Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json)
Hash identifier: tvixDEv+QFNQWUGQi8ZyfFspXFGNeZYmCm7r5eaHwl8=
Subject key identifier: A8:66:87:B1:9A:FB:EE:A1:90:84:47:99:44:DE:4A:BD:2D:17:2E:57
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 019FA97579C401F0B27F55925D9708F4AB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
Manifest number: 0A0B
Signing time: Tue 28 Jul 2026 16:01:16 +0000
Manifest this update: Tue 28 Jul 2026 16:01:16 +0000
Manifest next update: Wed 29 Jul 2026 16:01:16 +0000
Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: qCD+FeynnrvZQW+nhK4SPBaN29qM0zO1dipG9FsKo3k=)
2: H49G2vY2n7CqDt3v_PdU70zy7RA.roa (hash: 3w0udG08DzlOoXAgNwrIJkLMkSJOE7Sqq/f8cYs/Xbk=)
3: uBdDrrOh7lGlr8QcDfUoYU2av_k.roa (hash: Cw4sLfBdvB1lBMMzs14p2jJuylUh6bwsF0YFotyYbaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:79:c4:01:f0:b2:7f:55:92:5d:97:08:f4:ab:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Jul 28 16:01:16 2026 GMT
Not After : Jul 29 16:01:16 2026 GMT
Subject: CN=a86687b19afbeea19084479944de4abd2d172e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:27:b0:a1:d2:44:37:89:c1:ca:86:97:aa:b6:
08:9e:5a:95:0b:d3:a8:60:84:fd:c6:e3:96:bf:2d:
66:66:1f:36:d3:ac:50:67:74:f6:34:10:fe:45:a1:
74:6b:7f:16:a3:cf:b8:03:a6:cf:de:3a:c5:83:78:
96:29:a6:69:af:50:d2:c1:96:6a:cb:ef:38:7f:43:
9f:cc:a8:4f:5a:a6:5e:eb:b9:b5:2d:a0:bf:e4:71:
8b:b6:84:36:2e:43:f1:7d:a0:21:f0:1c:e9:90:69:
09:ab:5f:1f:28:38:cf:1b:14:81:e0:34:8e:11:30:
d5:9c:8e:55:2c:cd:4f:f0:09:26:c0:7f:ad:15:7d:
2f:de:21:4c:2a:35:ac:63:40:e0:52:75:42:dc:24:
c5:8a:43:18:08:ff:c9:3e:20:2e:38:95:87:4e:21:
f7:02:e6:be:3a:cc:8b:05:39:c1:34:fb:a2:65:27:
15:49:0f:52:c1:65:cb:45:c2:7a:de:07:e1:88:b5:
38:44:7e:57:f7:a9:83:44:66:8c:51:4a:97:a9:bd:
4b:4c:87:e5:e7:28:4c:26:3e:ee:79:f9:78:04:09:
25:94:98:81:db:ca:78:3d:11:1d:4a:4c:87:d4:2f:
76:48:36:0f:d2:37:20:da:44:07:06:a3:79:91:dd:
a9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:66:87:B1:9A:FB:EE:A1:90:84:47:99:44:DE:4A:BD:2D:17:2E:57
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ab:ee:2f:83:1c:74:ad:3f:b0:12:18:49:56:d8:1a:c8:ff:
98:b3:78:00:ef:2a:5e:99:8f:47:4c:db:68:db:59:03:d2:89:
ae:a3:a9:80:36:cc:e2:0b:ce:c8:f8:7c:d4:3a:41:bb:71:d8:
f9:42:1e:c0:3b:f7:df:12:9f:a2:17:8c:8f:57:0b:8b:73:e5:
ef:53:c6:10:d8:81:86:d3:39:1c:20:ed:ed:43:ae:de:d7:71:
b8:04:57:43:a5:a1:a7:00:16:cf:3d:7a:67:fe:13:9a:5d:ed:
83:c6:1d:b6:9a:4a:a7:0d:8d:f6:e5:ea:df:6b:fa:80:d4:ff:
c4:5e:73:09:fe:4d:40:75:58:77:a0:51:cb:ee:21:72:da:79:
71:db:bc:22:1f:a3:54:c9:4f:89:e9:78:59:ff:44:27:22:31:
f2:84:db:d4:b6:9a:6e:e3:56:7c:12:0c:f8:12:c1:21:73:8e:
09:89:21:a1:d1:89:66:91:14:08:c7:a0:ae:78:7f:c5:f9:29:
e1:38:3f:cb:e9:25:24:69:26:bd:f7:53:ae:12:e5:69:dd:10:
76:06:76:31:f1:d2:18:a3:02:f1:1f:52:52:2b:ff:77:07:18:
39:0c:9c:ae:77:ac:ea:b6:f4:f4:f7:ec:83:20:64:b0:3f:1a:
ce:4c:a7:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdXnEAfCyf1WSXZcI9Kt7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzk0ODA0Y2ZjYzdlZjI1OGQ0NmZjMzI0YzE2NzY0NDc2
MDNlZjYwHhcNMjYwNzI4MTYwMTE2WhcNMjYwNzI5MTYwMTE2WjAzMTEwLwYDVQQD
EyhhODY2ODdiMTlhZmJlZWExOTA4NDQ3OTk0NGRlNGFiZDJkMTcyZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCewodJEN4nByoaXqrYInlqVC9Oo
YIT9xuOWvy1mZh8206xQZ3T2NBD+RaF0a38Wo8+4A6bP3jrFg3iWKaZpr1DSwZZq
y+84f0OfzKhPWqZe67m1LaC/5HGLtoQ2LkPxfaAh8BzpkGkJq18fKDjPGxSB4DSO
ETDVnI5VLM1P8AkmwH+tFX0v3iFMKjWsY0DgUnVC3CTFikMYCP/JPiAuOJWHTiH3
Aua+OsyLBTnBNPuiZScVSQ9SwWXLRcJ63gfhiLU4RH5X96mDRGaMUUqXqb1LTIfl
5yhMJj7uefl4BAkllJiB28p4PREdSkyH1C92SDYP0jcg2kQHBqN5kd2puQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhmh7Ga++6hkIRHmUTeSr0tFy5XMB8GA1UdIwQY
MBaAFALJSATPzH7yWNRvwyTBZ2RHYD72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMt
MjU5YmU5ZmJjMWYxLzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMtMjU5YmU5ZmJjMWYx
LzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALavuL4Mc
dK0/sBIYSVbYGsj/mLN4AO8qXpmPR0zbaNtZA9KJrqOpgDbM4gvOyPh81DpBu3HY
+UIewDv33xKfoheMj1cLi3Pl71PGENiBhtM5HCDt7UOu3tdxuARXQ6WhpwAWzz16
Z/4Tml3tg8YdtppKpw2N9uXq32v6gNT/xF5zCf5NQHVYd6BRy+4hctp5cdu8Ih+j
VMlPiel4Wf9EJyIx8oTb1LaabuNWfBIM+BLBIXOOCYkhodGJZpEUCMegrnh/xfkp
4Tg/y+klJGkmvfdTrhLlad0QdgZ2MfHSGKMC8R9SUiv/dwcYOQycrnes6rb09Pfs
gyBksD8azkynog==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:50 2026 by rpki-client