Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json)
Hash identifier: w2n46kUYWa+Yn6cCMwX77UFuNENtQ3HIen6+AslPj3Q=
Subject key identifier: 04:6C:F6:F2:C3:7E:54:F7:AB:A9:85:5B:14:F2:75:B7:A8:00:D7:78
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 019D38D3C79BDFFD27BC50B2A6E2FCA7B5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
Manifest number: 08C7
Signing time: Sun 29 Mar 2026 09:01:36 +0000
Manifest this update: Sun 29 Mar 2026 09:01:36 +0000
Manifest next update: Mon 30 Mar 2026 09:01:36 +0000
Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: ikYuF8HajFXIHsGzvYabEdSrsbTasfyCmbzpO38FhmQ=)
2: uBdDrrOh7lGlr8QcDfUoYU2av_k.roa (hash: Cw4sLfBdvB1lBMMzs14p2jJuylUh6bwsF0YFotyYbaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c7:9b:df:fd:27:bc:50:b2:a6:e2:fc:a7:b5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Mar 29 09:01:36 2026 GMT
Not After : Mar 30 09:01:36 2026 GMT
Subject: CN=046cf6f2c37e54f7aba9855b14f275b7a800d778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c1:f0:f6:48:0f:8d:1c:9e:70:ba:f5:9b:e3:
54:41:06:7d:f7:b8:5b:30:68:88:37:16:98:62:56:
a4:89:89:67:8c:95:43:af:17:07:56:0a:80:a3:a1:
ab:8a:2c:85:24:93:c2:15:44:65:95:6f:db:d3:1f:
34:dd:12:17:fc:18:a1:7b:a0:db:2f:14:ef:c8:13:
96:18:f5:32:12:96:04:37:0f:00:8c:80:a1:f3:16:
b0:e2:40:ce:97:48:34:1f:ae:81:c1:e0:31:ff:13:
f9:c6:f5:18:ab:d6:1f:f6:68:20:ef:0c:53:3d:68:
15:26:7b:47:ca:e6:4a:a1:f7:b8:ca:c7:96:38:e0:
bb:a6:68:a6:3b:eb:ac:fc:d2:fb:9f:38:f2:32:c6:
8d:f0:50:b1:44:74:c7:9d:04:8d:c8:b5:7c:11:85:
bd:e4:ae:3b:d7:7c:75:93:17:14:24:40:f5:ba:d9:
b6:51:8b:0d:ba:75:c4:ee:06:84:ad:a4:11:65:25:
c1:04:62:11:d2:9e:77:7e:11:4e:8a:50:4c:14:70:
a9:98:6e:0a:92:b9:26:76:17:f1:64:ff:3e:f8:b7:
be:67:d0:ec:af:0f:21:0f:04:52:94:96:d1:65:1d:
1a:1f:d2:b0:19:26:63:63:8f:ab:6e:a3:4f:7d:e4:
cb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6C:F6:F2:C3:7E:54:F7:AB:A9:85:5B:14:F2:75:B7:A8:00:D7:78
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:78:4d:c0:3e:f4:95:ce:58:39:9d:32:7f:36:17:6c:b9:20:
2a:87:b9:43:b7:32:f7:ea:32:c2:2b:7c:93:9c:12:53:03:2c:
ff:e1:8a:fb:73:32:d2:6c:b3:fe:8c:40:75:21:cd:8b:05:5a:
5f:84:59:14:8c:a0:80:f3:f4:c3:42:11:0c:e7:9f:54:4f:3c:
0c:4d:e3:94:69:3e:4f:b4:c0:36:38:54:db:5a:20:ec:fa:f0:
81:94:03:0b:be:03:a5:0b:37:6c:b7:db:6e:78:37:ba:db:6b:
d1:1c:ec:40:5c:6b:57:04:ef:e9:04:a8:61:96:fd:50:9f:17:
6e:80:9f:33:02:da:f0:51:94:5e:a3:a2:68:c9:08:48:e7:27:
56:09:b0:83:0f:75:03:bc:3d:75:46:36:20:34:a3:cb:fe:66:
d4:a1:ec:a8:46:47:01:27:61:e9:1e:a3:08:c9:74:b3:7c:de:
e5:f2:84:d4:ea:02:ee:1e:2d:43:74:9e:7d:d3:95:54:75:68:
97:ce:82:08:d0:21:d0:ca:3b:b1:16:e1:53:8e:79:01:e3:59:
95:3f:ad:81:28:f8:5f:82:24:85:03:d9:77:52:22:d0:9e:ca:
87:80:81:57:6a:66:37:89:6a:03:2e:14:2d:ca:c6:29:67:2f:
3f:ad:d7:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0408eb3/0nvFCypuL8p7WyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzk0ODA0Y2ZjYzdlZjI1OGQ0NmZjMzI0YzE2NzY0NDc2
MDNlZjYwHhcNMjYwMzI5MDkwMTM2WhcNMjYwMzMwMDkwMTM2WjAzMTEwLwYDVQQD
EygwNDZjZjZmMmMzN2U1NGY3YWJhOTg1NWIxNGYyNzViN2E4MDBkNzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88Hw9kgPjRyecLr1m+NUQQZ997hb
MGiINxaYYlakiYlnjJVDrxcHVgqAo6GriiyFJJPCFURllW/b0x803RIX/Bihe6Db
LxTvyBOWGPUyEpYENw8AjICh8xaw4kDOl0g0H66BweAx/xP5xvUYq9Yf9mgg7wxT
PWgVJntHyuZKofe4yseWOOC7pmimO+us/NL7nzjyMsaN8FCxRHTHnQSNyLV8EYW9
5K4713x1kxcUJED1utm2UYsNunXE7gaEraQRZSXBBGIR0p53fhFOilBMFHCpmG4K
krkmdhfxZP8++Le+Z9Dsrw8hDwRSlJbRZR0aH9KwGSZjY4+rbqNPfeTLSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARs9vLDflT3q6mFWxTydbeoANd4MB8GA1UdIwQY
MBaAFALJSATPzH7yWNRvwyTBZ2RHYD72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMt
MjU5YmU5ZmJjMWYxLzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMtMjU5YmU5ZmJjMWYx
LzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHhNwD70
lc5YOZ0yfzYXbLkgKoe5Q7cy9+oywit8k5wSUwMs/+GK+3My0myz/oxAdSHNiwVa
X4RZFIyggPP0w0IRDOefVE88DE3jlGk+T7TANjhU21og7PrwgZQDC74DpQs3bLfb
bng3uttr0RzsQFxrVwTv6QSoYZb9UJ8XboCfMwLa8FGUXqOiaMkISOcnVgmwgw91
A7w9dUY2IDSjy/5m1KHsqEZHASdh6R6jCMl0s3ze5fKE1OoC7h4tQ3SefdOVVHVo
l86CCNAh0Mo7sRbhU455AeNZlT+tgSj4X4IkhQPZd1Ii0J7Kh4CBV2pmN4lqAy4U
LcrGKWcvP63X0Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:59 2026 by rpki-client