Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
File: aspx8tn-K0nGdi89mg6L8zLf3tE.mft (raw, json)
Hash identifier: KjiICLOu22y2ojt01ZG7VOenXrsfjSUFv0RZ+7K53jA=
Subject key identifier: F0:F4:A9:3E:B9:AD:59:B4:00:45:38:86:0E:D4:17:C0:A1:79:69:E1
Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
Certificate issuer: /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Certificate serial: 019D9A06AFF2DF38366ECC652E607373D6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
Manifest number: 12B3
Signing time: Fri 17 Apr 2026 06:00:22 +0000
Manifest this update: Fri 17 Apr 2026 06:00:22 +0000
Manifest next update: Sat 18 Apr 2026 06:00:22 +0000
Files and hashes: 1: EgV1knG2q0851YdjwI9ZnxFusW8.roa (hash: TpL3ZZSNUe8HCulV7DZciQFP376Z50w7pD7Ztv0vOQ0=)
2: aspx8tn-K0nGdi89mg6L8zLf3tE.crl (hash: sf8qAyr1rNUMV7mQyR9yZ7hEcXE6QRMtYc0wgyr4MYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:af:f2:df:38:36:6e:cc:65:2e:60:73:73:d6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Validity
Not Before: Apr 17 06:00:22 2026 GMT
Not After : Apr 18 06:00:22 2026 GMT
Subject: CN=f0f4a93eb9ad59b4004538860ed417c0a17969e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:71:5c:64:78:17:b0:ed:65:cd:70:f9:d1:
81:9b:90:e9:ab:ce:4d:db:3f:02:5e:0e:d0:a4:09:
f5:7b:e9:bb:55:ad:bd:e1:89:df:22:ef:4b:1c:f1:
ee:fa:b9:a2:b2:de:8f:ff:27:28:95:e8:9c:bf:26:
86:3e:b3:90:f4:f4:b8:e7:ae:61:10:9e:83:16:41:
77:04:48:43:bc:c0:36:ff:44:18:17:66:ff:55:62:
1e:4f:c4:5e:8e:cb:75:c3:4b:23:24:05:0d:13:22:
3c:52:e4:2a:f4:73:fa:1d:99:58:ae:59:74:ef:ea:
a1:1b:38:f5:da:81:57:79:96:54:86:ac:be:4c:f3:
fb:f4:ee:15:b2:19:9d:52:5c:f9:88:d3:16:0e:41:
c2:3c:43:a9:38:a8:d5:1f:34:16:0b:aa:07:37:74:
89:44:d1:96:04:fa:2d:9b:60:29:6a:57:2b:85:2a:
e8:dd:4e:a7:8d:1b:5e:6f:0f:9d:6b:f9:37:a7:0b:
cb:ce:00:f8:a9:a3:f2:14:d2:db:91:d2:39:30:81:
1a:ac:96:3b:3b:00:6a:6b:17:ed:c3:7f:fc:18:01:
22:2d:56:fd:1d:5a:cf:c9:c7:d6:1b:06:4b:63:d0:
f1:17:b7:3f:79:a9:27:57:05:3a:6e:68:61:c9:49:
c5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F4:A9:3E:B9:AD:59:B4:00:45:38:86:0E:D4:17:C0:A1:79:69:E1
X509v3 Authority Key Identifier:
keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:db:d2:bc:45:76:a6:bd:1b:f9:3d:f0:dc:a2:1f:fa:20:2f:
0f:c1:35:a5:1a:f6:7c:61:67:64:41:2c:07:8c:b5:df:19:a4:
2c:82:4f:69:66:d4:5a:2c:80:57:78:d6:78:8f:33:2d:19:47:
21:f3:a9:33:ed:75:cd:7e:3f:c5:2f:23:18:63:ca:b9:51:45:
39:60:ae:17:29:be:3c:a0:80:15:f3:6e:53:e5:06:10:ef:b4:
bb:77:36:9e:40:7d:f3:64:4c:93:27:80:84:70:fe:5f:4d:20:
49:fa:e5:78:43:b0:7f:06:c8:5b:c2:1f:98:cd:3b:ce:74:15:
f9:8a:b7:5a:4f:36:de:95:a3:5a:90:43:a6:5b:5c:e2:7e:ab:
28:76:05:d9:9c:1c:83:8e:32:1d:5f:dc:62:49:bd:a5:28:1a:
a1:82:db:ec:23:d7:e6:4d:92:b1:ab:44:31:25:b6:b4:82:20:
a4:6f:60:22:56:de:58:23:9b:4d:ac:f8:26:52:b4:27:20:29:
63:e8:64:43:52:b6:f3:a0:cf:a6:5c:7f:da:cc:4c:5b:17:84:
48:22:74:1e:42:88:f8:29:6c:46:61:e2:90:c2:41:08:2c:5d:
41:3b:2f:7b:eb:35:27:73:f2:95:0d:fb:57:12:ba:8b:47:2e:
96:f3:70:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBq/y3zg2bsxlLmBzc9bpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhY2E3MWYyZDlmZTJiNDljNjc2MmYzZDlhMGU4YmYzMzJk
ZmRlZDEwHhcNMjYwNDE3MDYwMDIyWhcNMjYwNDE4MDYwMDIyWjAzMTEwLwYDVQQD
EyhmMGY0YTkzZWI5YWQ1OWI0MDA0NTM4ODYwZWQ0MTdjMGExNzk2OWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG1xXGR4F7DtZc1w+dGBm5Dpq85N
2z8CXg7QpAn1e+m7Va294YnfIu9LHPHu+rmist6P/ycoleicvyaGPrOQ9PS4565h
EJ6DFkF3BEhDvMA2/0QYF2b/VWIeT8Rejst1w0sjJAUNEyI8UuQq9HP6HZlYrll0
7+qhGzj12oFXeZZUhqy+TPP79O4VshmdUlz5iNMWDkHCPEOpOKjVHzQWC6oHN3SJ
RNGWBPotm2ApalcrhSro3U6njRtebw+da/k3pwvLzgD4qaPyFNLbkdI5MIEarJY7
OwBqaxftw3/8GAEiLVb9HVrPycfWGwZLY9DxF7c/eaknVwU6bmhhyUnFdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPD0qT65rVm0AEU4hg7UF8CheWnhMB8GA1UdIwQY
MBaAFGrKcfLZ/itJxnYvPZoOi/My397RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXNweDh0bi1LMG5HZGk4OW1nNkw4ekxmM3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8xYjAyODktMzFmZi00MzFmLTk0ODkt
OWE4ZDJiZjAwMzIwLzEvYXNweDh0bi1LMG5HZGk4OW1nNkw4ekxmM3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8xYjAyODktMzFmZi00MzFmLTk0ODktOWE4ZDJiZjAwMzIw
LzEvYXNweDh0bi1LMG5HZGk4OW1nNkw4ekxmM3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9vSvEV2
pr0b+T3w3KIf+iAvD8E1pRr2fGFnZEEsB4y13xmkLIJPaWbUWiyAV3jWeI8zLRlH
IfOpM+11zX4/xS8jGGPKuVFFOWCuFym+PKCAFfNuU+UGEO+0u3c2nkB982RMkyeA
hHD+X00gSfrleEOwfwbIW8IfmM07znQV+Yq3Wk823pWjWpBDpltc4n6rKHYF2Zwc
g44yHV/cYkm9pSgaoYLb7CPX5k2SsatEMSW2tIIgpG9gIlbeWCObTaz4JlK0JyAp
Y+hkQ1K286DPplx/2sxMWxeESCJ0HkKI+ClsRmHikMJBCCxdQTsve+s1J3PylQ37
VxK6i0culvNwJQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:58 2026 by rpki-client