Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: WM5HoWUQpTeXnKwuCshrlybK+ktcHOxxmNttU2Iyk2g=
Subject key identifier: FE:59:2D:11:88:28:04:10:1B:16:48:9E:E1:B9:94:07:CD:4B:07:E2
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 019E1D903F80A1219D5E64B2BD9A6B633816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 19:00:53 +0000
Manifest this update: Tue 12 May 2026 19:00:53 +0000
Manifest next update: Wed 13 May 2026 19:00:53 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: SsHKFVfLeFtFI+knZFgA3S6HXqyixOtUneXVvopBI+c=)
2: hZ5RcEtaRKOyRGRHHaGLm6BC8iA.roa (hash: NJb2UgVw2Dcf+y5j+m0kPKp7tmZnY9FpcgWSA4t/1bA=)
3: tcgRwXEPoiihCJhjD1oHcFIHHdY.roa (hash: efVf0hrY1TqiclV4t2y1RBBFdevRrTR3XH8aA/JQadM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:3f:80:a1:21:9d:5e:64:b2:bd:9a:6b:63:38:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: May 12 19:00:53 2026 GMT
Not After : May 13 19:00:53 2026 GMT
Subject: CN=fe592d11882804101b16489ee1b99407cd4b07e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:5a:dd:22:36:a0:a5:e5:2f:0f:0e:25:c2:
0d:23:59:b2:a3:d7:d2:f0:84:4c:3c:3f:d9:d9:62:
67:b8:2d:a2:13:07:1e:b4:4b:f8:cd:07:e9:ef:b7:
35:f4:41:ac:2c:1b:76:9e:c8:e5:79:63:5c:9d:b1:
ea:78:6b:d7:5e:69:8f:1a:b7:62:00:ac:7c:ed:84:
0e:4f:f9:90:8f:f2:cb:26:55:2f:23:85:45:e1:8a:
73:a8:7e:d4:6e:32:4e:7c:cb:e7:ac:b5:a0:8c:20:
91:91:5d:15:72:1e:e0:3a:06:ad:07:ba:fa:17:61:
af:11:38:58:91:67:d1:d6:1d:a8:92:08:00:06:a7:
1b:8f:32:36:4f:73:7e:76:a6:5d:5f:ba:05:28:46:
8f:20:ee:31:ff:a3:13:56:a9:fc:c1:4c:4b:0e:8a:
ca:29:dc:e6:4d:a8:64:98:80:b2:6c:33:e0:c9:89:
ce:be:97:c5:98:45:55:e1:37:50:ad:03:a7:b9:e5:
c8:e9:e5:b4:31:7e:43:fc:8d:67:de:6c:47:0c:78:
6b:59:0a:e8:37:16:c0:79:0a:c8:86:b9:10:97:f8:
e1:9e:94:99:d7:2c:18:ef:d8:58:58:fa:a6:71:cd:
eb:d2:98:be:90:a1:b2:ad:df:20:1e:cf:03:dc:7b:
eb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:59:2D:11:88:28:04:10:1B:16:48:9E:E1:B9:94:07:CD:4B:07:E2
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a7:5a:64:44:e6:b1:4a:e8:5a:43:cd:74:9a:5a:b5:cf:7f:
1c:ad:0d:be:b5:23:10:c4:13:60:7e:35:a9:46:81:1a:0f:98:
46:74:29:38:c8:c4:a4:4b:c3:82:0b:ee:57:6a:59:41:eb:26:
99:5b:dd:d9:b4:00:01:56:bf:75:f0:7c:ad:d6:e9:8d:c0:30:
5b:d1:f0:52:1b:c4:79:11:c2:19:de:80:0c:dd:d0:46:36:f7:
77:5f:49:6e:73:68:be:68:01:05:41:1a:36:a9:98:d1:a6:ad:
50:42:09:f5:9a:1b:74:d0:8f:19:40:1f:e8:d1:e6:df:bb:9e:
f5:fd:39:fe:2a:91:9d:62:d9:17:8a:ae:7a:24:0a:92:4b:99:
f3:fc:9e:74:94:7b:8a:c8:ff:5c:11:d1:b0:6c:ff:75:81:3e:
e3:66:84:9c:1d:ee:2c:01:bd:af:a8:52:aa:f2:f6:84:5c:27:
1e:62:20:8c:ea:ee:f2:bc:0b:7a:02:50:15:cc:11:ef:9c:82:
bc:64:02:65:86:ab:62:5c:e9:0d:d7:70:a6:ab:b7:67:bd:de:
03:e9:71:d7:60:b5:74:e1:29:66:83:13:90:e1:34:70:46:5c:
5a:16:da:55:5f:5d:c8:23:9b:bd:cb:a2:a6:24:1c:99:db:a1:
26:a8:c5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:34 2026 by rpki-client