Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
File: a5p0BaYIXJq6zwg9yQpJX80mjPg.mft (raw, json)
Hash identifier: xCV3F5Zj4aMhxcjI/UqU+g6Kc4CGxrgaR9+iFSjRItw=
Subject key identifier: D5:3A:9B:22:D3:1C:47:B2:C1:BC:C9:E0:02:68:1A:15:6D:5D:75:4D
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Certificate issuer: /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial: 01A0E02AB9D406DABC189D8F482F51A0ABED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
Manifest number: 1A72
Signing time: Sun 27 Sep 2026 00:01:31 +0000
Manifest this update: Sun 27 Sep 2026 00:01:31 +0000
Manifest next update: Mon 28 Sep 2026 00:01:31 +0000
Files and hashes: 1: UB7uA7qZY4hotmQ_gspaCGyzzn0.roa (hash: rFiUkvV2QoRGRwKB4Ob/3EoVrYVbZPcUNtTj1otQ3PQ=)
2: ZthW5Kx3nnyHShrf3oe0_B7fMkE.roa (hash: 6QVqgqpQ7L5V1ofPTuomvtP1OHn9ZAgQxlpd3xTRTEU=)
3: a5p0BaYIXJq6zwg9yQpJX80mjPg.crl (hash: BOooCY7+Dj0sdWAyciQlzfOacInvemb/pF7PfVi0TB4=)
4: woWrtfbpVBQC0d9nYGwEpRD6cSA.roa (hash: LNM1xNCNG/q1EK1QvoIE7h4vxMboHIOphEup0ou6cwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:b9:d4:06:da:bc:18:9d:8f:48:2f:51:a0:ab:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Validity
Not Before: Sep 27 00:01:31 2026 GMT
Not After : Sep 28 00:01:31 2026 GMT
Subject: CN=d53a9b22d31c47b2c1bcc9e002681a156d5d754d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:74:25:48:4f:b8:9d:60:a5:10:21:35:ef:21:
10:b0:c4:bf:c5:77:7b:bd:1a:89:21:8a:e5:a8:ef:
74:00:8b:ff:69:b1:79:6c:59:3e:38:a5:2c:29:7b:
88:40:eb:97:00:88:16:69:b8:94:ce:5e:dd:5d:80:
3e:23:46:bb:4f:af:f3:92:72:1d:0e:f2:59:ca:a5:
79:86:d9:3b:d5:af:a3:d9:9d:ee:a2:4d:8e:7d:55:
af:5d:39:78:3e:9a:e5:c2:a5:c7:64:38:d0:cb:30:
ff:cd:07:aa:10:a6:a2:5e:e9:c0:6a:31:51:78:cc:
91:00:f8:90:bb:9a:e0:2a:b7:c9:f2:90:04:ae:7f:
98:7c:94:e9:82:80:24:a2:77:6f:c9:d0:b9:31:30:
56:ad:ac:ea:21:0f:73:c6:60:cd:d9:99:05:7a:fa:
32:bf:f2:06:91:2a:3f:2a:9b:1a:03:1b:9f:9b:2d:
15:d0:17:2b:9e:95:a0:dd:d9:2f:15:b6:a5:d3:b8:
97:76:36:61:3b:87:79:2c:3e:cb:7d:4a:6a:3b:5a:
37:9b:b5:b3:3f:7d:25:0a:06:23:58:00:0a:f0:1b:
39:7a:00:21:a3:32:cb:da:a6:93:fe:74:73:2d:6d:
65:b2:9b:29:77:b6:b5:23:be:55:a7:60:71:27:fb:
2c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3A:9B:22:D3:1C:47:B2:C1:BC:C9:E0:02:68:1A:15:6D:5D:75:4D
X509v3 Authority Key Identifier:
keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1a:7e:9d:f1:c4:f0:9f:07:f0:6d:64:c1:b8:65:d2:f8:cb:
94:87:b4:cb:77:d0:dc:1c:f8:91:89:ec:f1:2d:66:58:69:8b:
b7:5b:35:8b:9b:3b:85:5e:6c:dd:2d:0f:1a:17:2a:2c:33:24:
d1:7a:ae:1d:c6:fe:0e:cf:4c:72:8d:52:76:5c:b3:0d:63:66:
6f:ba:5a:d6:6e:50:cd:7f:1a:c3:75:0b:c3:24:a1:42:25:84:
17:5b:f5:dd:b3:f1:52:76:d2:0d:a0:f0:a7:80:16:42:02:63:
51:ba:10:52:9b:5e:2c:a6:c4:38:6a:73:88:51:64:e6:cf:77:
ae:9c:ef:76:7b:8a:73:70:b2:a6:a2:54:d7:13:9c:aa:5e:da:
be:12:f9:5d:26:0f:1a:9e:4a:4b:25:71:f8:42:5b:67:26:b9:
c2:7e:95:e4:1d:93:4a:89:51:fa:6e:3e:c4:2d:09:35:dd:24:
6d:b2:ab:9f:55:24:16:b7:9e:ea:59:ab:4d:33:de:f2:10:b6:
f0:8e:08:69:fa:18:d8:58:f7:1e:65:76:87:6b:17:a4:8f:a8:
68:4a:24:80:a9:06:c8:70:96:b5:60:c9:d6:57:3b:21:ce:e7:
86:93:2a:1b:3d:dd:65:f3:b8:c0:a9:a9:4e:0f:35:80:ff:88:
32:90:01:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:21:45 2026 by rpki-client