
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File: ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier: EIwvLXtdRPwY/D2geetShpfEAf1CciIVpjQlj8OM8fs=
Subject key identifier: 13:36:64:E5:82:12:27:5F:0A:68:99:EB:3E:E6:A3:74:99:B6:8D:E9
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer: /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial: 019D9A3ED67E420F3CCE7DF64F6862F23E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number: 0F36
Signing time: Fri 17 Apr 2026 07:01:42 +0000
Manifest this update: Fri 17 Apr 2026 07:01:42 +0000
Manifest next update: Sat 18 Apr 2026 07:01:42 +0000
Files and hashes: 1: 9pE-MzpxUWjMwN57topeGGEUf_Y.roa (hash: +r9c8Shr2KLHGQZe5b0OVCErW9cr3Dze6HgtdQg6FcU=)
2: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: tK9cmIt37VcNTHWUEj+wN7+EbKtU+z4qbMCxhBclClg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:d6:7e:42:0f:3c:ce:7d:f6:4f:68:62:f2:3e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Validity
Not Before: Apr 17 07:01:42 2026 GMT
Not After : Apr 18 07:01:42 2026 GMT
Subject: CN=133664e58212275f0a6899eb3ee6a37499b68de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:af:3c:e8:17:b0:f2:df:92:6f:56:40:c3:
43:d3:fc:3d:cc:8e:5c:8c:c3:8b:ff:9d:91:48:0a:
c9:5d:89:9b:b9:66:ed:6a:7f:be:c1:3f:c2:3d:aa:
c2:00:88:b0:e5:e6:40:90:84:f3:f5:72:08:b2:e3:
c3:c3:6f:88:19:91:4c:bb:c0:59:3d:2e:5e:18:c5:
8f:45:5d:7d:b9:82:03:bd:b2:0d:07:1f:65:67:99:
7d:bf:df:9a:9f:51:54:39:74:ed:a7:31:f7:4d:57:
af:f6:89:07:64:c1:5f:b9:34:9d:df:ef:0e:f7:10:
9c:0d:05:2e:83:a8:da:5d:d6:14:39:1b:dd:e9:25:
7e:e6:8b:35:0f:2d:f4:ee:3d:66:23:d5:26:f0:01:
fa:17:91:1c:36:1e:c7:b3:67:0d:66:ca:cf:90:75:
4c:de:03:0f:7f:4b:b7:0d:c0:c9:71:59:f9:42:2c:
e6:44:d1:0e:d8:9f:f4:d6:86:a0:12:c2:04:72:14:
60:4d:95:84:be:9e:94:a6:62:8f:0e:ef:c2:44:24:
20:50:5d:af:39:8f:42:05:6d:a4:64:a2:be:3d:4e:
17:42:7a:86:bd:40:0d:d3:8c:d8:81:f0:57:47:7d:
a6:ed:22:92:29:e1:fd:97:03:5e:48:40:a0:68:f8:
a5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:36:64:E5:82:12:27:5F:0A:68:99:EB:3E:E6:A3:74:99:B6:8D:E9
X509v3 Authority Key Identifier:
keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:23:30:48:c5:93:9c:00:67:2e:64:0e:72:b5:26:0f:74:5d:
3b:d3:52:ee:86:ef:6f:1b:02:85:0e:4f:35:cc:22:65:56:08:
ce:5f:e5:1e:ba:56:4f:89:28:f2:5b:0f:b0:94:19:3c:8a:36:
6d:6c:af:79:ed:76:cc:ff:2c:52:9d:7e:09:ef:09:93:d9:46:
f2:a5:7f:9b:06:24:3c:4f:df:5e:52:27:41:a9:04:1b:09:0d:
1d:87:a7:68:01:31:d6:bc:f3:15:c1:be:35:04:6f:7b:0a:19:
d1:d5:c0:b9:c0:ce:ef:bd:e9:30:6b:5d:a8:8d:fd:62:a6:bb:
de:9b:6b:9d:a3:69:8f:92:71:1f:e7:06:46:e2:7f:38:91:12:
8b:0b:c7:cd:c2:29:48:07:a9:8d:ec:f1:2d:eb:e0:a4:1b:c7:
41:e7:7c:58:d6:6f:e8:c3:1b:6f:6f:f9:bb:03:61:29:2a:c9:
d6:a1:75:24:60:c5:0a:4c:74:05:70:5e:85:30:be:bf:46:e9:
ee:9f:8c:2f:8a:ef:44:bd:cb:ba:f2:58:8d:3d:9b:52:e8:1d:
20:d9:79:98:06:40:22:5e:9e:56:c4:93:2e:4a:7e:2b:83:4c:
a2:ff:a1:9d:df:aa:fc:b7:b5:2c:51:ea:cf:52:90:0a:57:30:
da:a5:b5:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPtZ+Qg88zn32T2hi8j4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjA1NzQ4NTJjNmJiOTIzZmNiMzgwNDI1YzRmZDNlZDVj
MGJhOTMwHhcNMjYwNDE3MDcwMTQyWhcNMjYwNDE4MDcwMTQyWjAzMTEwLwYDVQQD
EygxMzM2NjRlNTgyMTIyNzVmMGE2ODk5ZWIzZWU2YTM3NDk5YjY4ZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh6vPOgXsPLfkm9WQMND0/w9zI5c
jMOL/52RSArJXYmbuWbtan++wT/CParCAIiw5eZAkITz9XIIsuPDw2+IGZFMu8BZ
PS5eGMWPRV19uYIDvbINBx9lZ5l9v9+an1FUOXTtpzH3TVev9okHZMFfuTSd3+8O
9xCcDQUug6jaXdYUORvd6SV+5os1Dy307j1mI9Um8AH6F5EcNh7Hs2cNZsrPkHVM
3gMPf0u3DcDJcVn5QizmRNEO2J/01oagEsIEchRgTZWEvp6UpmKPDu/CRCQgUF2v
OY9CBW2kZKK+PU4XQnqGvUAN04zYgfBXR32m7SKSKeH9lwNeSECgaPilPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBM2ZOWCEidfCmiZ6z7mo3SZto3pMB8GA1UdIwQY
MBaAFAEgV0hSxruSP8s4BCXE/T7VwLqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84OTc3OWQtOWE0NC00NTc4LTg3N2Qt
ZDViMWRiZGQxYjVmLzEvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84OTc3OWQtOWE0NC00NTc4LTg3N2QtZDViMWRiZGQxYjVm
LzEvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiMwSMWT
nABnLmQOcrUmD3RdO9NS7obvbxsChQ5PNcwiZVYIzl/lHrpWT4ko8lsPsJQZPIo2
bWyvee12zP8sUp1+Ce8Jk9lG8qV/mwYkPE/fXlInQakEGwkNHYenaAEx1rzzFcG+
NQRvewoZ0dXAucDO773pMGtdqI39Yqa73ptrnaNpj5JxH+cGRuJ/OJESiwvHzcIp
SAepjezxLevgpBvHQed8WNZv6MMbb2/5uwNhKSrJ1qF1JGDFCkx0BXBehTC+v0bp
7p+ML4rvRL3LuvJYjT2bUugdINl5mAZAIl6eVsSTLkp+K4NMov+hnd+q/Le1LFHq
z1KQClcw2qW1iw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:59 2026 by rpki-client