Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: d5H9BNuFfOm6NO3IM3MIupXGIKR5mvP4Y7W9dDu2jVA=
Subject key identifier: 0D:1D:5B:37:28:E9:44:57:F9:65:9E:E3:69:41:90:9E:D4:24:8A:FA
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 01A0C96B0D60528F75F49A9FF96708854F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 1A6D
Signing time: Tue 22 Sep 2026 14:00:31 +0000
Manifest this update: Tue 22 Sep 2026 14:00:31 +0000
Manifest next update: Wed 23 Sep 2026 14:00:31 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: w/ywPg2CFwP0pEGcW98cpyZpTEAaCY4Jn+DCJ2JrF3w=)
2: hZ5RcEtaRKOyRGRHHaGLm6BC8iA.roa (hash: NJb2UgVw2Dcf+y5j+m0kPKp7tmZnY9FpcgWSA4t/1bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:0d:60:52:8f:75:f4:9a:9f:f9:67:08:85:4f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Sep 22 14:00:31 2026 GMT
Not After : Sep 23 14:00:31 2026 GMT
Subject: CN=0d1d5b3728e94457f9659ee36941909ed4248afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:83:c6:f2:ad:ca:6d:93:c1:49:05:bd:bc:71:
6e:0c:6d:68:f7:0b:01:b5:46:24:b2:3d:9e:70:6e:
47:79:34:af:e5:52:67:ce:d3:8a:69:7d:c8:32:45:
d5:dc:41:69:d2:ae:b3:9f:9a:91:aa:bc:98:8f:5c:
2d:10:c0:c6:43:ff:39:d4:63:8e:4a:5f:ce:47:d0:
68:ad:1e:e7:a6:b0:6e:1d:81:ef:19:eb:5a:71:00:
76:45:ec:8e:99:d5:76:11:47:21:ca:62:45:40:23:
54:6a:87:68:09:e9:cc:d8:9c:95:96:fa:68:a5:98:
df:f7:d0:52:ca:f0:2e:bd:e3:14:89:dd:be:d3:87:
49:fd:5d:ee:5e:eb:d3:90:26:05:4b:67:33:7d:dc:
a1:79:74:3e:2f:d2:fb:d2:f0:0b:67:68:55:8f:4b:
2c:18:93:25:ac:d4:e8:46:02:7f:95:f9:fd:e0:0c:
ef:35:94:bb:35:43:d6:8e:0f:93:7b:a8:57:c9:07:
91:c7:34:c5:b7:85:3f:3d:35:ce:ae:ea:ee:e3:73:
a8:ac:8f:21:8f:4b:b6:b9:c4:7f:ad:d9:06:3b:bc:
a5:22:b1:ed:fc:e9:7e:fb:3a:65:96:f2:bd:61:b1:
e9:c8:43:f6:f6:66:21:bb:5f:5d:12:8b:ea:32:e0:
7b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1D:5B:37:28:E9:44:57:F9:65:9E:E3:69:41:90:9E:D4:24:8A:FA
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a8:af:7d:fa:c9:69:54:6d:bf:ca:d0:9c:34:71:01:dd:34:
1e:ee:df:c8:d1:53:e1:97:0a:49:92:6b:d8:96:ee:71:8f:ee:
57:bc:ff:ae:1b:ef:2d:91:10:f6:e9:2f:54:ba:ae:e3:30:e4:
b6:fc:db:86:8d:fc:24:bc:e1:b5:de:5f:6a:71:6e:76:7f:b2:
89:4a:71:0b:6f:78:f0:a8:5c:01:3e:ac:8b:21:d9:5b:bc:95:
07:eb:f4:b1:5c:6f:22:ad:eb:01:bc:f7:f2:76:ad:65:bd:57:
63:0a:2a:a7:9a:6f:e1:7c:86:e9:4f:02:14:6b:1b:e9:65:b8:
e0:90:97:69:78:91:90:01:9f:b8:5e:eb:93:1f:3f:e3:5f:45:
a9:fd:bb:1c:65:6f:2c:46:0c:5c:af:81:7c:d4:b9:7b:3b:df:
45:a7:7b:af:a4:72:23:8b:73:ed:a2:15:d3:cf:d5:4b:d0:0f:
9e:da:d2:4f:20:64:43:6c:50:9b:d3:9f:bb:76:fc:97:f7:ee:
2a:e5:42:9a:9b:b5:76:16:7b:d6:f9:79:dc:b4:fa:f1:3e:ef:
3a:23:0e:72:04:58:44:8b:39:d8:fa:46:76:2b:33:f3:c8:e9:
82:c6:d9:cf:24:82:4a:4d:ef:20:63:d3:97:e0:4a:8c:03:34:
12:f7:8d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:02:25 2026 by rpki-client