Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: 2PE36i+L6Ag5k5TmFahpHo8sQUi+6rHwTEhZcpWrrEM=
Subject key identifier: 6F:A0:66:5B:66:8A:02:C1:DE:A7:3F:8E:CA:8A:EF:E1:7F:74:45:F2
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 019D37C0D236099BE87D1D550E980737D14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 04:01:16 +0000
Manifest this update: Sun 29 Mar 2026 04:01:16 +0000
Manifest next update: Mon 30 Mar 2026 04:01:16 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: XM9eFhtGIE4/irTgwaVaFJqlCqA9fFx4NSv1mbn5SCk=)
2: hZ5RcEtaRKOyRGRHHaGLm6BC8iA.roa (hash: NJb2UgVw2Dcf+y5j+m0kPKp7tmZnY9FpcgWSA4t/1bA=)
3: tcgRwXEPoiihCJhjD1oHcFIHHdY.roa (hash: efVf0hrY1TqiclV4t2y1RBBFdevRrTR3XH8aA/JQadM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d2:36:09:9b:e8:7d:1d:55:0e:98:07:37:d1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Mar 29 04:01:16 2026 GMT
Not After : Mar 30 04:01:16 2026 GMT
Subject: CN=6fa0665b668a02c1dea73f8eca8aefe17f7445f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:05:18:38:a6:42:e1:dc:1a:4c:6d:0f:65:5c:
3d:89:55:09:83:b6:0a:ac:1f:a0:6e:7e:3b:54:6d:
db:11:fc:03:4f:70:52:c4:72:7f:72:e6:a2:06:84:
fc:50:3c:bc:ab:7a:5d:dc:8c:79:c3:5d:89:a5:1e:
5d:17:61:1e:58:4c:2e:09:bf:bf:88:49:41:69:88:
6b:26:ac:75:3c:db:ff:1a:6d:00:95:8f:16:4d:a4:
07:ca:00:ee:31:1a:39:fb:08:b4:0f:ae:bf:19:34:
4b:34:17:14:e0:dd:3f:2f:cb:0b:41:85:03:b9:71:
70:ed:07:d3:58:b9:09:60:ac:26:b6:9a:9a:0d:96:
db:70:6a:d7:a3:db:b6:3d:12:6d:f0:f4:7d:41:0c:
4c:45:7c:98:da:c2:b0:92:e2:9e:a9:74:2b:7b:3d:
30:1a:b5:c7:8c:cd:f9:06:e9:d6:8c:9a:a6:af:c1:
03:26:ae:bb:a8:97:10:0f:92:54:d7:ea:6f:b7:eb:
49:32:c9:91:c1:46:de:90:c2:6f:8e:77:07:ea:0a:
38:a8:2e:a0:49:4c:9b:1c:d3:a9:c7:20:2c:49:29:
51:9e:ca:7a:cb:32:8d:03:cd:d9:b3:c6:10:03:3d:
5e:10:3d:af:9f:50:f4:e5:98:04:0d:ed:c4:f5:1c:
90:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A0:66:5B:66:8A:02:C1:DE:A7:3F:8E:CA:8A:EF:E1:7F:74:45:F2
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2e:20:b1:ac:e8:f9:fb:f4:ec:24:0f:3e:c7:8d:70:28:99:
61:0c:43:65:52:b9:2d:48:2b:44:d3:8f:31:bd:35:63:bd:9d:
33:75:4c:fc:d9:4d:35:e5:7d:e7:f0:c5:1a:30:2b:c0:b3:1f:
27:56:c5:74:22:1c:e4:4b:88:6e:8d:89:38:c0:b0:4b:61:42:
a4:7f:31:27:70:6d:22:64:38:53:17:af:de:40:e8:19:eb:47:
99:e9:03:e9:a4:98:e7:75:d3:f2:e6:79:77:f3:46:09:2e:f4:
23:24:65:72:c8:fc:94:a8:d9:20:e6:e0:16:e9:27:7f:c0:bb:
f9:ed:af:42:2c:f0:8b:d6:c6:6e:2b:c6:7e:ae:8d:a1:75:bd:
15:f7:1b:cd:1e:b8:3a:cc:35:28:7c:06:0e:02:bc:71:22:54:
2c:ad:57:21:a6:9b:b5:b6:dc:10:3d:d3:e4:c4:20:2f:be:58:
74:ab:22:ee:c6:04:cf:24:88:c3:37:87:52:d6:01:bd:de:18:
26:ad:dc:cf:6b:af:a0:d9:3e:0e:77:49:36:2b:62:69:08:78:
83:de:99:2a:fa:72:1f:9c:38:db:87:fc:92:a6:12:17:63:33:
c6:78:f0:1f:0e:f9:0d:5d:c1:6d:57:af:70:70:cd:e2:aa:b4:
74:a0:e6:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wNI2CZvofR1VDpgHN9FPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyY2M2OTE0NzZhNmU3ODk1YjBlNDU2MTE2NDQ0ZjkxOTM3
YmYwMWUwHhcNMjYwMzI5MDQwMTE2WhcNMjYwMzMwMDQwMTE2WjAzMTEwLwYDVQQD
Eyg2ZmEwNjY1YjY2OGEwMmMxZGVhNzNmOGVjYThhZWZlMTdmNzQ0NWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AUYOKZC4dwaTG0PZVw9iVUJg7YK
rB+gbn47VG3bEfwDT3BSxHJ/cuaiBoT8UDy8q3pd3Ix5w12JpR5dF2EeWEwuCb+/
iElBaYhrJqx1PNv/Gm0AlY8WTaQHygDuMRo5+wi0D66/GTRLNBcU4N0/L8sLQYUD
uXFw7QfTWLkJYKwmtpqaDZbbcGrXo9u2PRJt8PR9QQxMRXyY2sKwkuKeqXQrez0w
GrXHjM35BunWjJqmr8EDJq67qJcQD5JU1+pvt+tJMsmRwUbekMJvjncH6go4qC6g
SUybHNOpxyAsSSlRnsp6yzKNA83Zs8YQAz1eED2vn1D05ZgEDe3E9RyQAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+gZltmigLB3qc/jsqK7+F/dEXyMB8GA1UdIwQY
MBaAFALMaRR2pueJWw5FYRZET5GTe/AeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85YTY4NjAtMjI0Zi00YjM0LWE5YjYt
YmMxOTJiYjczMDI1LzEvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85YTY4NjAtMjI0Zi00YjM0LWE5YjYtYmMxOTJiYjczMDI1
LzEvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIy4gsazo
+fv07CQPPseNcCiZYQxDZVK5LUgrRNOPMb01Y72dM3VM/NlNNeV95/DFGjArwLMf
J1bFdCIc5EuIbo2JOMCwS2FCpH8xJ3BtImQ4Uxev3kDoGetHmekD6aSY53XT8uZ5
d/NGCS70IyRlcsj8lKjZIObgFuknf8C7+e2vQizwi9bGbivGfq6NoXW9FfcbzR64
Osw1KHwGDgK8cSJULK1XIaabtbbcED3T5MQgL75YdKsi7sYEzySIwzeHUtYBvd4Y
Jq3cz2uvoNk+DndJNitiaQh4g96ZKvpyH5w424f8kqYSF2MzxnjwHw75DV3BbVev
cHDN4qq0dKDm7g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:43 2026 by rpki-client