Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
File: ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json)
Hash identifier: QLX/2GUwtPKQpA31H2xUjS91N8xkfAwdR9QXLgpboPU=
Subject key identifier: 3A:DB:9D:59:C0:1F:78:42:89:FA:C1:2A:7F:E1:11:9F:C8:50:3F:84
Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
Certificate issuer: /CN=01292e03a731796e1d7b148b1dd235d144352f5d
Certificate serial: 019CAB3455BE8A281B7BEA426416FD8DAA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
Manifest number: 111E
Signing time: Sun 01 Mar 2026 21:00:59 +0000
Manifest this update: Sun 01 Mar 2026 21:00:59 +0000
Manifest next update: Mon 02 Mar 2026 21:00:59 +0000
Files and hashes: 1: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: izdBLZYw0Q2IzrHjarAS5w8SLcF3nfdxPTfvyfTBIVA=)
2: ZcMDnxFKg86WG985x8gSYpkiw0w.roa (hash: NWzoV3X+tjCKZ4ahSvdzMzLxfudtWlBZs1TQLyd53h4=)
3: lIVhHM1g1TW5ddfPvkY5_fzGoKU.roa (hash: DS6+mQyyS1WgqS8CIrjWgik6/BiJxSFGFw65yEtb7os=)
4: sADfRLRIwEm-KVdFT8jWlHL8oSg.roa (hash: EZEYubhTSXGqlxWAm0J4OXdKM/7Z+1zdS/2lIIhyTjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:55:be:8a:28:1b:7b:ea:42:64:16:fd:8d:aa:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d
Validity
Not Before: Mar 1 21:00:59 2026 GMT
Not After : Mar 2 21:00:59 2026 GMT
Subject: CN=3adb9d59c01f784289fac12a7fe1119fc8503f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:9c:59:ac:36:22:2c:77:5e:ba:3b:26:36:
ef:59:9d:6f:f8:02:89:a4:fe:c9:16:21:24:22:e2:
ec:08:5b:b3:e8:f3:97:ab:38:45:0d:78:55:83:45:
33:0b:e3:40:18:8e:af:3e:85:6d:46:17:b5:09:e2:
34:b3:6c:55:8a:28:3e:11:76:7f:b5:10:08:06:51:
5f:ad:9f:ed:0b:71:3d:5a:e6:e7:41:38:fa:37:85:
16:ac:c1:ac:87:10:8d:c2:24:1d:a4:d9:9e:50:70:
3f:43:ba:b8:47:42:a6:ea:a2:37:46:42:ca:e3:ed:
72:de:0d:b5:7f:27:93:47:ce:e4:e4:35:69:41:52:
50:99:45:44:a9:6b:9d:84:71:1d:bd:83:65:d0:1c:
5b:66:d4:49:0b:7b:ed:4d:68:7a:5d:e8:da:1d:ed:
0f:8c:b4:54:13:10:3b:26:ce:5d:c3:8d:74:d5:6d:
45:28:55:40:80:db:87:b0:b5:c7:16:20:b6:a3:65:
60:b8:06:06:37:c5:cf:03:58:7e:dc:94:3b:86:ed:
d7:ee:69:1a:e1:96:7e:e6:02:e9:c7:52:c5:93:12:
c1:56:a9:0c:a0:ba:1e:08:ed:66:56:c3:ef:fe:fd:
f9:4a:e9:75:79:b2:d1:3e:17:27:6d:51:0e:cb:3b:
8e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DB:9D:59:C0:1F:78:42:89:FA:C1:2A:7F:E1:11:9F:C8:50:3F:84
X509v3 Authority Key Identifier:
keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:84:4b:54:27:b1:a2:06:58:b6:60:b4:c5:60:8c:1c:02:a1:
2b:ed:f6:02:c3:9c:c9:9f:f7:dd:f2:50:4f:63:4d:11:bd:d3:
7e:4e:8c:7a:e8:06:61:b4:9f:3e:13:cf:48:95:39:59:87:6d:
e4:9d:b2:a0:0a:1a:ad:64:64:1b:0a:38:4e:b1:db:dd:25:a4:
29:41:74:d1:a0:fa:e3:67:da:55:f9:ea:f2:38:95:0d:c1:1a:
98:79:12:71:d3:c1:cb:17:e3:68:3a:22:ee:6f:2c:29:b0:4a:
d1:94:8f:c3:70:51:dc:a6:09:81:21:9c:c4:21:df:e5:59:82:
ce:04:5a:95:84:90:9a:ce:34:fc:73:4b:bd:58:b9:81:5a:3f:
67:85:01:f9:4d:5a:af:a2:b1:7c:88:5d:9e:e9:44:1e:f9:9f:
d6:46:72:e9:b8:22:25:7e:59:f9:3c:9d:43:eb:b9:eb:7b:39:
b2:61:a0:49:2e:6e:59:40:c8:3a:3d:9d:11:60:74:f6:71:db:
5e:af:58:9a:d6:09:f5:9b:bc:7d:61:b2:be:7d:f4:82:db:27:
db:c2:84:c0:cf:4f:54:7f:4b:bf:f0:dc:37:86:64:f3:33:e4:
6a:73:4e:83:82:00:0f:a7:db:33:a4:22:a8:46:4c:45:29:1f:
57:06:8c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:55:31 2026 by rpki-client