Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
File: aspx8tn-K0nGdi89mg6L8zLf3tE.mft (raw, json)
Hash identifier: voPkeSwPokOA1sIqYFxjyCleAJn7jUj1HMB+DrqAz70=
Subject key identifier: D8:A2:ED:C2:09:D1:5F:EE:53:86:12:78:5C:40:E3:98:F4:3D:87:6A
Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
Certificate issuer: /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Certificate serial: 019CAC7DE63581FD222FB6594818849E6DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
Manifest number: 1238
Signing time: Mon 02 Mar 2026 03:00:57 +0000
Manifest this update: Mon 02 Mar 2026 03:00:57 +0000
Manifest next update: Tue 03 Mar 2026 03:00:57 +0000
Files and hashes: 1: EgV1knG2q0851YdjwI9ZnxFusW8.roa (hash: TpL3ZZSNUe8HCulV7DZciQFP376Z50w7pD7Ztv0vOQ0=)
2: aspx8tn-K0nGdi89mg6L8zLf3tE.crl (hash: NRimWKwAkzObbU7M81G1qfj1Y/crU94SkeV11JeM7GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e6:35:81:fd:22:2f:b6:59:48:18:84:9e:6d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Validity
Not Before: Mar 2 03:00:57 2026 GMT
Not After : Mar 3 03:00:57 2026 GMT
Subject: CN=d8a2edc209d15fee538612785c40e398f43d876a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:df:88:26:27:ba:38:6e:24:5a:76:f1:65:
4f:cc:63:de:7f:0f:15:24:ed:7a:a9:06:e7:bd:9e:
bf:71:0e:f6:60:53:71:1b:07:d0:4f:a7:7b:ca:a6:
68:70:53:bb:5e:a9:e0:73:34:a1:ea:97:eb:32:d5:
bf:23:8e:92:4d:1d:60:5d:49:fe:1c:c3:81:1e:4e:
f0:98:21:fc:60:a3:e7:4c:e2:0a:49:a2:f0:c5:6f:
d2:bb:81:e4:ef:69:51:2c:e5:d5:1c:75:7a:52:92:
9e:7e:4f:f4:06:5b:2f:13:e9:54:23:e7:b9:6a:9d:
e9:9b:eb:2d:5c:cf:8c:9f:dd:f3:54:d8:f2:43:9b:
77:c4:c7:44:58:82:36:85:64:fb:11:7c:2a:55:b2:
95:1b:ec:32:d0:83:00:14:cc:38:5e:69:0a:a3:19:
be:77:be:1c:dc:e6:fd:3f:d6:1c:58:98:21:70:26:
fa:1d:a1:6a:4b:57:02:c7:3c:f2:16:23:d8:5f:a6:
9c:80:85:24:60:85:87:61:9e:af:1f:bd:bd:aa:10:
28:f8:79:2f:72:d9:30:07:bf:69:65:cd:1a:20:4a:
e8:26:3b:a6:61:cb:92:7f:af:b1:6b:3d:37:45:93:
67:fb:2d:90:3e:6c:cc:09:40:05:2b:f3:48:d8:a7:
69:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A2:ED:C2:09:D1:5F:EE:53:86:12:78:5C:40:E3:98:F4:3D:87:6A
X509v3 Authority Key Identifier:
keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:48:23:58:18:1b:9d:64:6f:dd:f3:b8:2a:ad:7e:dc:4b:cd:
5f:62:03:0c:a8:2f:8f:4b:9e:8a:6f:e1:68:ad:4c:3e:97:4e:
18:30:a0:81:a1:1a:3b:af:31:1e:64:b9:0b:70:dd:76:0e:2d:
a3:a6:d8:3e:b0:b1:b4:68:82:f8:2f:3c:1c:60:57:58:a6:75:
b4:75:73:ae:1b:88:6c:3d:7c:ce:e3:3d:8a:df:10:09:99:99:
ef:38:78:63:d0:27:b6:37:ac:8a:07:c4:f0:52:1b:86:33:1e:
bc:0d:13:c5:05:98:4b:0b:a1:18:3f:a3:96:f1:f0:6e:56:bd:
b3:4d:37:2d:7b:b6:05:fc:0b:33:ea:d6:96:31:61:8f:63:89:
bd:6c:f5:b5:a9:03:c1:83:c9:75:2f:7f:a7:44:7b:f6:1f:b6:
ae:08:74:82:0b:f6:1c:83:02:36:b2:fe:3f:4c:4d:8a:49:73:
52:2d:89:b0:be:7f:25:05:7e:7f:32:6a:12:cc:85:c1:29:37:
39:63:8b:6c:b3:e7:7e:0b:7e:60:30:d2:99:44:94:1f:bb:e8:
71:97:3d:d0:b2:a5:be:19:7a:71:9b:ab:ff:bb:2f:52:8e:2d:
52:e5:38:8a:ed:9c:00:8e:7c:02:f9:36:0d:15:45:05:f7:7d:
55:09:1c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:20 2026 by rpki-client