Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File: ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier: 1nxRy93ihZndl5QxDwxBIbxM/sDQ/7PKreHlfFxAo68=
Subject key identifier: 52:72:46:0A:36:BF:21:7C:5A:38:8B:4A:38:B5:2B:2C:59:B6:B1:4D
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer: /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial: 019D39AE63BD983B1CBCD297F6C91F2E95A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number: 0F04
Signing time: Sun 29 Mar 2026 13:00:23 +0000
Manifest this update: Sun 29 Mar 2026 13:00:23 +0000
Manifest next update: Mon 30 Mar 2026 13:00:23 +0000
Files and hashes: 1: 9pE-MzpxUWjMwN57topeGGEUf_Y.roa (hash: +r9c8Shr2KLHGQZe5b0OVCErW9cr3Dze6HgtdQg6FcU=)
2: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: Nhit7m7Scx/kpTp9sjAlnSn96GtlT0n4Kj9miOJeseI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:63:bd:98:3b:1c:bc:d2:97:f6:c9:1f:2e:95:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Validity
Not Before: Mar 29 13:00:23 2026 GMT
Not After : Mar 30 13:00:23 2026 GMT
Subject: CN=5272460a36bf217c5a388b4a38b52b2c59b6b14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fe:0a:ba:0b:d1:fd:6a:50:64:57:48:fe:bb:
76:ff:90:77:58:59:8b:64:b7:03:5d:85:d1:4f:2c:
9c:cc:d0:c3:9f:29:13:16:1f:a5:f4:fc:93:11:9a:
51:b8:d2:92:d5:15:5e:a6:b9:54:11:fe:5c:c1:c4:
d4:67:af:7c:6c:21:a4:71:61:c8:36:d9:44:af:2d:
86:30:b9:60:ed:ad:c8:0d:19:7c:b1:cd:a5:ba:55:
9a:a3:72:c1:78:ae:27:11:8c:dd:09:8a:1b:76:25:
ef:87:e6:91:9b:8d:69:c6:7d:b7:65:fc:3f:e4:02:
e3:63:66:ed:95:58:85:72:e1:75:58:05:de:73:73:
73:f9:da:80:60:44:6d:08:8a:dc:37:a1:71:08:8c:
e5:dd:f9:90:a8:8d:14:80:3a:ff:e1:e8:2e:c0:98:
1f:5b:4d:a2:da:1b:54:e5:5a:db:a9:be:fe:4b:c6:
71:ac:5c:c4:6e:ef:e0:30:08:0b:24:81:9f:fb:a0:
62:dd:13:c7:0c:59:33:82:3a:a6:bd:f9:4a:59:7f:
87:ac:06:4a:3e:ba:cf:fb:3e:6b:2b:50:ee:9e:e8:
7b:28:ee:ee:5e:65:90:88:ab:3b:b3:c5:91:6e:fc:
8c:4d:56:0b:71:ae:8e:8a:6a:81:8d:32:dc:33:02:
13:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:72:46:0A:36:BF:21:7C:5A:38:8B:4A:38:B5:2B:2C:59:B6:B1:4D
X509v3 Authority Key Identifier:
keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0d:f8:fe:7a:1b:40:de:c9:b8:50:51:ce:3b:cd:4e:ad:2a:
34:02:ce:9a:13:eb:2f:ed:9a:d9:51:e7:92:18:83:e2:e2:23:
9b:e6:ac:11:4b:6b:09:b5:e9:6a:4e:21:15:6e:f5:5b:aa:39:
f0:e8:4c:3c:dd:53:f5:39:9e:b4:c3:7f:3f:64:68:60:c0:d9:
be:3f:6b:46:5b:fa:7c:ff:83:cb:3b:cb:bc:8f:d1:15:85:cc:
c3:77:54:f7:81:8b:70:e9:b1:98:b2:05:4b:23:ac:92:9b:eb:
8e:fa:67:41:b0:3c:0f:72:ad:bb:3f:b3:9b:c7:3f:df:36:6c:
b1:08:00:4b:ae:84:77:43:d7:ba:06:8f:87:95:a3:32:12:c3:
05:89:4d:dd:c4:ef:24:2f:46:9e:b6:66:8b:5f:a6:bc:03:8c:
cb:37:a6:ea:24:ed:22:1d:c1:c7:33:f7:ab:1a:4b:ec:aa:f2:
d4:ea:b1:1f:9f:b1:fc:77:f9:4e:48:ca:30:59:1a:d2:0c:60:
3c:6f:6b:f4:27:3a:85:93:82:0a:51:96:1e:80:b6:a6:46:2c:
13:66:d9:17:a2:bd:3d:d4:c6:37:e6:f9:48:4b:22:0d:5e:b5:
d1:45:67:b8:ee:23:11:22:aa:aa:58:99:3d:36:ce:3e:d9:e5:
1a:f5:df:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rmO9mDscvNKX9skfLpWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjA1NzQ4NTJjNmJiOTIzZmNiMzgwNDI1YzRmZDNlZDVj
MGJhOTMwHhcNMjYwMzI5MTMwMDIzWhcNMjYwMzMwMTMwMDIzWjAzMTEwLwYDVQQD
Eyg1MjcyNDYwYTM2YmYyMTdjNWEzODhiNGEzOGI1MmIyYzU5YjZiMTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv4KugvR/WpQZFdI/rt2/5B3WFmL
ZLcDXYXRTyyczNDDnykTFh+l9PyTEZpRuNKS1RVeprlUEf5cwcTUZ698bCGkcWHI
NtlEry2GMLlg7a3IDRl8sc2lulWao3LBeK4nEYzdCYobdiXvh+aRm41pxn23Zfw/
5ALjY2btlViFcuF1WAXec3Nz+dqAYERtCIrcN6FxCIzl3fmQqI0UgDr/4eguwJgf
W02i2htU5Vrbqb7+S8ZxrFzEbu/gMAgLJIGf+6Bi3RPHDFkzgjqmvflKWX+HrAZK
PrrP+z5rK1Dunuh7KO7uXmWQiKs7s8WRbvyMTVYLca6OimqBjTLcMwITlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJyRgo2vyF8WjiLSji1KyxZtrFNMB8GA1UdIwQY
MBaAFAEgV0hSxruSP8s4BCXE/T7VwLqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84OTc3OWQtOWE0NC00NTc4LTg3N2Qt
ZDViMWRiZGQxYjVmLzEvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84OTc3OWQtOWE0NC00NTc4LTg3N2QtZDViMWRiZGQxYjVm
LzEvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXw34/nob
QN7JuFBRzjvNTq0qNALOmhPrL+2a2VHnkhiD4uIjm+asEUtrCbXpak4hFW71W6o5
8OhMPN1T9TmetMN/P2RoYMDZvj9rRlv6fP+DyzvLvI/RFYXMw3dU94GLcOmxmLIF
SyOskpvrjvpnQbA8D3Ktuz+zm8c/3zZssQgAS66Ed0PXugaPh5WjMhLDBYlN3cTv
JC9GnrZmi1+mvAOMyzem6iTtIh3BxzP3qxpL7Kry1OqxH5+x/Hf5TkjKMFka0gxg
PG9r9Cc6hZOCClGWHoC2pkYsE2bZF6K9PdTGN+b5SEsiDV610UVnuO4jESKqqliZ
PTbOPtnlGvXfzA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:33 2026 by rpki-client