Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
File: A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json)
Hash identifier: mtwPan/FDAhD5WBcturNEka+v+qbp1wIYtItT9pkx+4=
Subject key identifier: F9:01:FC:86:2A:2E:4A:EA:2A:01:40:AD:95:92:D5:1D:8C:60:BE:A5
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial: 019E1F7F1E400D21A309A1EB76BE45C7F80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
Manifest number: 0972
Signing time: Wed 13 May 2026 04:01:24 +0000
Manifest this update: Wed 13 May 2026 04:01:24 +0000
Manifest next update: Thu 14 May 2026 04:01:24 +0000
Files and hashes: 1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: NzPsoao2Mx3TLP15zppNU3Nte2HKvexjrqNTnRHInEk=)
2: DALU3tcvOFTYsZrsDs2f4e9axOI.roa (hash: ebFcRHw5U0MTTaA0PwzsRWLgtLL3PnreXj9riBF5Jv0=)
3: ngE7Yefr8Kh8jZEtVDnS3arKhqU.asa (hash: 3GsUcPKh0tqn8pSBgRUlUFyh+eu6y6bpI0iAqEsI4q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:1e:40:0d:21:a3:09:a1:eb:76:be:45:c7:f8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Validity
Not Before: May 13 04:01:24 2026 GMT
Not After : May 14 04:01:24 2026 GMT
Subject: CN=f901fc862a2e4aea2a0140ad9592d51d8c60bea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:a6:2c:d9:94:d9:63:21:6b:28:3d:a1:36:
b6:0c:2e:cb:ec:99:1d:37:db:1d:76:20:4b:49:2c:
1d:36:a4:a0:b1:4f:58:75:b7:8c:e4:30:f5:78:72:
dc:41:51:e8:95:6d:c8:bf:89:44:d7:7b:81:ad:fe:
1c:50:0c:c2:7f:23:6e:64:e8:47:70:19:14:f5:12:
5c:9c:81:e8:41:f4:b3:d6:66:be:33:14:2b:ba:4d:
ea:69:53:5c:4c:2d:8c:1f:06:75:4c:78:a8:5a:7b:
e7:a8:01:4f:4b:ed:3c:69:ac:8e:ec:61:8e:60:56:
95:da:40:dd:18:58:ee:e4:ba:fa:d3:4b:62:2a:94:
68:bd:8e:95:58:07:99:28:d9:bd:d9:21:ef:47:da:
39:4c:36:3b:8d:17:3a:ac:b8:29:83:26:3e:25:ae:
4c:a3:b7:e5:83:fe:72:c6:82:16:e2:fe:ee:15:a9:
bf:db:ba:ec:ce:0b:3c:98:b2:10:85:09:06:32:54:
6e:92:98:0f:3d:a7:7c:61:57:0b:c8:32:0b:51:16:
16:30:ad:60:38:59:a9:52:24:65:bb:62:07:10:c4:
41:55:d7:0a:7a:b0:8a:ac:bb:fc:75:de:0a:80:a3:
38:95:f9:c6:d2:52:52:25:3a:9b:17:61:63:81:c5:
a4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:01:FC:86:2A:2E:4A:EA:2A:01:40:AD:95:92:D5:1D:8C:60:BE:A5
X509v3 Authority Key Identifier:
keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d3:2e:67:eb:8d:ec:e4:18:50:dc:c4:7d:0f:47:5c:ec:b1:
7a:ea:ba:a8:9b:13:a0:5d:70:51:85:77:c5:2c:bf:28:b9:98:
58:32:40:7e:90:6e:76:79:ee:80:39:c5:b4:07:ab:c8:3e:15:
48:6e:fe:6d:1e:6c:65:07:58:0a:55:af:1b:9f:c9:18:42:33:
47:5f:79:25:d3:ce:8e:74:99:30:dc:30:6e:dd:67:ea:8c:61:
98:a6:00:b9:c7:fa:63:ff:00:bc:cf:eb:7d:4f:0c:0e:51:bd:
c8:52:59:e0:7e:87:05:fb:b5:a5:dc:26:e0:d3:de:47:64:47:
14:4f:1a:df:f7:28:18:fa:1f:c9:51:c5:ee:d9:da:4d:1d:a6:
7f:33:d0:32:81:8c:9d:76:d7:f9:e2:5c:73:13:a6:30:3b:f0:
ec:97:63:00:14:24:87:31:07:74:2e:6b:82:77:2d:0a:91:b5:
2b:0f:95:e7:37:55:b6:d9:70:98:fc:94:7c:db:08:3d:b5:d8:
1c:a5:55:55:c5:89:05:75:42:af:17:dc:29:c8:00:6f:7e:be:
89:fa:73:7c:47:a5:76:52:51:12:10:aa:aa:46:06:7b:5d:67:
f8:65:d0:f5:bf:b9:f3:12:c4:a4:0d:ff:2f:7d:b8:ae:66:e0:
ba:d4:d6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:45:14 2026 by rpki-client