Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: vWUgGSAzkDsFsO8Z1dmiFDnWJKSzTJazQmzK0sK/bK8=
Subject key identifier: F1:2B:C3:F2:BA:66:59:66:69:81:1E:9C:E3:7A:0C:69:52:E1:A8:1A
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 019CAAC6A6AB9ABF39DFB6D696E8CB6E01E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 19:01:11 +0000
Manifest this update: Sun 01 Mar 2026 19:01:11 +0000
Manifest next update: Mon 02 Mar 2026 19:01:11 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: qyO8pZ7mNI/s7YxQvcdg/hUU9qd4ArpwSXcXjkF9DnE=)
2: hZ5RcEtaRKOyRGRHHaGLm6BC8iA.roa (hash: NJb2UgVw2Dcf+y5j+m0kPKp7tmZnY9FpcgWSA4t/1bA=)
3: tcgRwXEPoiihCJhjD1oHcFIHHdY.roa (hash: efVf0hrY1TqiclV4t2y1RBBFdevRrTR3XH8aA/JQadM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a6:ab:9a:bf:39:df:b6:d6:96:e8:cb:6e:01:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Mar 1 19:01:11 2026 GMT
Not After : Mar 2 19:01:11 2026 GMT
Subject: CN=f12bc3f2ba66596669811e9ce37a0c6952e1a81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:01:88:a8:cd:4e:61:d2:1a:be:a1:57:e2:
ca:80:0e:41:6d:dc:41:54:bb:ea:70:d7:9e:6e:f1:
6a:f8:5f:d1:c2:c3:f7:eb:3a:f3:d9:d6:f0:4e:f7:
58:ea:ea:ca:85:1a:70:4e:4d:e2:21:41:4e:cf:4f:
ad:6b:25:8c:48:6e:3d:53:8f:91:06:ce:af:c1:3a:
3b:53:5e:2d:80:83:b7:1b:2e:5d:a8:b7:ba:c8:42:
18:36:ce:6c:b4:e2:12:28:06:34:5c:01:98:a0:7d:
68:bd:d6:95:c4:02:56:79:24:9b:08:5e:8f:fb:32:
93:c6:86:b9:64:1d:f0:d9:f8:a6:a7:fc:02:3c:a5:
ee:f3:42:ba:37:74:8d:6f:a5:a2:9f:52:bb:9f:34:
61:d0:21:a5:2a:95:bc:ec:c3:76:45:c6:12:0d:48:
4c:90:b3:83:45:38:4a:ad:b3:7c:12:3a:02:31:2c:
d2:db:c1:65:65:58:42:49:32:64:d8:85:c7:40:d4:
dc:1e:53:46:3b:97:78:ae:0c:e4:90:60:bc:9d:ba:
da:63:31:65:9b:29:34:c6:df:be:54:f2:62:23:b6:
10:64:8b:b7:b7:5e:84:0a:5a:af:21:2f:07:97:29:
4c:e6:c7:6f:95:fa:24:ec:48:28:9a:ac:69:b2:4d:
4b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2B:C3:F2:BA:66:59:66:69:81:1E:9C:E3:7A:0C:69:52:E1:A8:1A
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:30:24:3a:cb:59:a4:20:74:dc:ba:b1:10:2a:26:dc:5e:99:
a0:51:00:75:5e:a0:21:8d:e8:53:a9:9e:12:c4:30:8d:52:87:
f9:98:ca:c3:f8:6b:67:95:88:5d:b0:02:df:cb:49:4d:80:03:
86:b2:49:7b:f2:2e:7d:73:0e:23:26:f2:e9:7d:4c:95:52:8d:
a0:d5:f3:45:f0:b0:63:b2:f5:3f:89:79:18:ce:89:09:ef:b6:
d7:eb:b5:a9:77:48:db:6b:9e:48:a9:0e:be:29:ed:ee:f3:34:
ca:ca:0e:92:8f:ca:a2:76:05:de:19:87:3d:06:60:bb:4c:b4:
80:99:de:50:4e:76:a7:ca:ea:cc:b6:da:35:cb:e0:d3:e2:22:
36:54:2f:c3:62:47:f8:07:f4:d2:55:89:d7:05:85:ab:10:5b:
57:5b:b2:48:57:c7:a8:9a:37:d1:ca:fa:da:ee:f4:1d:65:14:
7f:4d:73:8e:f5:2e:ca:59:b0:83:85:46:35:4f:e8:cb:8c:6e:
af:0e:09:c8:22:4d:1e:20:0c:af:f0:3b:7a:67:f6:8a:c0:25:
fc:bf:6d:df:1d:d0:f5:bd:ac:65:e1:d8:79:82:66:fb:0f:2f:
c8:d2:77:50:cd:76:71:87:d4:d5:8a:3b:9b:dc:08:5a:de:13:
a3:8a:a0:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxqarmr8537bWlujLbgHpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyY2M2OTE0NzZhNmU3ODk1YjBlNDU2MTE2NDQ0ZjkxOTM3
YmYwMWUwHhcNMjYwMzAxMTkwMTExWhcNMjYwMzAyMTkwMTExWjAzMTEwLwYDVQQD
EyhmMTJiYzNmMmJhNjY1OTY2Njk4MTFlOWNlMzdhMGM2OTUyZTFhODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIoBiKjNTmHSGr6hV+LKgA5BbdxB
VLvqcNeebvFq+F/RwsP36zrz2dbwTvdY6urKhRpwTk3iIUFOz0+tayWMSG49U4+R
Bs6vwTo7U14tgIO3Gy5dqLe6yEIYNs5stOISKAY0XAGYoH1ovdaVxAJWeSSbCF6P
+zKTxoa5ZB3w2fimp/wCPKXu80K6N3SNb6Win1K7nzRh0CGlKpW87MN2RcYSDUhM
kLODRThKrbN8EjoCMSzS28FlZVhCSTJk2IXHQNTcHlNGO5d4rgzkkGC8nbraYzFl
myk0xt++VPJiI7YQZIu3t16EClqvIS8HlylM5sdvlfok7Egomqxpsk1L1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPErw/K6ZllmaYEenON6DGlS4agaMB8GA1UdIwQY
MBaAFALMaRR2pueJWw5FYRZET5GTe/AeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85YTY4NjAtMjI0Zi00YjM0LWE5YjYt
YmMxOTJiYjczMDI1LzEvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85YTY4NjAtMjI0Zi00YjM0LWE5YjYtYmMxOTJiYjczMDI1
LzEvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjAkOstZ
pCB03LqxECom3F6ZoFEAdV6gIY3oU6meEsQwjVKH+ZjKw/hrZ5WIXbAC38tJTYAD
hrJJe/IufXMOIyby6X1MlVKNoNXzRfCwY7L1P4l5GM6JCe+21+u1qXdI22ueSKkO
vint7vM0ysoOko/KonYF3hmHPQZgu0y0gJneUE52p8rqzLbaNcvg0+IiNlQvw2JH
+Af00lWJ1wWFqxBbV1uySFfHqJo30cr62u70HWUUf01zjvUuylmwg4VGNU/oy4xu
rw4JyCJNHiAMr/A7emf2isAl/L9t3x3Q9b2sZeHYeYJm+w8vyNJ3UM12cYfU1Yo7
m9wIWt4To4qgsQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:51 2026 by rpki-client