Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File: ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier: 2NJxvSX7ECxM5M2m7w2kFm3KoIBq6jbSXnWF66D65K0=
Subject key identifier: EA:D8:C0:A3:22:50:9A:68:24:91:66:54:C7:FB:83:1E:EF:FD:E1:A7
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer: /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial: 019CAEA3475537D83985CA81F3D66EC7FCA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number: 0EBC
Signing time: Mon 02 Mar 2026 13:01:02 +0000
Manifest this update: Mon 02 Mar 2026 13:01:02 +0000
Manifest next update: Tue 03 Mar 2026 13:01:02 +0000
Files and hashes: 1: 9pE-MzpxUWjMwN57topeGGEUf_Y.roa (hash: +r9c8Shr2KLHGQZe5b0OVCErW9cr3Dze6HgtdQg6FcU=)
2: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: gzGVGhXe1rsmhH0yYXw06JIT4C6jr6ntMVhQqQYoEn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:47:55:37:d8:39:85:ca:81:f3:d6:6e:c7:fc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Validity
Not Before: Mar 2 13:01:02 2026 GMT
Not After : Mar 3 13:01:02 2026 GMT
Subject: CN=ead8c0a322509a6824916654c7fb831eeffde1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2c:ff:2b:2b:85:e3:b5:bb:68:64:cf:a4:df:
d9:2b:f0:96:d6:5d:b9:f6:59:f5:ef:61:ac:95:e4:
b3:97:8d:49:f1:2a:71:5c:d6:dc:a2:d9:d0:39:d1:
58:27:33:6c:da:0e:b8:c0:5b:f7:bb:11:f1:e7:e7:
cb:47:4c:96:77:c6:72:08:47:35:79:dd:e4:0f:29:
f1:91:08:dd:e0:1c:c8:a9:fd:80:ef:ea:11:31:ae:
a3:b8:e6:83:e1:69:7f:7a:8a:1d:58:9d:7e:dc:42:
e2:d4:19:09:17:30:66:9a:51:23:d6:4b:45:1c:29:
f9:d6:cb:ca:b0:38:2d:d2:d8:45:cc:30:fd:e4:59:
3a:5a:06:17:b7:45:ed:2b:22:7b:0b:61:ed:49:eb:
a7:c7:7b:0d:15:ec:35:ba:6f:b5:1a:b9:10:6b:a5:
b5:e7:4d:9e:48:8c:59:1a:3f:de:50:52:7d:ee:84:
54:56:ac:d6:6e:92:f7:2a:23:be:0a:be:b0:0c:1b:
26:a6:ff:e8:ac:7d:74:c4:10:f6:d8:50:73:11:33:
31:0f:d1:ea:3b:a7:a5:0c:a1:cd:89:bb:94:b7:67:
b4:8e:c0:41:02:d3:95:21:23:39:ab:d5:8a:84:38:
b9:4b:8a:1c:2f:22:c5:d9:1b:9f:9f:0f:74:75:8b:
00:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D8:C0:A3:22:50:9A:68:24:91:66:54:C7:FB:83:1E:EF:FD:E1:A7
X509v3 Authority Key Identifier:
keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b4:90:44:c9:97:92:d8:ac:fc:c0:32:74:ac:f4:29:39:49:
39:7e:f3:4f:75:fc:0b:e7:35:12:1a:79:75:08:25:be:ef:b8:
eb:0f:13:de:80:e9:2a:d4:b6:f4:08:ba:fc:55:b0:1d:0e:c3:
e9:9b:72:54:93:59:f3:b6:41:8a:5d:f7:b7:cd:d4:99:99:92:
f4:4c:e7:a2:43:c1:2e:8d:8c:19:cf:a3:c4:4e:7d:cd:e4:5d:
a0:cf:03:0d:b3:4e:b6:36:84:9e:af:32:71:1a:ad:8b:b7:13:
82:c1:7c:f6:57:c9:1d:06:fd:5e:ab:44:a6:b0:bf:c8:30:cd:
f8:62:48:c7:79:a6:28:15:99:f4:0b:25:f8:a7:ad:66:df:88:
1c:35:ae:4c:c4:50:b0:28:7a:d9:f7:a1:5f:d2:00:de:c7:3a:
d3:4f:23:96:e7:71:70:92:ce:73:4e:aa:fa:1e:e9:ba:48:ef:
09:ad:ea:cd:1b:2d:25:d6:c9:f6:c7:fc:1f:af:ee:4e:e3:00:
86:2d:6b:89:e4:ed:f9:7e:32:30:a1:55:05:9e:41:7a:4a:7b:
fe:a0:c6:96:67:0f:92:11:50:6a:d5:18:07:40:24:46:51:88:
8c:4b:aa:0e:89:b8:ec:ac:ef:4c:f3:cb:5f:f5:bb:99:51:e0:
3c:67:b5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:43 2026 by rpki-client