Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
File: a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft (raw, json)
Hash identifier: AhTrakQiZ6NCJHt5JcWWdDNzy1p62uTFwJw9mXTTwG4=
Subject key identifier: 8A:5F:23:A8:45:7A:B6:89:77:74:50:70:AE:49:93:FC:F6:54:C3:4F
Authority key identifier: 6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB
Certificate issuer: /CN=6b966a7800333799d7cd820e3097116473ca42eb
Certificate serial: 019E1EA399C227D294C30A3AAE9E214C168C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
Manifest number: 3B
Signing time: Wed 13 May 2026 00:01:38 +0000
Manifest this update: Wed 13 May 2026 00:01:38 +0000
Manifest next update: Thu 14 May 2026 00:01:38 +0000
Files and hashes: 1: WrUWqB5jJeFqCbC5EXq-ks26-Bo.asa (hash: F2DPSfLQYJyDePcz+eV6IzbvmlLEE0e2BJutA3Z+nlQ=)
2: a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl (hash: A0ziUffe/eiYbc2kpYJhx5Ac5GZ2G69uDtTIQyoc9Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:99:c2:27:d2:94:c3:0a:3a:ae:9e:21:4c:16:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b966a7800333799d7cd820e3097116473ca42eb
Validity
Not Before: May 13 00:01:38 2026 GMT
Not After : May 14 00:01:38 2026 GMT
Subject: CN=8a5f23a8457ab68977745070ae4993fcf654c34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:5d:6f:2d:f2:49:aa:86:ee:aa:de:f2:5d:
b5:56:5c:c7:cf:be:b9:a3:99:6c:09:af:a5:8f:8a:
9f:64:d9:87:0b:4d:ef:1a:91:f6:d0:d1:b8:82:10:
03:f0:0d:84:4d:af:65:19:f6:f1:3a:e9:cd:8d:51:
a0:7d:d8:b3:48:b9:9e:23:8b:c6:cd:9a:cf:c8:57:
9f:18:ec:c2:6c:e8:e0:fe:ec:f6:0e:40:c0:7d:0f:
06:45:04:16:a3:a0:76:fa:8d:92:68:66:e0:b6:19:
a0:f0:99:86:01:6a:b4:c3:b9:6b:64:c5:ee:fc:d6:
c1:a3:aa:a1:4e:07:c9:48:ae:8d:6f:e2:44:09:b4:
a8:42:ce:9c:8b:09:a3:1a:4a:74:44:c9:42:c6:de:
16:75:25:5a:e7:da:0f:d7:2a:28:2e:de:02:29:92:
6f:71:2e:fb:37:c0:ff:f2:91:be:ca:92:d0:dd:53:
d9:02:af:21:e2:9e:5c:b5:38:a5:2e:b8:15:37:70:
ee:bd:2c:f6:e8:a9:b4:b3:2a:2a:df:b6:e8:a3:1c:
bf:5d:34:a3:5b:e8:45:d7:c7:9e:f3:5f:e3:6a:cd:
7f:93:ae:94:09:00:f9:c1:46:76:e0:68:d5:c8:7d:
83:48:c1:83:24:11:19:8b:2f:cc:79:37:1d:31:86:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5F:23:A8:45:7A:B6:89:77:74:50:70:AE:49:93:FC:F6:54:C3:4F
X509v3 Authority Key Identifier:
keyid:6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:17:98:e0:59:c8:3b:ee:0a:1e:a7:19:50:0a:d5:ce:3b:2a:
33:8d:19:35:d9:4b:f9:5b:5d:bc:ee:b9:1d:e6:9a:b8:06:4b:
ca:8b:ca:af:83:f7:ad:c8:55:4a:80:5d:03:93:8e:bd:fc:98:
51:c6:d7:20:c5:e3:f8:39:d1:de:02:1d:d6:d5:60:a7:f3:81:
8b:8c:f6:37:65:17:87:6b:b0:b9:b6:ea:0a:e0:29:c0:0b:15:
a8:f7:d8:1c:eb:42:9d:e6:3d:06:bd:c1:88:ad:b7:1d:6b:10:
7d:57:19:6c:ce:2c:8a:0a:7f:f4:f6:0c:69:58:3d:77:ee:7a:
fa:07:20:50:44:d6:36:c4:9d:f3:55:8e:06:10:37:1a:15:21:
e9:ab:4e:cf:6b:a5:3f:96:cf:53:12:65:a8:7e:0a:e8:91:b7:
7c:d2:58:a7:5d:2f:13:75:ae:47:c2:5a:19:74:8d:63:ea:df:
b8:73:41:d9:a7:ec:ca:72:02:39:5e:1b:4a:01:47:26:79:12:
2d:34:cf:5a:27:a3:db:f1:52:d4:8d:e6:fe:0e:72:16:86:6f:
b2:58:68:22:64:c5:69:1d:6c:fa:a7:64:de:7e:0d:73:bd:77:
c5:6e:b2:5b:c8:b5:5c:26:c0:92:e6:86:b0:41:ac:83:f2:ed:
e8:a3:63:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:25:59 2026 by rpki-client