Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: 3HUgbaPVytQedtzedl/pXmhH83psLaNvArAD+rwDa2M=
Subject key identifier: 29:01:D8:02:0C:69:E8:BF:12:B9:31:4A:24:7E:A0:AA:4C:85:3C:D8
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 01A0D8DF4E364F4C70F6FEBE64104B9DF6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 1A75
Signing time: Fri 25 Sep 2026 14:01:48 +0000
Manifest this update: Fri 25 Sep 2026 14:01:48 +0000
Manifest next update: Sat 26 Sep 2026 14:01:48 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: l//HUANZhUwKgSVggnUTjLymdfcJR/ec6GxK7IwuYxo=)
2: hZ5RcEtaRKOyRGRHHaGLm6BC8iA.roa (hash: NJb2UgVw2Dcf+y5j+m0kPKp7tmZnY9FpcgWSA4t/1bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:4e:36:4f:4c:70:f6:fe:be:64:10:4b:9d:f6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Sep 25 14:01:48 2026 GMT
Not After : Sep 26 14:01:48 2026 GMT
Subject: CN=2901d8020c69e8bf12b9314a247ea0aa4c853cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:9b:d4:79:9f:48:4f:44:5c:b8:9e:f3:38:
d6:5a:ef:a4:a6:82:a0:6d:0d:ab:e8:e5:0c:74:55:
7d:b1:51:16:fb:48:5d:c6:19:fc:a7:c2:43:e0:6a:
da:57:22:d9:e9:50:ba:94:25:05:9d:fa:49:01:8e:
91:99:f1:3b:1c:4a:5a:91:7c:21:08:5f:89:4e:83:
e2:95:4e:0b:b4:da:b4:2c:6f:d3:d0:b6:e4:36:25:
94:75:13:f3:8b:e9:b3:96:3f:05:42:cf:f5:de:bd:
dd:db:8f:bd:43:56:ca:87:7b:52:9b:f7:6e:5d:17:
c1:e6:97:f5:c5:0a:12:32:8f:0f:fa:39:d9:23:7f:
91:19:dd:4a:88:87:44:31:28:95:2f:53:c8:44:90:
1f:05:07:b4:bc:f7:b4:59:69:c9:a9:a7:ae:ee:85:
88:0e:a6:c9:09:2d:dd:88:13:79:d2:aa:cd:30:2b:
b5:86:75:08:17:62:e6:09:02:07:a0:f6:b9:ce:37:
ab:28:d6:72:bd:17:30:20:30:67:57:5d:96:30:f9:
04:72:30:bd:9d:ca:81:1f:20:be:3b:00:d9:8a:73:
e7:b6:00:16:f4:6e:b1:58:6e:a9:2b:d9:20:6d:d7:
b0:7a:5a:bc:84:be:e6:05:c4:e2:a5:a2:bc:26:ea:
f4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:01:D8:02:0C:69:E8:BF:12:B9:31:4A:24:7E:A0:AA:4C:85:3C:D8
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ec:d1:0e:b3:82:b0:80:b5:7f:01:3d:37:8d:fb:5b:ab:cc:
d0:e7:a3:d3:5c:3d:41:b7:ce:57:17:17:36:17:8c:2f:0e:71:
43:f8:ca:f7:cc:c5:8d:3b:a3:63:43:97:b9:d7:bc:df:89:b2:
67:d8:f0:3a:46:37:94:f3:9e:2a:f2:57:5d:11:bd:8d:01:42:
3c:1e:7c:27:ac:8d:f9:99:a1:45:c2:1a:a8:60:f3:67:e5:49:
2d:f8:15:8d:83:9e:99:a3:b4:f2:60:1d:89:33:0f:8e:7c:d4:
fb:ae:cc:bc:11:a1:67:cf:a4:b0:7e:14:3a:f1:af:ce:52:bd:
87:37:0c:a9:19:c5:8b:85:6a:fb:fb:2d:93:0f:28:e5:ef:17:
84:c5:4c:72:d5:34:fa:45:c8:0a:ac:4a:3e:a4:7d:87:37:11:
5e:ec:d4:b6:b2:e8:8c:34:86:ef:65:af:f6:5b:81:b1:e0:e1:
f2:03:de:39:c3:04:c4:d4:50:41:4a:da:db:17:0b:ba:b9:92:
6a:7d:a9:c6:2e:23:ab:12:cd:68:17:57:58:af:39:c3:b6:3e:
48:2d:d7:e3:89:d8:b6:9c:5e:20:7f:70:1b:04:11:83:e1:0d:
32:c2:c8:2d:e3:a1:01:a3:24:1d:84:61:92:92:15:f7:f9:4f:
bc:a0:67:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:27:36 2026 by rpki-client