Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: kIDZn8UkrSbHB3AYBLaoGeB47egj4sj6ChOAnhoxWZE=
Subject key identifier: 53:22:97:5F:92:F8:3E:53:85:1E:70:2D:7F:97:28:AA:3F:F8:B7:A7
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 01A1DF8327883DA79F72BDDAF6FCD4A862C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 1AFD
Signing time: Sun 15 Nov 2026 14:01:16 +0000
Manifest this update: Sun 15 Nov 2026 14:01:16 +0000
Manifest next update: Mon 16 Nov 2026 14:01:16 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: VMt9qMehObo/8GxYTVpxsoAgHjFKuu8eLKPXZDcsOeo=)
2: hZ5RcEtaRKOyRGRHHaGLm6BC8iA.roa (hash: NJb2UgVw2Dcf+y5j+m0kPKp7tmZnY9FpcgWSA4t/1bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:27:88:3d:a7:9f:72:bd:da:f6:fc:d4:a8:62:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Nov 15 14:01:16 2026 GMT
Not After : Nov 16 14:01:16 2026 GMT
Subject: CN=5322975f92f83e53851e702d7f9728aa3ff8b7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:21:e9:37:14:f8:e0:74:30:8e:b9:90:12:
70:31:ee:95:c0:0c:31:bc:de:ad:5e:84:a3:52:3d:
41:30:8a:05:cf:6e:c9:a2:d0:d0:00:3f:3c:76:e9:
e3:70:39:2f:f1:a8:79:58:df:b3:00:ee:ae:a1:28:
5f:58:8f:47:33:29:b0:24:88:c2:cb:fc:8a:31:9b:
7a:de:23:51:4f:03:25:58:ae:24:e0:f3:5f:f3:5d:
00:01:06:28:73:50:7e:21:d0:f4:94:2a:06:31:85:
f0:fd:63:a6:f7:97:bc:bf:52:1b:7d:79:f7:15:b2:
cf:1a:a7:0a:3d:1d:9a:3e:60:ab:44:45:d9:96:aa:
6f:82:6b:82:5f:69:d3:34:be:ad:ef:6a:bf:f9:f3:
b7:42:64:79:50:ba:62:05:5e:20:80:02:7d:3a:c8:
a3:b4:b6:b9:a1:eb:74:c6:ad:4e:58:4b:ca:e7:b2:
86:24:b8:ee:83:9e:02:02:18:bf:cf:63:11:0e:bf:
f3:88:b5:7f:9c:8c:c6:94:83:d4:8e:0c:40:95:84:
b5:36:80:9f:e5:74:07:1d:91:3a:9b:c4:31:ad:22:
a8:ff:94:5c:cc:9d:62:e0:c8:c6:45:10:b7:8d:4d:
2a:81:d3:29:13:6b:d8:95:3c:c6:f7:7d:3f:71:73:
40:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:22:97:5F:92:F8:3E:53:85:1E:70:2D:7F:97:28:AA:3F:F8:B7:A7
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b5:fa:04:25:de:a9:e3:f9:41:c3:74:cf:f6:86:35:bb:8e:
fd:92:c6:5c:c5:65:cf:3c:59:cb:46:df:08:c5:ae:7f:ae:f9:
7c:15:75:38:ff:05:48:90:a7:cd:eb:e0:9a:d0:7a:80:6d:ad:
06:c4:be:22:54:d2:5f:30:13:65:f3:6f:2d:a9:f1:eb:0c:43:
34:fb:0c:3f:3d:fb:4a:c8:ae:1b:1a:a8:5c:8b:b2:54:dd:10:
15:69:72:38:6a:4d:8d:6d:89:17:c2:5a:25:48:12:bc:34:e7:
05:71:ec:94:d5:40:9d:35:55:3d:c3:ac:b4:61:a8:a7:10:ee:
54:bf:bf:45:f9:56:9f:fb:83:6a:0e:ca:a5:54:f3:5e:8d:2e:
56:b2:5f:25:47:bd:15:60:2c:35:df:db:6b:92:42:26:27:43:
ea:a6:2c:57:af:6b:bc:df:1c:93:0f:82:81:06:77:59:5e:d9:
24:51:cd:84:40:63:50:59:5f:63:9f:db:7a:f0:5d:a0:7a:a3:
00:6f:5f:08:86:90:23:fa:88:d3:30:37:14:40:a4:83:db:3b:
be:c1:9b:cc:89:b7:44:85:2b:86:c9:70:c1:8e:eb:e1:85:c5:
6e:9a:a2:bf:88:3a:68:54:17:8c:7f:f0:d6:60:1c:21:72:8a:
7b:2c:62:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:23:53 2026 by rpki-client