Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
File: a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft (raw, json)
Hash identifier: 3601LnvFYY/yqMDM54tpVVILTvSWcRkxsa2rQo9l9gQ=
Subject key identifier: DC:05:D1:DC:8A:26:7D:13:95:8F:DC:69:20:BE:FC:6E:7B:C4:6C:0E
Authority key identifier: 6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB
Certificate issuer: /CN=6b966a7800333799d7cd820e3097116473ca42eb
Certificate serial: 019F8F7E5458654A619CBE425DAA44A037BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
Manifest number: FA
Signing time: Thu 23 Jul 2026 15:00:48 +0000
Manifest this update: Thu 23 Jul 2026 15:00:48 +0000
Manifest next update: Fri 24 Jul 2026 15:00:48 +0000
Files and hashes: 1: WrUWqB5jJeFqCbC5EXq-ks26-Bo.asa (hash: F2DPSfLQYJyDePcz+eV6IzbvmlLEE0e2BJutA3Z+nlQ=)
2: a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl (hash: IpOciB9oLrC2P/yhft4eGeeXBOok4fS/ll81Z3kF2sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:54:58:65:4a:61:9c:be:42:5d:aa:44:a0:37:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b966a7800333799d7cd820e3097116473ca42eb
Validity
Not Before: Jul 23 15:00:48 2026 GMT
Not After : Jul 24 15:00:48 2026 GMT
Subject: CN=dc05d1dc8a267d13958fdc6920befc6e7bc46c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:2d:54:ab:ec:12:e0:08:a5:ee:96:12:8a:
8d:ca:c2:22:2c:8e:32:4f:e9:c5:44:29:77:0f:f9:
bd:31:04:aa:65:64:80:ac:8a:2c:98:f5:81:33:7b:
71:12:af:ef:0a:2d:8f:fe:17:b1:f1:80:da:c3:ed:
72:ab:36:61:38:1b:87:8f:4a:16:46:1d:09:6c:9c:
3e:08:0f:3c:80:71:63:ec:fb:73:25:78:50:ee:90:
dd:0e:3c:a1:ac:2d:61:5c:ea:80:ca:3c:5d:76:27:
03:3e:ec:0e:97:5c:ab:38:6b:da:c4:28:dd:d7:03:
75:bc:61:b8:17:d9:fd:c9:54:3d:fc:51:d7:bf:7f:
5a:fb:67:ae:69:9e:01:d3:af:47:fd:a0:5d:51:24:
c1:b2:63:6a:8c:8b:4d:35:f1:bc:4c:6e:1d:e3:25:
31:4b:5b:22:55:17:1b:b5:9e:8d:2b:50:75:b3:b0:
d2:ee:35:d8:f5:26:3e:f0:6d:88:d5:fa:da:ba:8d:
93:16:f3:bf:9c:7b:cf:df:28:51:6f:28:36:0d:e9:
64:6f:d4:b2:d2:a4:13:af:d6:f5:c4:15:3f:65:f2:
72:42:ca:cc:5f:bb:78:b0:4c:08:00:e6:c9:2b:a8:
98:68:d2:e3:d1:36:2c:fb:3a:e4:d9:a0:12:95:63:
2e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:05:D1:DC:8A:26:7D:13:95:8F:DC:69:20:BE:FC:6E:7B:C4:6C:0E
X509v3 Authority Key Identifier:
keyid:6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:24:8a:5c:21:cd:71:54:8b:ee:dd:21:1c:a0:00:84:ef:75:
28:75:df:a6:51:27:18:b7:92:95:bc:9c:fa:02:ec:53:26:3d:
fc:9c:f6:98:55:14:0a:ee:ef:f6:45:67:03:3c:2e:a3:32:38:
b0:cc:cf:32:28:11:95:e0:ab:bb:c3:bd:04:ad:8c:fd:60:62:
18:e6:c7:b3:f3:0a:cd:49:88:49:4b:3f:57:63:7a:1a:1a:d6:
e7:79:a8:2a:84:9c:ec:0d:9b:d2:86:75:22:4d:60:6b:c2:3e:
a8:b8:44:36:1e:a1:9d:a6:5d:33:b5:72:e6:f9:37:32:e4:9e:
e1:3d:42:58:65:a2:6b:89:9a:7f:b6:45:66:2b:53:90:65:0a:
f4:8a:da:db:92:db:8a:cf:63:44:d5:d1:c6:dd:50:76:ba:a6:
b8:19:43:9d:28:4a:cc:c0:4f:d7:0b:75:ef:4b:11:0f:b5:77:
86:a0:d0:b2:34:96:85:41:e4:49:9f:2b:dd:0c:83:a7:90:95:
dc:b9:15:ca:d1:74:ed:8f:ed:62:b7:6c:5c:9c:c4:c3:2b:51:
26:34:a0:4a:1a:ac:b2:02:f3:84:c4:07:6f:5f:b9:36:ba:c8:
d1:91:c1:75:0f:96:71:f4:c8:7d:1d:cd:f6:48:84:cb:43:28:
ed:3b:7c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:31 2026 by rpki-client