Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: KHxezkxo5xDYvly97ghYuMyeRoUA6J386LLiMAhp1ko=
Subject key identifier: 3F:A6:46:59:95:06:62:9F:95:A5:CC:80:63:C3:E1:5D:A6:62:E5:0D
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 019E30E091462B8626C2E955A6943EE70E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 1914
Signing time: Sat 16 May 2026 13:01:24 +0000
Manifest this update: Sat 16 May 2026 13:01:24 +0000
Manifest next update: Sun 17 May 2026 13:01:24 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: qj8wNL18d/PaFgL90qI+k3xbgOYbhtvLLtHg/dDvk2w=)
2: hZ5RcEtaRKOyRGRHHaGLm6BC8iA.roa (hash: NJb2UgVw2Dcf+y5j+m0kPKp7tmZnY9FpcgWSA4t/1bA=)
3: tcgRwXEPoiihCJhjD1oHcFIHHdY.roa (hash: efVf0hrY1TqiclV4t2y1RBBFdevRrTR3XH8aA/JQadM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:91:46:2b:86:26:c2:e9:55:a6:94:3e:e7:0e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: May 16 13:01:24 2026 GMT
Not After : May 17 13:01:24 2026 GMT
Subject: CN=3fa646599506629f95a5cc8063c3e15da662e50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:f9:d4:32:ca:2e:67:98:a9:9f:9f:dc:d0:
84:4f:8e:4d:12:59:0b:2f:ce:bf:97:b3:a7:6c:9a:
10:52:85:4d:86:c2:20:b7:d6:be:e9:e9:58:af:6e:
47:93:91:9e:8a:01:cb:b2:bd:a0:0f:85:98:55:e1:
42:94:80:27:36:17:da:f5:94:f9:32:1b:ba:fd:c6:
83:ed:89:a6:b0:0c:42:af:dd:ec:c5:22:7d:3d:49:
5c:bb:34:df:83:65:57:14:b5:37:42:44:bd:7a:d4:
5c:67:a0:42:2c:da:1f:00:ef:47:e2:c2:1c:a3:31:
e2:5a:bb:fb:5e:65:2c:39:53:fc:d5:c1:fc:7a:1a:
61:f7:c0:07:82:42:63:2d:f2:a2:0c:6d:fe:ff:e3:
ad:a0:8d:05:3f:39:d5:c9:69:05:e0:d5:1d:1b:d9:
31:50:20:92:5a:c7:51:d2:95:c8:44:b0:c9:a1:e4:
57:50:21:6d:90:ed:70:92:1a:66:f6:5d:8e:8b:dc:
8a:f6:67:57:57:fa:43:5b:29:be:c3:ab:50:f7:ad:
61:a1:07:44:9d:65:5c:9f:57:b3:50:1b:67:ea:d7:
51:af:3d:f5:23:34:ea:1b:a2:f8:5d:f8:a7:ff:c7:
39:7b:6d:f1:38:ca:67:db:f0:a0:2a:0f:46:fc:c5:
ad:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A6:46:59:95:06:62:9F:95:A5:CC:80:63:C3:E1:5D:A6:62:E5:0D
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:35:e5:6a:d1:70:50:5c:08:1d:52:f7:c8:28:d7:55:5f:a7:
72:2c:d7:14:2e:94:92:b3:02:5e:46:0d:ea:a2:bc:0b:c7:07:
5d:9f:26:86:26:4e:cf:c1:1b:84:f6:75:97:0b:a6:47:0c:af:
36:ad:66:81:1b:98:77:67:74:07:dc:f0:fa:b7:ae:31:4d:08:
6b:7e:fe:99:a6:c9:90:a0:f4:43:77:ac:ab:27:99:ef:c0:52:
55:b8:6b:02:62:2e:0a:e4:ab:70:ab:c7:4f:af:f0:9f:20:3d:
4c:48:02:c8:f8:5f:57:37:9d:1e:31:ab:3b:a4:83:9d:57:3f:
db:87:44:3c:95:7f:1f:3b:ed:6f:38:11:e6:5f:7d:ba:f8:87:
a8:51:9c:e6:6e:ae:2d:0a:7f:ea:f9:99:32:dd:37:f1:c6:f0:
d1:b7:5d:70:8d:e1:80:66:39:3a:45:a2:6c:96:84:66:f1:3e:
6c:a7:a1:1e:b5:2a:06:3d:9e:c8:5a:04:65:bb:f4:65:e5:74:
f1:3d:dc:86:ce:e9:91:5b:af:a5:90:0f:3a:41:77:b2:6c:fe:
29:77:fd:0b:15:00:0a:50:1e:f9:f0:b6:ea:04:7c:80:3f:21:
e1:d8:83:f7:e8:60:7a:35:0b:ac:3b:49:67:5e:18:3b:0e:68:
61:42:20:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:15 2026 by rpki-client