Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: oCdsldBT843SpmnSWQOtY55E7T4+Mg529JLHiGd9SA0=
Subject key identifier: F7:D8:F1:83:8E:1B:F3:43:A7:B7:13:31:9A:10:54:64:DD:FC:EB:18
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 019F905AB08EF7B7990E23C5F195E1463155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 19:01:30 +0000
Manifest this update: Thu 23 Jul 2026 19:01:30 +0000
Manifest next update: Fri 24 Jul 2026 19:01:30 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: up2s9WNh5m5LL3jRyIuvKHJLRV8VhItgDfHKtD5kotw=)
2: hZ5RcEtaRKOyRGRHHaGLm6BC8iA.roa (hash: NJb2UgVw2Dcf+y5j+m0kPKp7tmZnY9FpcgWSA4t/1bA=)
3: tcgRwXEPoiihCJhjD1oHcFIHHdY.roa (hash: efVf0hrY1TqiclV4t2y1RBBFdevRrTR3XH8aA/JQadM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:b0:8e:f7:b7:99:0e:23:c5:f1:95:e1:46:31:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Jul 23 19:01:30 2026 GMT
Not After : Jul 24 19:01:30 2026 GMT
Subject: CN=f7d8f1838e1bf343a7b713319a105464ddfceb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:c9:20:8f:2c:19:4f:1b:89:33:25:28:28:
b1:c0:cb:34:71:91:aa:38:e0:c1:15:79:1b:c3:1c:
9a:f0:03:7c:e7:8b:15:77:e3:be:9d:be:95:82:51:
bb:63:94:d5:4e:3e:ea:ef:03:07:ba:3c:12:a3:57:
f5:30:01:6e:80:4e:10:cb:f9:3c:44:86:a9:4c:7a:
7f:e6:f7:f7:56:47:44:ec:27:6c:06:ef:a8:fb:be:
5b:8b:96:ae:50:61:bb:83:ce:bb:33:ed:b0:17:83:
49:ed:64:da:eb:d7:8b:7f:8a:17:f3:be:c9:a4:7c:
69:2c:77:04:d8:6c:66:06:fb:d4:36:a4:bc:ac:2d:
1e:1f:2a:61:9e:e9:3e:5e:53:cc:70:9d:ea:c2:01:
2e:b2:f0:0d:f1:37:c4:99:75:dd:10:69:a3:39:2a:
2c:6a:07:b6:e3:dd:4b:c3:50:0d:9d:38:1e:69:de:
f3:55:74:70:aa:db:3f:20:29:9f:57:13:90:7a:07:
b2:4d:13:e4:09:ed:c0:9f:c1:ab:dc:bb:b2:4f:39:
b6:ea:bb:84:d1:a1:f8:f8:a2:55:80:42:0a:15:62:
c2:85:60:7b:74:08:f5:3f:44:50:2f:3f:b7:70:31:
41:9d:28:a7:bd:1b:0c:db:98:7b:06:f2:2e:dc:88:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D8:F1:83:8E:1B:F3:43:A7:B7:13:31:9A:10:54:64:DD:FC:EB:18
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f1:94:f5:05:96:86:0e:99:01:cd:2f:c8:98:9e:79:9d:d0:
b0:80:a3:7b:a2:f9:07:22:be:8b:37:9b:fc:a5:24:cb:5d:5d:
a1:e8:a7:cc:d5:3f:c6:6a:51:bc:22:5c:ba:32:98:3a:c9:7c:
ba:8b:fc:d3:ab:60:a7:fb:b7:8b:50:28:b0:5c:00:84:bc:ac:
4d:2e:f5:8b:3e:19:ed:96:5b:c1:9e:9f:6b:aa:08:03:9d:d2:
f2:ef:b4:18:c5:e2:e8:af:c1:7f:08:c1:c4:b9:43:dc:fa:96:
86:2e:7a:28:97:5d:53:1a:98:59:18:e9:72:4f:c5:e9:d8:29:
d9:cd:eb:c3:b2:86:b4:80:37:b6:40:bb:22:a3:7d:b5:9f:09:
39:7e:8d:3d:06:f1:8d:21:eb:25:15:08:b8:74:f9:24:85:2d:
8a:e2:96:b7:57:8f:08:73:75:66:13:8e:20:84:d4:36:bb:6d:
d3:47:0b:7d:0c:6f:d6:0a:45:2a:54:fd:03:27:9a:3e:a7:d8:
83:8a:62:4d:f8:40:d9:14:b2:70:db:8d:6d:c8:8c:00:f6:ae:
7d:6b:4d:b6:6b:2f:2e:d5:c4:3d:8d:f0:15:a9:b2:ea:9a:fc:
2f:ff:40:7c:7b:b9:58:53:17:dd:5e:50:74:03:d5:05:3f:bd:
f4:95:c1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:39 2026 by rpki-client