Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json)
Hash identifier: xYsOigiD0bjAXAhaaaBZ8GznXSqTJ82qP03bHYBBUaI=
Subject key identifier: ED:AE:C9:A4:6F:C9:D9:0F:66:64:9B:24:B1:7C:13:32:8E:98:59:B9
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 01A129C4165B2E1609A4C9CA47D4CCCA2D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
Manifest number: 0AD2
Signing time: Sun 11 Oct 2026 07:01:18 +0000
Manifest this update: Sun 11 Oct 2026 07:01:18 +0000
Manifest next update: Mon 12 Oct 2026 07:01:18 +0000
Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: RN9P/VyvM7RqvgufqvSk+0IvLCmi1LuQAiiSsH4ylbE=)
2: H49G2vY2n7CqDt3v_PdU70zy7RA.roa (hash: 3w0udG08DzlOoXAgNwrIJkLMkSJOE7Sqq/f8cYs/Xbk=)
3: uBdDrrOh7lGlr8QcDfUoYU2av_k.roa (hash: Cw4sLfBdvB1lBMMzs14p2jJuylUh6bwsF0YFotyYbaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:c4:16:5b:2e:16:09:a4:c9:ca:47:d4:cc:ca:2d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Oct 11 07:01:18 2026 GMT
Not After : Oct 12 07:01:18 2026 GMT
Subject: CN=edaec9a46fc9d90f66649b24b17c13328e9859b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c3:1c:f2:13:ad:1b:89:95:b9:7b:9c:06:0a:
4b:ac:a7:21:70:16:d3:04:c1:0d:3d:19:af:82:90:
7d:2e:36:45:08:c0:25:45:4a:80:a9:96:be:f8:5a:
0f:a4:79:6f:40:4b:4e:84:f4:80:e3:66:01:22:fc:
28:ab:a9:dc:ec:d1:61:91:11:df:07:6b:73:52:12:
c9:c6:7f:7b:ad:1b:e3:bc:3f:b1:db:58:5c:06:b4:
12:31:b9:18:3c:e9:6c:84:b0:75:f4:4a:ea:aa:af:
63:f6:23:f8:40:ef:56:2b:22:00:b8:03:98:67:47:
12:15:75:7c:1f:e3:fc:b9:3e:e5:3d:bf:4a:5c:bc:
f1:01:03:b3:f5:d7:32:99:0b:74:dd:82:eb:c3:d4:
c8:81:30:03:c1:25:f0:f3:50:97:da:e9:8e:5d:46:
0d:23:c2:25:90:5f:4a:5c:6a:70:0c:06:72:7d:13:
29:2d:60:00:e8:41:cf:52:c8:22:ad:6f:c6:8e:68:
7a:82:7f:ff:8b:d5:7d:d4:99:8b:1b:33:04:11:2c:
64:ca:ca:3e:2f:3a:2d:d6:d0:0e:cf:ab:b9:cf:29:
9a:30:15:3d:ea:86:89:03:1d:83:3f:d9:aa:98:f0:
a2:2e:10:72:a9:ca:7c:60:a8:cf:54:f3:45:35:42:
ea:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AE:C9:A4:6F:C9:D9:0F:66:64:9B:24:B1:7C:13:32:8E:98:59:B9
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8b:c3:43:02:f2:29:6b:4b:33:5f:30:d3:ea:99:1e:e6:cb:
16:b3:d0:00:34:b0:6a:a6:19:40:20:76:11:88:51:6f:b4:47:
5a:1f:db:8c:6c:08:a2:b3:a9:20:d0:f2:36:c2:89:88:78:b4:
df:03:9f:0e:1f:ea:52:cf:4a:77:0c:4b:a0:5c:6e:dc:90:25:
52:6f:1b:a5:8a:70:5e:6e:c0:39:92:45:3a:98:4b:a0:eb:fd:
83:c2:68:d2:08:8d:9b:b3:6c:d9:7b:1f:ca:54:68:14:89:ff:
f9:ee:df:9e:53:11:7b:26:d7:4c:69:ee:1c:61:50:9d:dd:b0:
a4:25:74:3e:05:e1:55:45:62:6b:f0:51:b8:27:2d:61:04:66:
b7:81:de:68:a8:56:a5:25:ba:9a:00:91:da:80:34:e9:5e:54:
60:05:3c:0e:dd:b3:6f:00:32:03:d7:d0:1c:6b:0c:b6:15:0e:
ce:8b:c6:3d:72:68:5c:14:0a:53:8e:ad:04:0c:c4:04:d7:41:
df:1c:a1:b4:ed:48:b7:3c:3f:10:68:10:0b:f9:e1:45:38:5d:
68:db:f6:9e:d5:f8:d2:fd:a6:65:15:5c:3e:ca:40:c8:01:d4:
e6:5b:74:11:f9:65:39:4c:ae:1f:d3:b5:c2:bf:47:25:be:66:
c4:cd:93:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:18:02 2026 by rpki-client