Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json)
Hash identifier: lBtpT+AHJAgJZCbneREqOmGDuZ2+3yUuYVU6ho2+IDE=
Subject key identifier: 8E:D5:FE:5A:8A:B0:E1:A3:43:C5:77:2F:CA:D7:F6:FB:D5:B4:53:1E
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 01A0005D0E7E9EF084683E282AC5BEA6EC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
Manifest number: 0A38
Signing time: Fri 14 Aug 2026 13:01:33 +0000
Manifest this update: Fri 14 Aug 2026 13:01:33 +0000
Manifest next update: Sat 15 Aug 2026 13:01:33 +0000
Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: KzvTj3k1NluDujM4gh8FM3BOARrwyyrrCxcNQn+uP7k=)
2: H49G2vY2n7CqDt3v_PdU70zy7RA.roa (hash: 3w0udG08DzlOoXAgNwrIJkLMkSJOE7Sqq/f8cYs/Xbk=)
3: uBdDrrOh7lGlr8QcDfUoYU2av_k.roa (hash: Cw4sLfBdvB1lBMMzs14p2jJuylUh6bwsF0YFotyYbaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5d:0e:7e:9e:f0:84:68:3e:28:2a:c5:be:a6:ec:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Aug 14 13:01:33 2026 GMT
Not After : Aug 15 13:01:33 2026 GMT
Subject: CN=8ed5fe5a8ab0e1a343c5772fcad7f6fbd5b4531e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b4:47:1c:6f:18:1b:70:cd:cb:3f:ee:b2:9d:
ec:de:53:ac:d7:e1:1b:35:fe:9c:e6:44:b3:e7:75:
6f:42:5a:32:67:95:17:a1:a6:75:c4:36:e3:59:0a:
ae:fb:1d:24:ed:5d:7a:76:da:c8:6b:f3:08:1d:b1:
d1:4b:b4:93:87:c9:f5:ef:d3:78:4b:e8:34:24:7c:
f0:47:58:7e:e4:fd:7d:7b:a0:61:fb:5b:c2:43:e4:
3d:15:24:e3:d7:7c:79:74:b0:c7:4b:ac:12:5a:25:
ba:65:98:73:26:c6:dd:ff:a3:81:a2:96:4f:0e:55:
28:9d:14:81:96:af:8f:06:92:87:2e:6e:d7:5c:3b:
f9:a5:1c:4d:e5:1d:33:cf:28:bf:24:7c:fc:78:8d:
60:70:04:9e:4f:3a:6f:a9:b0:17:57:9e:c5:80:be:
f3:c8:79:a0:b3:f4:ef:fa:1f:23:30:a5:fb:03:8e:
32:c0:40:9e:16:d9:b6:ba:b7:ed:15:1a:73:c1:1e:
aa:63:3e:e8:19:70:ff:11:7f:76:e0:45:72:34:90:
d6:b2:48:80:aa:b3:4c:2c:f5:a0:94:bb:2b:b8:d2:
1a:b1:76:9d:1c:19:43:fe:a3:8f:fc:4f:1a:bd:c9:
de:0b:5b:e6:ed:84:05:e1:45:a6:2c:1c:72:77:9e:
df:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D5:FE:5A:8A:B0:E1:A3:43:C5:77:2F:CA:D7:F6:FB:D5:B4:53:1E
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7e:03:42:8d:b3:a9:c1:9b:1c:ef:7c:da:5e:95:b5:22:35:
a9:d4:1d:94:54:86:db:db:c6:1b:d7:fd:05:47:f7:c8:76:e6:
b5:fa:eb:a6:9e:fc:91:23:aa:49:d5:1b:b6:5a:d2:c7:74:53:
2b:a2:90:29:ae:f4:2f:63:00:e5:93:38:ca:c1:98:8d:0b:92:
ef:ba:62:04:e3:83:07:bb:a9:c5:22:27:2e:4e:2c:40:43:4e:
87:49:c1:9a:3f:ff:e9:54:03:64:6e:31:9c:c8:f3:81:43:7e:
3e:e6:52:51:2f:71:ee:e2:73:00:05:85:3c:f5:b4:b0:90:12:
68:7b:b3:31:31:13:8f:b8:3b:fc:26:aa:df:59:af:ec:82:1d:
36:69:ea:fd:8f:0c:ee:ab:7f:67:4d:10:c3:df:67:84:06:d7:
41:59:48:8c:a0:49:59:69:05:17:2d:7a:9a:31:20:6f:e7:62:
55:94:d2:88:89:6e:f1:f2:96:16:4b:50:25:c1:a7:04:40:1e:
61:28:f3:a9:f3:13:82:32:07:bc:0d:d3:6c:32:c0:89:be:27:
58:7d:36:49:c5:3a:23:ed:9b:e4:7c:e0:91:f8:2b:e6:cc:aa:
8e:ed:c6:6c:23:7e:14:14:9a:d2:a0:9a:d2:d0:db:9f:49:df:
4c:56:b4:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXQ5+nvCEaD4oKsW+pux+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzk0ODA0Y2ZjYzdlZjI1OGQ0NmZjMzI0YzE2NzY0NDc2
MDNlZjYwHhcNMjYwODE0MTMwMTMzWhcNMjYwODE1MTMwMTMzWjAzMTEwLwYDVQQD
Eyg4ZWQ1ZmU1YThhYjBlMWEzNDNjNTc3MmZjYWQ3ZjZmYmQ1YjQ1MzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbRHHG8YG3DNyz/usp3s3lOs1+Eb
Nf6c5kSz53VvQloyZ5UXoaZ1xDbjWQqu+x0k7V16dtrIa/MIHbHRS7STh8n179N4
S+g0JHzwR1h+5P19e6Bh+1vCQ+Q9FSTj13x5dLDHS6wSWiW6ZZhzJsbd/6OBopZP
DlUonRSBlq+PBpKHLm7XXDv5pRxN5R0zzyi/JHz8eI1gcASeTzpvqbAXV57FgL7z
yHmgs/Tv+h8jMKX7A44ywECeFtm2urftFRpzwR6qYz7oGXD/EX924EVyNJDWskiA
qrNMLPWglLsruNIasXadHBlD/qOP/E8avcneC1vm7YQF4UWmLBxyd57fPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7V/lqKsOGjQ8V3L8rX9vvVtFMeMB8GA1UdIwQY
MBaAFALJSATPzH7yWNRvwyTBZ2RHYD72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMt
MjU5YmU5ZmJjMWYxLzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMtMjU5YmU5ZmJjMWYx
LzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnH4DQo2z
qcGbHO982l6VtSI1qdQdlFSG29vGG9f9BUf3yHbmtfrrpp78kSOqSdUbtlrSx3RT
K6KQKa70L2MA5ZM4ysGYjQuS77piBOODB7upxSInLk4sQENOh0nBmj//6VQDZG4x
nMjzgUN+PuZSUS9x7uJzAAWFPPW0sJASaHuzMTETj7g7/Caq31mv7IIdNmnq/Y8M
7qt/Z00Qw99nhAbXQVlIjKBJWWkFFy16mjEgb+diVZTSiIlu8fKWFktQJcGnBEAe
YSjzqfMTgjIHvA3TbDLAib4nWH02ScU6I+2b5Hzgkfgr5syqju3GbCN+FBSa0qCa
0tDbn0nfTFa0Fg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:16 2026 by rpki-client