Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json)
Hash identifier: ZuCJSizn/NEVNXyHqGNXclqdEv4r6gS36vGkKG5GkOc=
Subject key identifier: 6C:C2:3C:4C:EA:A4:34:BF:A3:1A:0C:26:0D:B6:D3:EC:B2:C4:F0:2F
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 019D25841AE68089E237D9A4FE16F0AC1C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
Manifest number: 08BD
Signing time: Wed 25 Mar 2026 15:01:47 +0000
Manifest this update: Wed 25 Mar 2026 15:01:47 +0000
Manifest next update: Thu 26 Mar 2026 15:01:47 +0000
Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: qXT08wUQPQz9eFiPEEXqiUcNCTmsApCaI+mxQZfbvew=)
2: uBdDrrOh7lGlr8QcDfUoYU2av_k.roa (hash: Cw4sLfBdvB1lBMMzs14p2jJuylUh6bwsF0YFotyYbaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:1a:e6:80:89:e2:37:d9:a4:fe:16:f0:ac:1c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Mar 25 15:01:47 2026 GMT
Not After : Mar 26 15:01:47 2026 GMT
Subject: CN=6cc23c4ceaa434bfa31a0c260db6d3ecb2c4f02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:db:ad:48:57:5e:cc:1a:8d:68:34:46:9a:b2:
c3:d9:a4:d7:e4:b9:f3:78:42:b6:10:6d:78:9c:67:
72:02:2c:fe:ba:c9:58:9f:ff:98:a6:05:6f:a3:31:
ec:61:07:ff:0c:f9:d6:2e:92:ef:69:77:57:97:28:
f5:60:ae:04:09:2e:a7:ad:40:ab:da:59:03:12:a3:
6c:34:ef:70:18:e8:bd:35:59:78:47:53:59:8e:c7:
ac:77:41:e8:ab:c5:a3:8c:1d:aa:bb:dd:ba:00:47:
fe:db:71:ba:6e:07:98:ef:b0:17:ec:d4:e2:9b:58:
2d:06:92:35:a7:9f:a5:4f:3e:62:0a:21:14:2b:a5:
38:5a:cf:84:e1:82:bb:6a:7f:34:48:9a:c3:ef:4c:
c4:28:ff:8b:15:a8:29:71:41:1b:98:dc:d5:a6:8b:
d3:a6:0f:41:9a:42:04:ec:3e:89:5b:54:dc:43:72:
df:1f:9e:49:0f:d0:bb:73:a5:45:e6:d1:a3:0a:e5:
89:0f:95:8b:d7:37:0e:85:ec:d8:29:ea:5a:f6:bb:
98:c7:33:46:2e:bb:fc:5d:43:70:56:76:a8:49:d3:
80:b3:5d:7d:44:c3:b1:f3:4f:5c:aa:aa:b8:b7:6b:
da:26:2a:73:4d:67:b5:c7:da:30:ed:5a:d9:17:c2:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C2:3C:4C:EA:A4:34:BF:A3:1A:0C:26:0D:B6:D3:EC:B2:C4:F0:2F
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a8:1d:fd:3a:0d:82:ed:47:a1:58:86:ab:eb:67:a5:68:9d:
59:d8:e9:b3:0c:4a:6c:c4:3c:c1:bd:52:58:db:d6:6d:b0:63:
6f:86:51:11:65:c4:15:5e:57:db:f8:71:09:4e:02:87:7e:f1:
1e:5b:6b:0c:23:df:aa:32:15:00:c7:fc:b1:50:65:ae:0a:0e:
01:89:06:66:f2:e0:c4:a2:be:73:b0:3f:28:f8:21:a3:44:0c:
a7:ab:e1:d0:7c:0c:65:fc:4c:e7:59:28:88:76:47:8a:9c:08:
30:96:f9:de:ce:df:90:d6:50:9d:04:fc:a5:61:3b:0d:c5:41:
05:ea:e2:01:e3:53:fa:92:81:a6:ad:49:85:34:9f:cd:ed:cc:
9c:84:b4:b6:78:af:2a:b0:e0:ad:36:f8:41:2c:b0:11:33:88:
69:46:16:55:98:26:e7:f4:3a:97:43:f4:f9:45:a0:2f:8a:c4:
33:81:72:fc:9e:9d:7e:3c:3c:14:04:07:6c:2e:71:77:76:11:
7c:6a:18:68:cb:02:37:d2:41:1b:30:42:99:42:f3:cf:5c:2f:
7b:15:6a:b9:a8:3e:3a:55:49:67:df:9c:9e:cc:8a:bb:60:7c:
78:6d:10:bb:4d:d3:76:a1:9c:92:1c:0b:2d:e3:be:0d:3a:20:
00:57:32:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:25 2026 by rpki-client