Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json)
Hash identifier: e4crF7HS3QNbBSRDsFAgHsYuJ7Y2YIGznJLy2gI6OT0=
Subject key identifier: 0E:6B:12:D5:83:32:5D:EB:7A:8B:25:8E:1C:D3:E0:19:20:45:F9:F7
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 019F14C1FF20089FCAB9F3AEE9116323D058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
Manifest number: 09BE
Signing time: Mon 29 Jun 2026 19:01:25 +0000
Manifest this update: Mon 29 Jun 2026 19:01:25 +0000
Manifest next update: Tue 30 Jun 2026 19:01:25 +0000
Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: uEOjGXU2iEHk/kEfe6ecqwc337xFmCIFmDaIU42h2vU=)
2: H49G2vY2n7CqDt3v_PdU70zy7RA.roa (hash: 3w0udG08DzlOoXAgNwrIJkLMkSJOE7Sqq/f8cYs/Xbk=)
3: uBdDrrOh7lGlr8QcDfUoYU2av_k.roa (hash: Cw4sLfBdvB1lBMMzs14p2jJuylUh6bwsF0YFotyYbaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:c1:ff:20:08:9f:ca:b9:f3:ae:e9:11:63:23:d0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Jun 29 19:01:25 2026 GMT
Not After : Jun 30 19:01:25 2026 GMT
Subject: CN=0e6b12d583325deb7a8b258e1cd3e0192045f9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:66:b8:c0:5a:a2:ed:e3:67:16:bf:2b:16:
73:d2:60:fa:35:28:a2:38:3b:1d:6e:21:5f:37:4e:
d3:44:e2:9d:8b:d6:97:71:a7:58:ff:f8:d0:8c:ce:
08:6b:5a:1e:e3:6d:72:44:13:c5:5c:a7:ba:05:17:
f7:9f:67:23:47:91:d4:0b:2e:b2:38:bd:29:7d:eb:
da:9d:a4:1b:f8:18:e8:ce:42:45:27:89:72:5e:7f:
85:f8:20:fe:b2:a4:d8:eb:12:58:dd:8d:40:df:0b:
cb:4d:92:fb:cc:56:e5:cb:15:9d:4e:c9:a6:eb:74:
d3:94:37:3d:42:1e:b7:c9:fd:fb:ee:5e:fa:02:7b:
8e:07:e4:42:62:b9:a1:66:cf:c8:4b:95:72:4e:53:
de:f7:f3:be:7c:1e:02:35:f7:50:aa:ff:1f:8b:bb:
88:57:46:6d:db:c5:c2:bd:c8:05:42:62:56:d0:29:
0a:ce:74:60:52:34:cd:a0:12:d7:e0:a3:d5:eb:4d:
36:87:74:87:86:15:12:60:3f:34:26:03:41:ee:e9:
c2:48:7f:68:4a:7b:e1:f9:37:f3:d5:ff:85:cf:0f:
7c:59:1e:e9:63:54:15:63:69:24:81:c0:e4:ff:f5:
27:fb:06:c6:5a:04:96:17:d7:80:1e:79:15:e2:7e:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6B:12:D5:83:32:5D:EB:7A:8B:25:8E:1C:D3:E0:19:20:45:F9:F7
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:33:c1:ae:c9:22:b4:06:3e:da:81:7d:61:d6:09:d2:04:58:
b6:12:89:81:e4:bc:e1:f8:80:34:49:93:ad:1e:71:12:f6:ed:
a0:1c:a8:96:ed:c8:90:ed:d4:8b:a5:db:e1:27:1a:f3:c7:69:
d0:fb:73:44:e7:6f:24:31:c4:00:2d:7c:b0:75:9b:7a:27:63:
2b:fd:d3:fc:db:0f:19:1a:b1:22:3c:e5:6e:27:f5:27:8a:c1:
7b:d1:ff:a0:ba:8a:36:3a:9e:80:80:7d:70:a0:da:f6:a9:fe:
51:b2:fb:46:f3:ea:d8:54:80:22:5c:f9:54:b8:22:ae:40:c3:
b5:dd:f2:55:b1:2f:30:eb:c2:46:03:63:5f:a0:5c:30:84:1e:
d9:2e:b0:1f:8a:72:82:30:45:46:c7:9b:e8:f5:b9:1e:74:6d:
78:44:1c:02:3c:70:84:fc:7c:15:1a:9a:56:f5:8d:2b:06:0e:
03:45:7c:e3:69:68:c3:dc:01:72:17:31:ce:2d:08:00:26:5e:
dc:40:14:9a:a8:e8:ad:0f:de:81:69:79:4b:e8:b6:15:9c:de:
1c:6f:3c:53:80:cf:31:93:ba:9b:a9:2c:02:78:14:4d:90:6c:
75:7a:a6:12:ff:93:02:5e:60:59:fb:d3:cd:1e:b0:fb:e5:f2:
de:3a:2b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 23:34:36 2026 by rpki-client