Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
File: A5aaE8t8Nxi9NxdxJijnqxszsKU.mft (raw, json)
Hash identifier: z8fkKexGhM/daWUKpeOOVxIj2jHIBoLW1SBFV7qigcU=
Subject key identifier: D8:92:91:01:59:D5:AE:E7:14:2D:88:27:F3:84:1D:12:1C:53:33:E0
Authority key identifier: 03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
Certificate issuer: /CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Certificate serial: 019E209147B6750FA347C905F3EABDCA8D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
Manifest number: 0D35
Signing time: Wed 13 May 2026 09:00:52 +0000
Manifest this update: Wed 13 May 2026 09:00:52 +0000
Manifest next update: Thu 14 May 2026 09:00:52 +0000
Files and hashes: 1: A5aaE8t8Nxi9NxdxJijnqxszsKU.crl (hash: Bq/8pbkppEEugxtb/RA9xGEa+WfkXPHWYV0a2zZVW3s=)
2: ns2_9RvIYkB1i9QUreo7mZCNFB4.roa (hash: hRy6vBXZocA8W5sz3dmk0IcTUrCvsfp79eJVXqITSXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:47:b6:75:0f:a3:47:c9:05:f3:ea:bd:ca:8d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Validity
Not Before: May 13 09:00:52 2026 GMT
Not After : May 14 09:00:52 2026 GMT
Subject: CN=d892910159d5aee7142d8827f3841d121c5333e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:51:96:99:02:34:e8:88:68:ff:79:25:89:
dd:9e:51:5f:3c:0f:cf:cd:44:53:da:2a:cc:e0:21:
ce:68:ff:58:a3:fd:ee:c4:3f:51:91:da:b9:b4:0c:
15:28:3d:2a:f7:47:7e:62:5d:c1:f3:0f:ed:9e:cf:
58:0c:ec:08:42:ec:46:75:67:37:8d:07:e5:09:24:
a2:66:86:ba:54:40:e0:0d:1f:6e:a7:30:38:c8:34:
1d:34:f8:e6:10:f8:52:9a:6c:f7:12:c4:16:81:a2:
14:71:3e:bf:0a:75:0e:9a:8c:a5:31:97:a1:58:f8:
23:16:b1:9a:3e:3d:61:d9:d4:ee:76:42:cd:c5:d4:
17:8a:72:25:07:06:43:49:bb:fb:50:fb:c2:4f:05:
ca:4e:9e:38:03:ca:09:d4:68:7c:4a:c0:9f:8a:23:
fb:a1:a1:11:f8:27:b1:93:93:bf:85:d7:60:0d:19:
88:84:65:29:65:55:cf:98:0a:a8:9f:d1:b6:e1:92:
72:43:f8:4e:f7:c1:a2:64:58:a2:d9:d3:c7:af:a5:
e7:f2:e4:ee:a1:9b:e5:20:ed:cd:fe:71:5e:58:64:
58:36:ed:9e:97:79:18:de:1c:29:d9:49:77:53:0a:
92:78:24:5f:0d:7f:65:52:a4:a7:11:a2:37:eb:2e:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:92:91:01:59:D5:AE:E7:14:2D:88:27:F3:84:1D:12:1C:53:33:E0
X509v3 Authority Key Identifier:
keyid:03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ac:f3:69:9c:79:79:23:14:31:07:97:ae:dd:58:6f:62:d1:
2c:cf:4d:ea:3e:64:a7:ef:f6:19:df:06:bf:45:3b:79:d7:56:
94:e5:59:63:1b:3f:4d:e8:db:d2:a1:54:eb:de:2c:01:5b:df:
5e:18:fc:1a:bf:e9:2a:c0:bc:14:5b:c5:d2:9e:86:c0:01:73:
0c:54:35:ac:2e:75:23:b0:70:7d:ea:4d:00:97:6e:26:ef:ed:
27:12:50:bf:15:c4:24:6b:ff:18:a2:46:c0:44:79:08:63:0c:
74:28:d9:d0:88:94:db:46:6b:58:58:5d:65:88:e6:7c:b4:f8:
b0:a9:03:0d:22:b1:c4:c0:60:74:57:da:7f:e7:f1:9c:01:9e:
0b:23:13:d8:29:fd:22:9d:13:a6:b1:b2:76:3d:7c:62:e0:d9:
79:92:41:b3:7a:cf:69:f6:c2:6b:57:41:f8:0f:41:bb:ac:b7:
93:01:eb:ac:9c:55:03:3f:27:3c:52:f4:49:fd:55:69:16:48:
2f:87:75:cc:c5:f0:ce:ed:c8:d2:6c:62:b5:51:aa:40:db:60:
ed:92:07:62:20:04:24:eb:0f:69:7c:af:b9:25:cc:b3:4d:b5:
17:5a:7f:e7:b6:1b:f7:76:88:2e:e0:21:cb:9d:fd:00:ea:4d:
35:36:05:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:19:56 2026 by rpki-client