Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: Ywzk2IYLyHYreVLVtSE2c6el7FpI8Izdpf47X29XVrA=
Subject key identifier: 3D:A6:CE:70:FB:0F:11:00:4F:C1:F0:78:B5:44:8E:A6:6A:14:27:6E
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 019FA9755ED2648D282DC92DEE5CF33265A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 16:01:09 +0000
Manifest this update: Tue 28 Jul 2026 16:01:09 +0000
Manifest next update: Wed 29 Jul 2026 16:01:09 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: nYZgnWy19kFrl2Z6r9Q/BQ2MamDLaYhcdwnX6PxzBIs=)
2: hZ5RcEtaRKOyRGRHHaGLm6BC8iA.roa (hash: NJb2UgVw2Dcf+y5j+m0kPKp7tmZnY9FpcgWSA4t/1bA=)
3: tcgRwXEPoiihCJhjD1oHcFIHHdY.roa (hash: efVf0hrY1TqiclV4t2y1RBBFdevRrTR3XH8aA/JQadM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:5e:d2:64:8d:28:2d:c9:2d:ee:5c:f3:32:65:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Jul 28 16:01:09 2026 GMT
Not After : Jul 29 16:01:09 2026 GMT
Subject: CN=3da6ce70fb0f11004fc1f078b5448ea66a14276e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:72:18:d9:aa:30:6f:5d:9c:a9:eb:08:84:
9b:3a:66:ed:2f:28:db:fa:0c:50:65:bf:d3:4a:3f:
4c:42:6e:c7:1f:2c:87:45:e4:f0:6b:cf:57:28:16:
19:24:de:c1:2d:25:4a:a3:8f:95:88:42:4b:49:5a:
0c:e9:83:6f:5c:30:10:3a:76:3f:7c:3c:61:50:0d:
ac:d0:41:b5:dc:bf:1a:6b:56:a6:d9:05:e5:a6:30:
89:ca:5e:53:0d:93:02:71:12:73:63:fa:77:1e:1d:
af:c8:95:ad:72:4d:ce:05:fd:2d:cb:cc:f5:75:d2:
1d:c8:93:ed:bc:17:9f:da:85:df:1b:8e:85:72:bc:
52:3d:86:b6:fc:a7:73:09:26:3c:e0:fb:fd:5a:6d:
2e:9c:3e:a3:9d:3b:da:23:84:9d:0e:5d:bd:18:ea:
47:29:3c:9b:ee:90:6a:e5:e6:71:c4:26:3d:0a:35:
61:98:b6:7c:09:ec:e1:f2:dd:c0:f8:c5:21:c5:88:
17:65:ac:6f:83:0f:43:68:c3:99:8f:ca:c4:1f:11:
e6:26:82:57:3b:eb:95:66:c7:0d:b9:1e:25:97:68:
af:2d:d6:46:28:d9:53:01:95:d7:b6:86:c7:69:44:
7a:80:7a:2a:7a:24:c0:3c:b4:2e:c7:69:c1:c9:92:
69:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A6:CE:70:FB:0F:11:00:4F:C1:F0:78:B5:44:8E:A6:6A:14:27:6E
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:54:a3:50:d6:4c:43:c5:ca:42:45:81:9c:b2:28:7c:0a:51:
79:07:52:a0:65:b6:6b:02:64:62:a5:70:be:01:bd:cf:4a:6e:
1f:24:47:92:d4:12:02:a5:ad:de:5b:cc:f6:39:66:8e:8d:51:
b8:8e:82:52:b7:f6:12:3a:8c:ba:bc:d6:19:c4:19:40:4f:5e:
a2:02:3d:de:e8:69:2a:63:ee:ba:2d:38:43:18:98:42:7d:6c:
bf:95:cf:1f:9e:76:a5:36:9b:dc:70:22:14:19:f0:26:9b:39:
19:68:f6:00:b3:19:b2:50:1a:82:ec:26:3b:e6:d2:67:79:cf:
c1:f8:7e:e7:f1:24:df:b9:bc:2c:ba:a3:9e:c2:4c:81:1f:3e:
be:ed:c8:f4:ce:84:b1:2c:01:2b:93:1c:01:77:12:8d:26:3d:
c9:fe:95:8c:cf:a4:e2:3a:bc:8c:65:5a:9f:4e:09:e4:05:c6:
62:f2:5e:0b:1f:44:90:ec:a0:40:8b:81:5d:b0:56:2a:18:da:
95:12:c0:e9:72:46:73:ba:c2:85:dc:dc:2c:7f:23:7b:28:78:
8f:96:5e:bc:31:f7:68:18:e7:8b:51:3d:40:58:62:18:34:2a:
5a:1e:45:ec:57:5e:00:3d:96:10:50:e7:8a:a9:44:4a:86:89:
8b:7d:7a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:10 2026 by rpki-client