Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: /sJpnrcWiI5cyf4yu/Q3kRp3PLgNH2+sUVSuFxB+f9o=
Subject key identifier: 95:3F:84:58:48:C4:91:DF:16:05:CA:80:2F:17:F1:45:51:E7:04:F1
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 01A13D4ABE4742201F259374975A441ECBAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 1AA9
Signing time: Thu 15 Oct 2026 02:01:10 +0000
Manifest this update: Thu 15 Oct 2026 02:01:10 +0000
Manifest next update: Fri 16 Oct 2026 02:01:10 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: jv69ZF87g6MRrxAfNpoHy0LYfx3LZ1Yy9ouWZ9p/eFM=)
2: hZ5RcEtaRKOyRGRHHaGLm6BC8iA.roa (hash: NJb2UgVw2Dcf+y5j+m0kPKp7tmZnY9FpcgWSA4t/1bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:be:47:42:20:1f:25:93:74:97:5a:44:1e:cb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Oct 15 02:01:10 2026 GMT
Not After : Oct 16 02:01:10 2026 GMT
Subject: CN=953f845848c491df1605ca802f17f14551e704f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fe:14:ee:d5:53:77:e3:7a:ff:0b:4c:30:74:
2b:e3:22:d0:0e:a7:89:39:58:5f:c0:d2:33:ac:a4:
be:e7:e5:a8:f8:13:17:43:de:f3:2a:7f:bc:75:3a:
f7:57:89:2f:48:36:c8:2a:f0:27:cc:7d:59:00:c1:
50:25:d2:71:41:07:eb:ca:af:3c:41:3b:05:8d:67:
08:8d:d5:39:80:97:fa:62:78:d8:46:e6:32:dd:d3:
72:c3:74:64:4e:81:9a:1b:f2:54:1d:a4:d6:a9:4b:
38:ce:15:71:79:a4:1c:81:8a:03:4a:3a:ab:6a:5e:
f8:ef:a5:75:c9:d1:65:df:9c:8a:3a:53:e2:0d:05:
77:24:95:ec:19:70:b8:88:8b:fd:b4:f3:ba:d4:b8:
00:e2:99:3d:23:ce:3a:b3:a2:30:d6:7f:f8:d5:67:
f9:7a:91:d1:21:b0:7d:44:8c:43:3f:53:17:d3:d0:
e6:37:b3:79:71:32:38:c4:76:59:09:4f:7e:33:ae:
0f:bb:5c:33:48:cc:58:44:08:bc:b4:c0:6f:86:c4:
42:24:36:24:f4:44:c9:8d:5d:d2:88:95:7a:b7:bc:
04:5a:77:66:aa:db:ac:06:9b:46:8a:71:78:bd:ca:
a6:65:72:be:c5:e6:d9:db:50:b5:b6:eb:99:13:b0:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3F:84:58:48:C4:91:DF:16:05:CA:80:2F:17:F1:45:51:E7:04:F1
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fe:12:07:5b:b5:8a:3a:57:44:f8:69:13:4f:ac:e1:bd:5f:
ea:0e:1b:b7:0d:cb:40:e3:c4:05:05:30:f8:0d:63:d0:b2:7e:
1a:d9:77:f2:b0:a3:0a:3c:e4:58:5b:48:a5:45:29:d7:92:7b:
26:5c:e8:57:d3:57:ed:a7:b1:34:65:d7:e3:bd:13:10:10:bd:
c2:18:39:6b:26:00:52:90:86:d2:bf:fa:f2:f7:6d:b4:cb:0b:
52:5d:af:6b:e0:ea:39:8b:45:ea:70:c1:93:08:4b:dc:4a:d0:
96:c4:7c:72:8e:1b:c5:fe:b8:9d:b1:53:98:fa:96:8c:c1:f6:
dd:f3:ad:45:07:5b:54:17:71:e9:6b:e0:59:04:e6:95:25:30:
a1:d4:75:17:ff:6c:c8:1c:8f:bf:1a:7c:b7:e3:84:70:e9:c9:
83:04:8a:c1:cd:65:51:07:a3:af:b4:55:d3:89:5e:04:c2:3e:
cd:52:6f:85:4b:6c:91:7f:1f:f7:f0:7f:de:a4:cb:38:38:f2:
ba:3b:d7:cd:b7:1a:3b:be:1e:27:3a:d2:7e:ae:b2:01:77:ec:
02:9e:0a:d2:98:4a:fe:ec:f9:7d:39:ee:06:5c:c5:ab:94:4a:
09:89:6b:a9:b1:e1:63:aa:ab:3c:ac:26:cd:b1:4f:12:63:ff:
41:dd:f6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:45 2026 by rpki-client