Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json)
Hash identifier: KeX5vtLYKRsdfUrpf0H7DpJJzJyDdnfZIK3kswC5q80=
Subject key identifier: 9C:EF:89:40:BF:A0:93:56:8E:FB:FF:8E:A1:DD:2E:39:A8:DF:D0:A5
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 01A0D4CB9EC4255D7BE92BA9B1D012F4F5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
Manifest number: 0AA6
Signing time: Thu 24 Sep 2026 19:01:49 +0000
Manifest this update: Thu 24 Sep 2026 19:01:49 +0000
Manifest next update: Fri 25 Sep 2026 19:01:49 +0000
Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: faeHv4e7kRko+poKlj+TYFOWk7BRUXxr6gIRaIyMmnU=)
2: H49G2vY2n7CqDt3v_PdU70zy7RA.roa (hash: 3w0udG08DzlOoXAgNwrIJkLMkSJOE7Sqq/f8cYs/Xbk=)
3: uBdDrrOh7lGlr8QcDfUoYU2av_k.roa (hash: Cw4sLfBdvB1lBMMzs14p2jJuylUh6bwsF0YFotyYbaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:9e:c4:25:5d:7b:e9:2b:a9:b1:d0:12:f4:f5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Sep 24 19:01:49 2026 GMT
Not After : Sep 25 19:01:49 2026 GMT
Subject: CN=9cef8940bfa093568efbff8ea1dd2e39a8dfd0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:5a:9d:a1:80:6d:f8:1a:a0:75:f2:63:08:
13:d7:4c:7c:f2:dc:51:f8:3a:b9:62:ed:19:29:7f:
fb:c6:50:c8:89:5e:b5:4e:90:41:4a:0d:5c:07:ec:
79:3a:c4:c4:fa:94:3c:ba:01:a8:52:39:c1:79:8b:
1b:12:79:7d:c5:4b:82:3d:75:6b:20:72:cf:8b:64:
38:56:69:3f:56:51:42:47:38:34:9b:52:2b:ac:4b:
16:bc:ae:8d:3a:3c:40:87:5a:82:8a:a0:f3:51:26:
b4:92:ff:84:59:62:a5:4e:56:5f:31:09:68:65:f9:
7e:1b:ce:a8:ce:10:c2:b5:34:c4:0e:87:6d:27:a3:
76:7c:b0:04:5f:b9:9e:df:73:1f:11:4b:84:d9:6c:
a2:68:a2:42:c4:bf:0d:95:e2:73:bc:68:21:09:d7:
ff:88:4c:9a:86:1f:d5:83:b8:4a:59:a0:3e:99:eb:
5b:67:9e:c8:70:e1:52:d1:91:05:a1:03:d8:88:f4:
f5:40:33:e8:5b:94:1e:ad:61:b7:ff:75:52:73:5f:
01:98:59:a7:76:18:5d:aa:c9:a7:da:56:a5:60:c0:
80:65:e2:d4:0d:8b:6d:c1:9c:cd:c9:05:67:64:1d:
f9:e4:8e:c0:05:d3:15:d0:f0:ad:ea:63:b1:9e:d6:
8e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EF:89:40:BF:A0:93:56:8E:FB:FF:8E:A1:DD:2E:39:A8:DF:D0:A5
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:09:2f:c0:40:69:b8:1b:8a:d3:a3:4d:6f:ae:6c:6e:07:32:
8f:7a:dd:90:65:bd:3e:d2:e4:2f:a6:96:d5:06:3f:19:e5:70:
9e:50:5e:0f:af:77:f1:bf:4d:85:1e:1d:fb:72:15:c5:be:06:
05:91:b9:29:43:d4:32:8d:08:c5:0e:d7:f9:96:49:36:83:69:
e9:48:a4:d3:67:ba:b5:86:23:9e:1c:c6:56:13:73:6c:57:84:
f7:43:71:d0:96:a7:99:98:0b:ae:d5:3e:db:93:b5:ce:bb:da:
39:af:3e:78:28:92:9d:b9:a0:88:7a:5f:39:7f:d5:c4:f4:a5:
82:41:d1:d4:b3:19:57:da:a9:cc:80:57:0d:bc:05:18:b2:68:
37:89:3e:f4:fb:bd:b7:a7:66:40:f9:97:a0:5c:3d:3a:22:40:
fb:56:fa:e6:5f:80:0e:1f:4d:fe:ff:fd:9b:74:8d:d3:1b:78:
e9:dd:62:63:84:e3:d5:47:7b:fa:df:ef:da:b3:09:77:63:11:
dd:14:fd:01:6e:3a:e4:e0:63:4a:e5:9d:53:2e:e5:ea:91:5d:
6a:ed:e8:79:94:98:1e:2c:c0:61:b9:45:3c:51:0d:84:6c:65:
bb:44:bf:e0:29:0e:72:86:9f:46:35:d7:48:5b:ee:70:65:ea:
87:ad:59:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:19:26 2026 by rpki-client