Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/AsuO-6_rIeMi11P9cjYghkhPkps.mft
File: AsuO-6_rIeMi11P9cjYghkhPkps.mft (raw, json)
Hash identifier: qrg+5DQjhLk+DtRZGklr820ZTsz+3J6zlagAAyu8+ic=
Subject key identifier: 1B:58:B6:86:8F:F5:B8:79:6B:ED:26:AC:56:9D:54:2B:26:5C:0B:7A
Authority key identifier: 02:CB:8E:FB:AF:EB:21:E3:22:D7:53:FD:72:36:20:86:48:4F:92:9B
Certificate issuer: /CN=02cb8efbafeb21e322d753fd72362086484f929b
Certificate serial: 01A0D727BC24A3E78EC15D557407CED5AF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsuO-6_rIeMi11P9cjYghkhPkps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/AsuO-6_rIeMi11P9cjYghkhPkps.mft
Manifest number: 2E
Signing time: Fri 25 Sep 2026 06:01:40 +0000
Manifest this update: Fri 25 Sep 2026 06:01:40 +0000
Manifest next update: Sat 26 Sep 2026 06:01:40 +0000
Files and hashes: 1: 2u60Uo74AxJ11UUuctV2OGQc0ZE.roa (hash: Vit2+XrBImMYaenWXBqa8hfnQViB75dhJdFUDZSO/+s=)
2: AsuO-6_rIeMi11P9cjYghkhPkps.crl (hash: hCXQs43CTu6AsKEHBbndTbM0YufVN9gvIm3O08K4jmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/AsuO-6_rIeMi11P9cjYghkhPkps.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/AsuO-6_rIeMi11P9cjYghkhPkps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsuO-6_rIeMi11P9cjYghkhPkps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:bc:24:a3:e7:8e:c1:5d:55:74:07:ce:d5:af:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cb8efbafeb21e322d753fd72362086484f929b
Validity
Not Before: Sep 25 06:01:40 2026 GMT
Not After : Sep 26 06:01:40 2026 GMT
Subject: CN=1b58b6868ff5b8796bed26ac569d542b265c0b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:8f:28:57:ad:ee:c3:f7:6f:00:c2:88:4a:
87:fc:61:f9:a1:ec:da:f1:e7:01:2a:c3:e5:90:ae:
5f:14:4c:2b:54:96:65:e0:78:3e:e4:56:8a:d5:9e:
56:ef:50:0b:e9:67:a0:26:af:fe:82:75:1b:58:34:
03:09:e5:a5:51:47:d8:7f:53:c4:c9:f6:db:2a:8e:
33:0c:62:65:31:2d:e4:fe:3e:b1:66:43:e5:10:78:
70:98:2d:87:54:ab:4d:61:1c:ba:3a:19:40:15:e3:
10:a7:9f:87:c1:11:35:02:87:38:31:74:34:45:e2:
ab:6e:41:b3:db:2b:fd:ed:df:ca:9b:93:de:58:ea:
db:e9:90:7d:36:0b:6b:03:c4:4b:a8:90:63:e9:e1:
21:2f:d0:c9:3f:63:d0:4b:79:38:b4:24:7c:b2:58:
5c:9b:ba:ad:86:50:63:98:e9:ff:55:68:eb:f9:fa:
5e:43:5e:34:2c:28:38:a1:6a:95:56:a1:a1:c3:9d:
5e:76:52:13:f2:7e:0c:4c:58:9f:81:7a:07:ac:0f:
64:e5:44:59:5c:8d:d4:3f:f1:c3:b1:e2:e3:41:fe:
1b:58:13:4f:06:3e:98:21:3d:99:15:9a:03:ba:51:
b3:47:56:7a:58:3d:f8:d3:7f:42:e8:e4:a2:cd:2a:
05:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:58:B6:86:8F:F5:B8:79:6B:ED:26:AC:56:9D:54:2B:26:5C:0B:7A
X509v3 Authority Key Identifier:
keyid:02:CB:8E:FB:AF:EB:21:E3:22:D7:53:FD:72:36:20:86:48:4F:92:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsuO-6_rIeMi11P9cjYghkhPkps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/AsuO-6_rIeMi11P9cjYghkhPkps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f523ca-82dd-4b6d-ace2-fedc85284c8b/1/AsuO-6_rIeMi11P9cjYghkhPkps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:32:ea:dc:58:a0:9b:d2:a9:21:82:63:ad:6c:7d:b5:57:e4:
da:22:f0:fc:71:51:82:82:bf:1f:33:a6:6c:8a:c0:34:75:c4:
fd:ed:94:6f:89:75:63:8a:51:84:f8:c1:9d:e0:4b:23:ff:64:
fb:d8:f0:7c:9f:71:03:50:fe:86:e6:06:7e:cb:7e:ca:ec:b6:
9b:b3:4f:d1:d8:0d:67:f0:6a:9c:92:f7:b2:21:22:36:57:d9:
b9:0b:2d:51:38:13:3b:81:78:f1:3a:81:33:31:cb:68:4f:70:
9a:ff:f3:f6:ce:df:17:7d:c0:5a:67:5d:bf:7b:7a:23:90:a2:
53:eb:55:0f:5f:ca:d8:f4:37:37:c4:90:0d:4f:4d:ab:c2:27:
6b:06:10:c9:84:c2:46:91:c4:55:d6:08:05:ca:16:41:47:db:
00:ed:2b:f0:cb:d3:7e:f3:de:92:b6:18:16:a3:19:67:f3:3c:
b1:39:bb:1e:1f:db:64:1b:2a:45:bd:c0:ea:eb:98:90:a9:89:
4d:de:20:58:11:a1:5f:c8:c3:8d:7a:c3:df:96:3c:6b:6c:39:
bf:ac:0e:33:77:76:71:21:b8:95:0d:aa:59:ba:1e:24:4e:94:
73:b9:b1:33:59:12:fa:ca:fe:f4:28:58:ec:76:f7:a7:92:48:
4c:42:61:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:07:29 2026 by rpki-client