Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json)
Hash identifier: k0wRPVmql4GpesNrPHQObwHsqQp00CgoTX5iUQRvcQA=
Subject key identifier: 0A:72:65:9A:2E:8B:43:74:81:53:8D:67:03:4A:0B:4D:BD:8E:35:AA
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 01A0C369AF967929FBD904481BCF4AE618D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
Manifest number: 0A9D
Signing time: Mon 21 Sep 2026 10:01:18 +0000
Manifest this update: Mon 21 Sep 2026 10:01:18 +0000
Manifest next update: Tue 22 Sep 2026 10:01:18 +0000
Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: EC08ehJ2Q8sCaa2SFXav5dCnhp6p4rzJz5+9VIkQm6Y=)
2: H49G2vY2n7CqDt3v_PdU70zy7RA.roa (hash: 3w0udG08DzlOoXAgNwrIJkLMkSJOE7Sqq/f8cYs/Xbk=)
3: uBdDrrOh7lGlr8QcDfUoYU2av_k.roa (hash: Cw4sLfBdvB1lBMMzs14p2jJuylUh6bwsF0YFotyYbaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:af:96:79:29:fb:d9:04:48:1b:cf:4a:e6:18:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Sep 21 10:01:18 2026 GMT
Not After : Sep 22 10:01:18 2026 GMT
Subject: CN=0a72659a2e8b437481538d67034a0b4dbd8e35aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:3e:b0:f5:6a:9b:e4:82:9f:6c:ec:0c:8e:
ff:f7:ff:5e:20:8e:1b:27:4a:47:52:74:c3:08:c7:
0e:94:f3:6b:cf:8f:f5:33:24:0f:f5:18:e0:2a:9b:
ff:df:bc:f7:db:c1:55:71:4f:57:ae:ec:5a:71:a3:
d0:d5:ef:3e:30:32:5d:cc:21:da:4d:72:b3:5f:68:
be:08:7d:4d:2c:6c:cf:55:f2:38:1d:af:e5:1c:3e:
e2:4f:5f:23:68:32:dd:af:85:b3:94:57:54:22:61:
9d:48:22:4f:9a:d6:71:08:ef:9b:5f:b3:0b:85:e4:
94:1e:01:1e:04:d9:df:6b:a7:a0:4a:3b:3b:cb:8a:
4d:a1:dc:f7:af:f0:d0:1f:16:0e:e2:98:56:10:7a:
03:8b:27:5e:bf:43:66:ff:47:c4:61:81:54:17:b4:
7c:6a:ac:fa:be:d2:5c:1e:b3:e9:93:0d:fc:30:a1:
38:ad:a1:2f:24:56:ca:02:fc:fb:f6:d0:e2:e5:71:
58:38:10:98:d4:09:9f:24:a9:e3:33:38:fc:02:74:
11:7f:33:dc:85:26:34:4e:5e:cd:90:67:e7:39:48:
d4:ac:20:ee:cd:d2:27:89:36:f7:03:84:78:61:5a:
1b:bf:19:ca:06:28:28:d0:22:39:da:26:b5:06:39:
b6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:72:65:9A:2E:8B:43:74:81:53:8D:67:03:4A:0B:4D:BD:8E:35:AA
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ca:89:d7:18:bd:43:9c:1a:49:ca:a1:21:cb:34:bf:f6:2e:
6f:bf:21:3e:a9:0d:ac:1d:fa:ca:87:44:a1:92:c1:b4:ea:a5:
55:5a:0c:ef:53:f0:73:bd:20:7d:56:88:88:aa:2a:91:35:62:
2d:43:94:8b:84:c3:91:06:3a:ae:f7:5e:5e:ac:1d:00:e6:4c:
33:23:54:b5:fd:f4:55:33:d3:b0:d3:d2:fe:de:a7:17:9a:7d:
56:b1:a9:1b:d5:65:bc:e6:e0:6e:8f:52:33:88:25:01:f9:19:
73:e4:e7:a4:e7:02:21:fe:e5:d1:31:a0:2e:13:c9:93:36:63:
87:4a:da:25:76:5f:45:49:03:a9:35:64:11:f3:61:70:51:7c:
37:c0:b6:b8:4b:d4:57:83:e2:49:19:d1:fb:32:87:48:56:65:
2a:a3:97:2d:ab:7b:47:e5:50:d7:0e:87:8c:37:57:f5:7c:89:
df:dd:6a:86:f0:88:75:d3:b9:85:ae:ec:54:06:be:53:94:77:
94:7f:f5:c1:be:bc:b4:6b:ed:3b:f0:74:ae:84:03:cf:29:e9:
e7:6a:bc:20:02:4b:ba:4c:b3:a0:b2:0a:e5:93:62:cf:29:c6:
8b:fc:0f:86:d9:46:b6:01:40:92:44:2e:d0:ff:4e:f7:f5:e7:
c6:78:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:13:22 2026 by rpki-client