Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: o/TXK8fC0IlUQoXZJ1/p2ALlHCSeVIGL2wts/sbtOW8=
Subject key identifier: 59:BD:50:E6:DE:17:06:12:3A:9F:0C:1E:73:57:18:CC:DC:B4:24:B0
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 019F189E672C2400B5CB2ADE957854C16246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 198C
Signing time: Tue 30 Jun 2026 13:01:01 +0000
Manifest this update: Tue 30 Jun 2026 13:01:01 +0000
Manifest next update: Wed 01 Jul 2026 13:01:01 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: NeMg6zDA9zSCxjSzFk2MbZj8x+Uj/xKMpmfPnxEKt6A=)
2: hZ5RcEtaRKOyRGRHHaGLm6BC8iA.roa (hash: NJb2UgVw2Dcf+y5j+m0kPKp7tmZnY9FpcgWSA4t/1bA=)
3: tcgRwXEPoiihCJhjD1oHcFIHHdY.roa (hash: efVf0hrY1TqiclV4t2y1RBBFdevRrTR3XH8aA/JQadM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:67:2c:24:00:b5:cb:2a:de:95:78:54:c1:62:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Jun 30 13:01:01 2026 GMT
Not After : Jul 1 13:01:01 2026 GMT
Subject: CN=59bd50e6de1706123a9f0c1e735718ccdcb424b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:5a:56:a7:8d:cc:8a:03:b7:1b:4c:56:b8:
3f:cd:c8:00:5a:ce:7b:fb:54:fe:55:25:4a:0d:d1:
b3:1c:79:b9:af:d8:fc:f3:39:60:90:f9:7a:03:02:
3c:a6:86:e8:5c:9d:ac:db:00:bd:4e:67:76:3b:eb:
0c:76:d3:cf:09:51:ff:5c:11:25:43:99:82:21:5c:
20:e1:f7:ab:83:d2:2e:22:b0:c6:57:19:20:ff:9c:
8e:8a:3a:5d:a8:29:95:ed:0c:d3:a8:7d:89:66:4f:
e3:6c:da:02:00:66:96:74:ca:5c:2d:9c:bb:9d:06:
95:79:f2:c3:25:09:66:e7:5d:27:97:20:65:d8:e7:
7c:60:2f:da:16:d7:e7:03:6d:11:f5:cc:e0:60:b7:
85:c8:55:f7:82:29:87:d9:09:84:66:8d:10:89:bb:
4a:8a:4f:f5:a5:70:33:ae:1d:47:3c:19:ce:45:35:
b7:8d:14:1b:f2:5c:2c:8f:a4:fe:9c:cf:76:52:cb:
98:ef:60:52:f9:3f:e7:a2:71:07:94:ee:7d:3b:1f:
f9:32:eb:b2:01:fa:04:8b:46:a9:8a:b5:3c:51:35:
02:4b:fe:2f:8d:2a:c3:88:b9:f7:91:ec:f6:1b:14:
97:c0:6b:c5:fc:59:1e:8a:ee:1e:69:4a:7c:d0:e3:
2e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BD:50:E6:DE:17:06:12:3A:9F:0C:1E:73:57:18:CC:DC:B4:24:B0
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:64:a4:04:68:94:4b:be:14:c7:36:0e:3e:67:bf:a0:c8:f2:
12:e5:49:a6:22:aa:b3:93:fd:cf:dd:23:75:bd:a4:89:3f:4b:
35:dd:58:c6:81:08:4d:7d:8d:dd:5e:52:f3:04:b9:45:fb:1d:
e6:7b:34:73:2f:59:7f:79:c1:32:ca:ce:e9:c8:36:66:03:ef:
d6:ad:b5:6d:4f:ef:51:43:5e:e9:80:b5:b1:40:14:0d:a2:c0:
15:04:ce:60:60:36:37:a2:bd:00:dd:00:a0:0f:1f:1d:7e:67:
fc:9d:03:08:d2:f0:58:80:ac:49:9e:74:75:e5:0f:90:5c:76:
7f:8c:50:a7:6b:7b:bd:f4:fa:eb:fc:9a:ec:7c:da:6b:3e:6c:
d6:2b:39:95:a9:83:cb:2c:e7:75:ce:14:82:a8:43:c0:5b:c4:
fc:99:4e:b1:d6:78:89:33:be:5a:cf:33:61:86:95:ad:fa:28:
f5:ac:15:e2:fa:03:fb:6f:4d:e9:c4:d2:b3:21:92:3c:72:91:
5f:a2:8c:5f:61:29:93:cd:8c:ba:12:9c:81:b3:4c:5a:cc:8f:
66:02:25:56:21:66:fb:75:ea:0a:de:ef:66:96:b5:68:4b:d5:
3f:2d:9a:b7:f6:b2:3e:8e:83:70:54:27:74:59:a3:e3:46:e6:
60:2f:01:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnmcsJAC1yyrelXhUwWJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyY2M2OTE0NzZhNmU3ODk1YjBlNDU2MTE2NDQ0ZjkxOTM3
YmYwMWUwHhcNMjYwNjMwMTMwMTAxWhcNMjYwNzAxMTMwMTAxWjAzMTEwLwYDVQQD
Eyg1OWJkNTBlNmRlMTcwNjEyM2E5ZjBjMWU3MzU3MThjY2RjYjQyNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxJaVqeNzIoDtxtMVrg/zcgAWs57
+1T+VSVKDdGzHHm5r9j88zlgkPl6AwI8poboXJ2s2wC9Tmd2O+sMdtPPCVH/XBEl
Q5mCIVwg4ferg9IuIrDGVxkg/5yOijpdqCmV7QzTqH2JZk/jbNoCAGaWdMpcLZy7
nQaVefLDJQlm510nlyBl2Od8YC/aFtfnA20R9czgYLeFyFX3gimH2QmEZo0QibtK
ik/1pXAzrh1HPBnORTW3jRQb8lwsj6T+nM92UsuY72BS+T/nonEHlO59Ox/5Muuy
AfoEi0apirU8UTUCS/4vjSrDiLn3kez2GxSXwGvF/Fkeiu4eaUp80OMuqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFm9UObeFwYSOp8MHnNXGMzctCSwMB8GA1UdIwQY
MBaAFALMaRR2pueJWw5FYRZET5GTe/AeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85YTY4NjAtMjI0Zi00YjM0LWE5YjYt
YmMxOTJiYjczMDI1LzEvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85YTY4NjAtMjI0Zi00YjM0LWE5YjYtYmMxOTJiYjczMDI1
LzEvQXN4cEZIYW01NGxiRGtWaEZrUlBrWk43OEI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2SkBGiU
S74UxzYOPme/oMjyEuVJpiKqs5P9z90jdb2kiT9LNd1YxoEITX2N3V5S8wS5Rfsd
5ns0cy9Zf3nBMsrO6cg2ZgPv1q21bU/vUUNe6YC1sUAUDaLAFQTOYGA2N6K9AN0A
oA8fHX5n/J0DCNLwWICsSZ50deUPkFx2f4xQp2t7vfT66/ya7Hzaaz5s1is5lamD
yyzndc4UgqhDwFvE/JlOsdZ4iTO+Ws8zYYaVrfoo9awV4voD+29N6cTSsyGSPHKR
X6KMX2Epk82MuhKcgbNMWsyPZgIlViFm+3XqCt7vZpa1aEvVPy2at/ayPo6DcFQn
dFmj40bmYC8BRg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:19 2026 by rpki-client