Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: nwk71Z7SgEzA20btwDxqUbthdY+7tc8AO0vVIZ9PNgw=
Subject key identifier: 7B:85:52:3D:23:D5:BE:A6:9E:D3:69:13:03:0E:5F:70:90:34:09:B9
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 01A0009342B050D8F287C584F4DE89B0E5B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 1A05
Signing time: Fri 14 Aug 2026 14:00:45 +0000
Manifest this update: Fri 14 Aug 2026 14:00:45 +0000
Manifest next update: Sat 15 Aug 2026 14:00:45 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: MaSxDWna+Gc34AjkoWwAQ7wYaN5N4flGyJ7rwh/rG9Q=)
2: hZ5RcEtaRKOyRGRHHaGLm6BC8iA.roa (hash: NJb2UgVw2Dcf+y5j+m0kPKp7tmZnY9FpcgWSA4t/1bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:42:b0:50:d8:f2:87:c5:84:f4:de:89:b0:e5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Aug 14 14:00:45 2026 GMT
Not After : Aug 15 14:00:45 2026 GMT
Subject: CN=7b85523d23d5bea69ed36913030e5f70903409b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:15:52:cb:bc:53:5f:2a:20:80:54:86:c8:
db:10:66:ff:b4:67:0a:ec:1c:d1:63:26:31:d7:4b:
22:2c:61:ad:fc:46:7c:07:3b:fa:61:b3:8e:ce:58:
df:98:b8:59:40:0a:5b:d5:08:99:80:d3:6b:37:c8:
57:4e:c1:b1:57:c2:bf:32:92:81:36:0d:a0:ea:1b:
f8:37:41:0e:37:61:de:0f:19:e0:1b:6c:e5:fe:fa:
1f:31:0b:a4:de:a5:e5:00:de:00:f0:37:e6:2a:b6:
4a:7a:fe:08:25:47:4a:a4:80:cd:cc:41:33:39:2d:
ce:8b:8a:9c:40:ab:6c:b9:4e:c6:10:f9:57:70:c1:
82:5b:d6:54:5c:2a:70:14:a6:ee:d7:26:ea:a8:81:
e2:0a:70:d0:d8:f8:cb:43:08:57:8f:5e:fa:d3:8c:
81:79:67:57:1c:ab:09:39:27:48:13:4c:e0:28:94:
79:32:33:08:d4:fc:0a:ed:ba:62:89:99:44:e8:64:
81:8a:42:12:38:bb:e1:3a:d2:55:01:2f:9a:46:7c:
d4:03:9f:7e:73:c9:c6:05:4b:b6:d3:8a:3c:53:4c:
42:4f:54:ca:66:c0:7b:b3:fd:2b:fb:b5:0f:b3:5a:
b7:e3:a9:f9:fc:43:47:64:c3:cb:6b:fb:4b:1c:69:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:85:52:3D:23:D5:BE:A6:9E:D3:69:13:03:0E:5F:70:90:34:09:B9
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:96:7c:a1:86:60:66:8f:c1:e7:ca:62:66:4c:2c:33:44:ab:
6d:c1:65:75:73:8f:76:19:1b:d4:71:f0:41:d0:50:1e:e5:e5:
e6:c9:3c:8c:41:15:46:c4:a7:36:43:9f:82:e3:95:ec:03:9c:
cf:eb:33:26:b1:0b:3b:5d:d7:73:5e:b0:33:1b:38:6f:69:66:
b7:b7:cf:2c:97:f8:4a:71:f1:42:df:44:e4:2e:32:26:33:c1:
ea:1d:56:eb:7c:5b:a7:7a:bb:cb:4e:25:3d:5c:32:39:66:fa:
14:58:29:a7:60:0c:bb:1b:8d:8a:77:69:eb:a1:45:80:c9:a3:
7f:31:19:8a:15:d5:6a:30:70:57:dc:16:7b:06:ed:74:90:c0:
f2:86:49:c8:f7:20:38:fc:75:3a:c3:02:1c:40:f9:8f:5c:16:
89:8c:57:ec:69:04:df:a1:d1:8f:7e:28:22:96:be:28:51:78:
32:22:dd:5e:39:37:5b:83:95:a0:1f:9a:4a:72:54:0e:32:5b:
94:34:2e:9a:95:b9:e0:cb:26:41:8b:bd:ad:0b:74:35:25:af:
b1:33:43:dc:36:e4:8c:8e:73:f0:c3:d0:7e:7b:2d:73:53:0e:
29:f6:06:5c:20:ac:e2:8d:20:47:59:cf:03:72:3f:4b:4f:30:
9d:30:9a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:23 2026 by rpki-client