Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
File: ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json)
Hash identifier: 4Pwb5B8K3SKTpgl/kCf1nbUBFL2usTsN0Ls+JT1jG7k=
Subject key identifier: 20:81:A4:58:36:82:92:9E:8D:E5:EC:5B:6B:05:03:5F:12:4D:B0:7D
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial: 019D9998CD0D7B5618B556058BECC617FC74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
Manifest number: 0D8C
Signing time: Fri 17 Apr 2026 04:00:21 +0000
Manifest this update: Fri 17 Apr 2026 04:00:21 +0000
Manifest next update: Sat 18 Apr 2026 04:00:21 +0000
Files and hashes: 1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: beMarB2llpEBnx5pxVaWXBkYb26esW9lOJ127OVJEag=)
2: rlozkrq9ZzNHCZUtQGPTzboWxmI.roa (hash: +ky2eseP0hm1lozQb5MU58tNSrjncRM2hPrTaQ0J6cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:cd:0d:7b:56:18:b5:56:05:8b:ec:c6:17:fc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
Validity
Not Before: Apr 17 04:00:21 2026 GMT
Not After : Apr 18 04:00:21 2026 GMT
Subject: CN=2081a4583682929e8de5ec5b6b05035f124db07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:6c:ed:85:3c:91:8b:ef:5d:2b:ff:7c:e8:
7e:85:08:26:e1:f2:93:f4:02:a6:aa:ed:8e:45:91:
14:6b:44:20:78:97:1f:61:27:ac:41:e0:8e:fc:3d:
7b:64:48:f4:98:3d:5a:e7:ba:81:0c:eb:1e:fa:38:
9e:7c:b6:5a:86:3f:be:c5:14:ca:86:88:39:34:99:
8d:10:e4:ff:ba:14:a4:fb:4a:f8:a6:24:28:b4:2e:
ed:32:68:83:91:1a:d8:1f:1c:48:0a:46:49:e5:8e:
c0:82:40:4b:20:fc:69:60:28:bc:a9:39:05:aa:bd:
d7:ad:1c:52:1a:64:a1:bb:69:30:56:f1:cf:30:e0:
82:3e:66:de:3a:fc:08:8d:ac:50:2b:95:ec:3b:5b:
3c:c0:0d:6e:00:28:28:33:5a:42:de:f1:eb:79:57:
d7:18:0f:7b:1d:92:79:a7:8e:7c:c4:0e:68:2e:a2:
0f:37:55:0a:4a:b1:6d:65:c7:3a:e5:5f:f4:d7:d4:
26:d0:a5:a2:3b:46:e8:d9:ab:30:bb:09:f4:e1:df:
8f:76:75:3f:05:18:3b:42:da:a8:c2:53:d6:3f:54:
e5:dd:27:0a:ca:9f:2b:37:ab:ea:61:4f:5f:ec:75:
17:cf:2b:4b:42:9d:2a:b9:78:b7:61:28:04:41:9a:
7e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:81:A4:58:36:82:92:9E:8D:E5:EC:5B:6B:05:03:5F:12:4D:B0:7D
X509v3 Authority Key Identifier:
keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8c:fa:b0:ad:0f:08:56:b8:4a:2e:30:30:8b:23:90:06:ee:
5b:0b:8b:52:b8:de:af:d4:96:88:dc:5d:7d:2e:c3:26:58:24:
b5:eb:69:db:6b:dd:ae:ce:55:fc:d1:6b:1b:ba:00:61:70:be:
e7:fe:cd:b7:80:d3:1a:8a:3e:3f:30:b9:c0:2c:bb:c3:d3:38:
39:c9:16:0e:8a:29:0f:6e:83:1e:7e:e0:55:68:79:53:55:77:
cd:80:79:c4:11:07:22:ee:90:21:ca:aa:e6:cb:a2:19:46:4c:
a2:86:f1:fd:d8:59:2d:34:47:9a:fb:59:ed:0e:b8:a2:4b:f7:
9f:f5:51:4f:07:4f:d6:bd:2d:4d:36:26:0e:a2:85:b6:4e:86:
0b:1e:e5:c1:fc:b4:cb:66:25:4d:a5:96:d4:c7:3a:d9:08:a3:
ef:ec:ed:97:42:06:ca:19:09:05:d9:8b:63:19:a0:45:03:18:
88:e5:96:9b:11:7f:f0:c1:2d:d0:78:b3:ee:33:a3:3d:e5:0d:
7d:5b:0f:04:e4:62:78:78:ec:3d:00:43:92:bd:53:d6:7f:47:
c5:a3:24:d1:88:77:41:a8:1a:52:93:7e:7b:c2:8e:18:0d:89:
2f:e8:89:ba:98:5d:ad:00:6d:c1:86:a2:50:d0:16:2d:10:9f:
55:96:e4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:53 2026 by rpki-client