Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: VBXm6UwV9WBNgxFQ5gwpOShyWYjw3EaVFPkGPGRNtxU=
Subject key identifier: 07:53:00:FF:73:8D:8A:50:90:F7:0B:49:31:F6:8F:00:BA:DA:59:01
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 019D98505AA965F9A354B906E34565FA118A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 18C5
Signing time: Thu 16 Apr 2026 22:01:35 +0000
Manifest this update: Thu 16 Apr 2026 22:01:35 +0000
Manifest next update: Fri 17 Apr 2026 22:01:35 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: dQDT2ldx1LMbd2MeBF6znHU9by2H4N7nY8rF0Zk8RXA=)
2: hZ5RcEtaRKOyRGRHHaGLm6BC8iA.roa (hash: NJb2UgVw2Dcf+y5j+m0kPKp7tmZnY9FpcgWSA4t/1bA=)
3: tcgRwXEPoiihCJhjD1oHcFIHHdY.roa (hash: efVf0hrY1TqiclV4t2y1RBBFdevRrTR3XH8aA/JQadM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:5a:a9:65:f9:a3:54:b9:06:e3:45:65:fa:11:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Apr 16 22:01:35 2026 GMT
Not After : Apr 17 22:01:35 2026 GMT
Subject: CN=075300ff738d8a5090f70b4931f68f00bada5901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:85:db:0f:39:e4:b6:5e:64:2a:ed:04:20:
e5:51:62:8c:61:51:26:5c:cd:35:e3:3c:09:a0:5b:
7a:1b:f1:30:4d:78:1f:41:b6:3d:bb:e9:b3:2a:b0:
6d:61:84:1a:c7:72:06:37:0a:c5:f4:7d:ac:44:51:
d6:d4:d2:5c:44:68:ab:a4:87:52:ed:fb:b3:66:af:
c3:8a:89:38:dc:6a:88:e2:70:86:db:55:84:a7:80:
a2:cb:30:42:07:de:f7:35:fe:9d:56:b5:9a:85:ad:
0b:18:48:6e:bc:99:1d:68:58:56:25:27:ae:1b:a6:
03:b6:d5:67:b3:70:8f:10:29:18:a3:b8:f8:36:1e:
33:71:af:a5:96:ce:31:e9:97:e6:b7:30:f7:7e:68:
ce:b1:28:e7:52:b7:b7:80:48:39:0e:e2:bf:23:32:
2c:05:96:ce:67:c7:97:f2:23:c3:ab:c2:f5:59:cb:
1c:fc:e7:a3:46:1b:44:1e:5e:c9:68:79:b9:a8:55:
3b:69:8a:a4:30:7b:0c:c1:0d:18:b8:6c:a9:21:f2:
78:db:e8:c3:ab:19:14:1e:7a:d7:28:95:83:9e:21:
0e:06:21:97:46:e0:28:1b:7e:7c:f4:ea:6a:ad:5d:
d8:ea:82:08:48:f1:ab:a3:15:ef:71:ec:27:95:98:
1c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:53:00:FF:73:8D:8A:50:90:F7:0B:49:31:F6:8F:00:BA:DA:59:01
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:21:e6:28:d9:1a:7f:5d:8c:dc:a5:ed:e1:8e:27:ba:68:67:
2f:9e:7b:0d:da:e3:95:14:24:13:eb:8c:1e:af:da:3c:b6:bb:
58:24:fc:f3:f2:67:a5:c1:42:f9:38:48:69:68:fe:e1:6a:a1:
9b:13:ae:65:25:59:80:1a:89:c3:27:48:2b:02:b2:55:46:f2:
4e:97:9c:a6:b3:e7:e4:65:c5:13:a8:30:55:59:59:51:63:0d:
8f:13:98:3e:e2:3a:fc:af:59:25:5c:fe:42:9e:5b:28:df:fa:
8f:d6:0d:f7:5e:51:a1:2a:0d:ca:6f:87:42:59:4a:3d:e6:7b:
04:e0:28:92:a7:46:cf:b4:fa:72:e4:b3:b9:93:3b:96:34:18:
41:71:75:15:23:f3:4a:d7:4b:9a:04:66:ab:88:92:d8:a7:f9:
ac:80:3e:41:b0:f5:49:2d:cc:09:60:39:c3:b1:43:34:68:16:
0d:c6:4b:95:f7:ab:4b:64:41:c7:75:08:4f:e4:e3:dd:1a:9d:
8e:03:7e:4c:53:1a:d9:bc:33:f6:f0:1c:66:4c:99:58:0d:36:
60:28:24:74:12:18:78:43:93:42:22:00:61:a9:ca:ce:f6:85:
32:18:ec:5e:1c:8a:3d:1e:c3:fc:d0:19:77:44:eb:fc:98:43:
57:51:43:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:54 2026 by rpki-client