Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
File: ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json)
Hash identifier: dq+kwKFu8I+cq4MZjVMUMw3fttHLSHOA/FITuoe4+TQ=
Subject key identifier: 4F:18:22:85:F5:75:A5:FB:C8:83:53:C5:75:08:A9:CC:FE:09:6B:4A
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial: 019FA8D02FAD255B492649F9261415C881FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
Manifest number: 0E9D
Signing time: Tue 28 Jul 2026 13:00:43 +0000
Manifest this update: Tue 28 Jul 2026 13:00:43 +0000
Manifest next update: Wed 29 Jul 2026 13:00:43 +0000
Files and hashes: 1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: onmwty2apJSoP7q3lTxlyKJ8eNLdcKyy/6JYZHwND0s=)
2: rlozkrq9ZzNHCZUtQGPTzboWxmI.roa (hash: +ky2eseP0hm1lozQb5MU58tNSrjncRM2hPrTaQ0J6cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:2f:ad:25:5b:49:26:49:f9:26:14:15:c8:81:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
Validity
Not Before: Jul 28 13:00:43 2026 GMT
Not After : Jul 29 13:00:43 2026 GMT
Subject: CN=4f182285f575a5fbc88353c57508a9ccfe096b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:55:15:74:14:b4:40:23:a6:17:23:9f:08:
f0:ea:55:fd:10:14:25:41:c5:8b:10:bd:c6:5f:b4:
6e:e4:4d:3b:20:b9:6e:a7:bb:c4:6f:ab:2f:02:86:
f4:e1:56:8e:7e:09:a3:76:58:3d:ed:55:23:a3:90:
f6:21:9f:cc:81:63:0b:9a:f5:2d:23:72:33:e7:18:
ad:6b:8f:1b:cf:50:b0:99:48:f7:57:45:db:90:e9:
f8:37:40:46:56:ba:c1:c4:9f:76:ea:3f:0f:9e:54:
b8:4b:98:f6:55:44:f3:2e:09:d8:c3:40:ef:da:b7:
89:e0:b5:3b:f0:53:8d:70:8d:85:1c:c0:bb:41:86:
46:0d:19:2d:75:18:ed:03:8a:22:19:c2:37:5c:37:
12:42:0f:dd:0b:ca:29:a6:8a:16:1a:60:80:bf:e4:
5f:bc:a6:5a:3d:33:28:01:5a:b3:bc:fa:61:53:b5:
fa:24:11:90:cf:3d:21:ce:2e:d3:de:04:a6:f2:d6:
09:5b:8b:c4:1b:a3:e9:87:db:0f:ed:4f:ca:4e:ae:
c4:42:eb:e0:96:d0:22:8f:bd:5a:a9:90:64:17:6a:
5f:f5:2e:e0:7c:e6:0b:ab:a6:7a:47:bd:b8:99:d9:
f6:da:90:90:2f:cd:9f:73:f7:58:2e:71:11:d8:8c:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:18:22:85:F5:75:A5:FB:C8:83:53:C5:75:08:A9:CC:FE:09:6B:4A
X509v3 Authority Key Identifier:
keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e2:12:39:b9:18:5a:87:36:7e:41:68:c8:fa:bb:a2:28:9c:
50:c6:6b:d0:a7:25:ab:f4:85:1d:41:65:17:3a:7d:86:37:87:
13:37:00:3f:01:78:67:e8:15:99:f7:ec:58:66:0a:49:11:c0:
40:5d:0e:fe:da:07:cf:67:e5:d0:57:af:8f:98:63:b3:77:0c:
74:bb:46:d8:93:7c:35:00:1e:6e:c1:be:91:bb:e7:89:0d:7a:
b8:ff:94:56:02:fe:ee:b2:53:fe:e3:ba:b1:bc:f5:28:c8:45:
39:24:25:9a:f5:f9:bd:68:5f:af:49:2c:2d:9c:c3:59:90:4e:
1f:26:6a:8e:f0:b1:f9:79:7c:91:c4:7b:03:bd:fe:89:e9:12:
05:ab:32:83:a3:97:a1:d2:c4:55:00:59:32:10:72:31:73:68:
b9:b1:bb:76:02:dc:1c:46:db:e6:d8:13:42:51:c6:04:b0:82:
f4:32:c7:4d:7f:29:bd:36:e3:7b:d2:d4:fe:33:43:b8:31:9a:
06:69:d1:de:21:43:72:bb:af:cd:86:bc:eb:d4:cc:52:4e:39:
08:0a:9a:a9:14:33:25:65:c7:67:a8:d5:ad:da:6a:2f:87:ac:
fd:b3:78:97:be:1f:3a:c5:a7:86:2c:f7:44:05:ee:2e:2b:8c:
7b:a6:e7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:39:00 2026 by rpki-client