5f:da:9e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
Validity
Not Before: Mar 2 01:00:38 2026 GMT
Not After : Mar 3 01:00:38 2026 GMT
Subject: CN=4b6ee202884ca86a00f3838f7d1db3175f20ca5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:b8:02:ad:96:32:7c:0c:b0:b6:34:f6:ca:
6f:a8:08:42:d3:2f:f1:b1:9f:27:8e:fe:71:23:a6:
12:99:3d:6a:e0:58:de:61:85:98:c6:a3:52:2d:30:
45:4b:47:4c:96:ca:b9:ce:ec:be:c6:04:12:04:e4:
76:05:70:0e:fe:d0:49:03:c7:6d:68:49:ea:8e:a2:
ec:f3:cc:90:b0:d3:57:7d:fb:98:e0:12:f7:46:df:
76:62:b0:c8:df:75:2e:0f:9f:0f:19:05:1d:05:0c:
7d:6f:ed:37:71:9b:f1:cc:69:2e:bd:8f:93:8c:54:
bf:a6:fd:d3:76:4b:f3:99:07:ee:2e:11:4d:77:d8:
41:f5:3c:6b:a9:4a:8b:2c:9d:32:56:bc:60:a4:81:
47:cb:ee:f7:1e:04:a6:50:51:03:32:80:ab:50:b6:
67:58:84:92:55:75:29:85:d0:e9:77:89:dd:b5:68:
e2:da:c4:29:18:e4:72:98:2f:d1:6f:32:88:f3:d1:
f6:22:a3:77:c5:01:25:40:c7:55:7f:05:e4:6e:47:
41:d4:8c:4a:31:b0:48:de:54:82:39:31:21:7b:67:
3f:8d:16:0b:e0:2b:35:a3:41:2d:f4:86:9a:e3:f1:
b7:b9:23:05:41:6b:a6:65:63:a3:41:da:0e:ac:50:
2e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6E:E2:02:88:4C:A8:6A:00:F3:83:8F:7D:1D:B3:17:5F:20:CA:5A
X509v3 Authority Key Identifier:
keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0c:0b:b1:5f:75:23:44:28:fc:d0:5a:0a:8c:20:e9:48:9f:
b3:b5:9f:06:70:67:c1:d7:5d:48:69:24:9e:1a:80:3e:12:3d:
a7:10:42:7b:3a:c6:ab:b9:d4:20:4b:91:ee:82:61:67:f0:e4:
c6:4a:46:c1:e4:00:ca:aa:c2:ea:05:67:de:62:2c:f8:4f:12:
e6:12:28:b4:65:6b:69:7d:62:6a:a8:6b:c1:cc:65:58:98:5c:
8c:2c:e8:df:18:46:ac:e8:2c:9d:a0:b7:d3:cc:4e:9c:b4:f9:
f6:15:8f:93:c4:49:c0:61:ce:ce:fe:e2:e8:9a:e8:c6:1f:80:
80:a5:2c:ce:df:61:00:a8:82:6c:dc:80:73:30:75:c7:4f:9b:
a9:7c:89:28:e4:17:bd:07:95:ff:d6:54:76:a0:75:78:90:88:
9a:63:1b:e7:d7:f7:f4:90:af:54:7c:3e:38:b9:c1:62:17:a5:
f8:f0:86:36:64:f0:d0:1f:f2:02:12:8e:95:1d:9c:1e:1f:18:
8b:07:61:86:35:01:d9:19:da:35:a9:18:c9:39:ff:9e:ec:ae:
d7:26:4a:53:93:1d:22:e5:53:90:a5:a2:11:a1:d1:2f:40:60:
90:a1:48:e0:bd:7a:00:ad:1b:d6:2b:94:0f:f5:2d:7d:37:32:
c8:28:15:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD70pFLbZlPG0IXlf2p7nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjAyNTk2ZDVjZWNlMzdkYzM0Yzg2MTA2NDU3OGZjNmRh
YTVlODYwHhcNMjYwMzAyMDEwMDM4WhcNMjYwMzAzMDEwMDM4WjAzMTEwLwYDVQQD
Eyg0YjZlZTIwMjg4NGNhODZhMDBmMzgzOGY3ZDFkYjMxNzVmMjBjYTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwje4Aq2WMnwMsLY09spvqAhC0y/x
sZ8njv5xI6YSmT1q4FjeYYWYxqNSLTBFS0dMlsq5zuy+xgQSBOR2BXAO/tBJA8dt
aEnqjqLs88yQsNNXffuY4BL3Rt92YrDI33UuD58PGQUdBQx9b+03cZvxzGkuvY+T
jFS/pv3TdkvzmQfuLhFNd9hB9TxrqUqLLJ0yVrxgpIFHy+73HgSmUFEDMoCrULZn
WISSVXUphdDpd4ndtWji2sQpGORymC/RbzKI89H2IqN3xQElQMdVfwXkbkdB1IxK
MbBI3lSCOTEhe2c/jRYL4Cs1o0Et9Iaa4/G3uSMFQWumZWOjQdoOrFAuZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtu4gKITKhqAPODj30dsxdfIMpaMB8GA1UdIwQY
MBaAFAEgJZbVzs433DTIYQZFePxtql6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUt
NDgxMTUxYWNmMzI5LzEvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUtNDgxMTUxYWNmMzI5
LzEvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgwLsV91
I0Qo/NBaCowg6Uifs7WfBnBnwdddSGkknhqAPhI9pxBCezrGq7nUIEuR7oJhZ/Dk
xkpGweQAyqrC6gVn3mIs+E8S5hIotGVraX1iaqhrwcxlWJhcjCzo3xhGrOgsnaC3
08xOnLT59hWPk8RJwGHOzv7i6Jroxh+AgKUszt9hAKiCbNyAczB1x0+bqXyJKOQX
vQeV/9ZUdqB1eJCImmMb59f39JCvVHw+OLnBYhel+PCGNmTw0B/yAhKOlR2cHh8Y
iwdhhjUB2RnaNakYyTn/nuyu1yZKU5MdIuVTkKWiEaHRL0BgkKFI4L16AK0b1iuU
D/UtfTcyyCgVWg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:13 2026 by rpki-client