Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: MqGWdvJntWiwVCheQ/bBNHJCnb8kx02PiZQ2pFxJ+cs=
Subject key identifier: B0:AC:DE:AE:6E:F4:ED:92:5B:93:8E:11:5D:51:73:C1:15:66:B3:FC
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 019EBFC892F60C0AC6B25899D90D1786D2D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 07:00:53 +0000
Manifest this update: Sat 13 Jun 2026 07:00:53 +0000
Manifest next update: Sun 14 Jun 2026 07:00:53 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: X4NzhDtahKYX03Ugz/opZcfWNGhNyuKGgFpOPYKtc5w=)
2: hZ5RcEtaRKOyRGRHHaGLm6BC8iA.roa (hash: NJb2UgVw2Dcf+y5j+m0kPKp7tmZnY9FpcgWSA4t/1bA=)
3: tcgRwXEPoiihCJhjD1oHcFIHHdY.roa (hash: efVf0hrY1TqiclV4t2y1RBBFdevRrTR3XH8aA/JQadM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:92:f6:0c:0a:c6:b2:58:99:d9:0d:17:86:d2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Jun 13 07:00:53 2026 GMT
Not After : Jun 14 07:00:53 2026 GMT
Subject: CN=b0acdeae6ef4ed925b938e115d5173c11566b3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:1a:58:78:2c:79:2d:a2:b9:e5:16:b4:2b:
41:d0:d4:9d:31:34:b5:fa:3e:64:5e:8f:1c:52:a1:
ec:46:59:8b:82:01:f5:7b:b6:83:35:ba:b4:1b:cc:
9d:1f:36:e8:e9:0b:1f:ce:0d:52:49:55:52:d2:b4:
0e:91:ec:2d:92:b5:f5:cf:56:7e:1a:dc:9f:7a:91:
fc:1b:5b:a3:9a:bd:11:2d:d6:4b:f3:af:58:1c:e4:
fa:1f:d8:01:27:f4:b6:06:23:74:b9:db:05:a1:f5:
d2:83:a5:96:89:ac:83:34:4b:cd:e4:f1:a6:d9:d8:
89:81:89:a1:d7:65:19:37:66:b1:67:44:06:ec:e3:
6f:27:ca:6d:31:d3:f7:07:db:1c:be:50:7d:c7:12:
c4:e7:15:39:57:8a:bb:5c:7e:d5:98:75:19:f3:e0:
49:1d:76:4d:d1:e5:e5:c6:30:ed:61:fd:ea:c6:5f:
8b:7a:22:3c:16:ba:28:a7:6a:a4:a0:00:99:a5:2c:
bd:08:84:de:fd:bc:6e:9a:b0:62:75:20:8f:20:e3:
51:19:c8:19:e5:af:77:60:53:b2:3d:40:99:69:f1:
29:06:4a:47:3a:6a:ad:2a:c0:3d:92:95:d8:82:dc:
70:0a:94:d0:cb:11:31:f1:9d:0b:38:cc:a6:71:97:
de:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AC:DE:AE:6E:F4:ED:92:5B:93:8E:11:5D:51:73:C1:15:66:B3:FC
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ac:ec:ed:f9:b3:e5:bb:7a:08:5d:6e:80:09:08:15:09:ba:
3e:39:df:98:5c:12:a2:0e:a5:28:6f:44:b9:05:d3:3e:0e:54:
ba:e0:ff:3a:64:c1:8a:bd:01:b3:82:ed:df:1e:f7:e4:99:3e:
e2:82:03:ef:69:08:53:c4:f1:84:6d:38:75:b3:9c:9f:1c:40:
c4:78:41:ed:83:5c:b5:13:51:ce:4c:0c:e8:29:77:2a:24:f7:
7e:5d:39:4b:48:36:44:5c:e2:3d:70:ac:04:06:6d:5a:d6:93:
f0:0b:8a:08:6d:e8:3a:45:37:99:b9:b5:f3:73:df:d8:fb:21:
ea:71:01:ca:13:03:2b:db:75:36:60:99:78:04:64:83:53:7e:
28:a9:be:c1:05:9a:bb:84:de:42:6d:e1:56:ef:46:1e:97:cc:
1e:97:a3:31:ed:d6:ce:dc:ab:12:ef:3c:77:0a:dc:00:25:cf:
ed:e7:c1:fd:1c:2e:9e:36:fa:2a:98:53:e0:a0:67:48:a7:6f:
f3:79:65:a7:a3:d6:c0:56:fa:10:bb:5f:26:98:24:72:ef:9f:
b1:6a:d0:2f:4b:40:e2:67:3d:71:c1:99:2a:b7:fc:b0:78:b8:
51:cc:85:b7:e8:3b:4b:8b:d0:63:98:7e:05:bb:7d:3e:f9:65:
c8:ee:cd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:48:55 2026 by rpki-client