Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
File: A5aaE8t8Nxi9NxdxJijnqxszsKU.mft (raw, json)
Hash identifier: 4RROtdmw9vBjBQOTwtIbJuvno8FJitsiJWirFf8pqHw=
Subject key identifier: 68:93:D9:0C:9C:B7:22:00:5A:97:CA:B6:80:8B:CF:D1:CA:39:2C:A6
Authority key identifier: 03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
Certificate issuer: /CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Certificate serial: 019F8F7DCEA88D04F73DC0C54A73093694BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
Manifest number: 0DF3
Signing time: Thu 23 Jul 2026 15:00:14 +0000
Manifest this update: Thu 23 Jul 2026 15:00:14 +0000
Manifest next update: Fri 24 Jul 2026 15:00:14 +0000
Files and hashes: 1: A5aaE8t8Nxi9NxdxJijnqxszsKU.crl (hash: +5pJSnW5ExERDzdHCZ7pDx8+d644YBcQotwDXZuRgM4=)
2: ns2_9RvIYkB1i9QUreo7mZCNFB4.roa (hash: hRy6vBXZocA8W5sz3dmk0IcTUrCvsfp79eJVXqITSXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:ce:a8:8d:04:f7:3d:c0:c5:4a:73:09:36:94:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Validity
Not Before: Jul 23 15:00:14 2026 GMT
Not After : Jul 24 15:00:14 2026 GMT
Subject: CN=6893d90c9cb722005a97cab6808bcfd1ca392ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:21:ec:9c:a5:96:80:f8:76:e3:b3:5c:4d:55:
44:65:02:cd:32:88:7a:d2:86:38:c3:b9:01:b7:b5:
6a:f7:09:8f:fc:a3:5f:9e:d2:a7:cc:d9:45:ec:9e:
b8:b6:d5:19:95:45:d2:7f:ce:e9:ad:3d:b3:ec:d9:
17:07:48:46:ca:dd:c2:b6:3a:4b:21:9e:2f:4f:b3:
e3:25:d3:45:4f:4e:39:00:7e:c7:ae:37:af:aa:ac:
1c:63:5c:b3:ec:1f:52:d9:c9:0b:54:e4:c9:ac:1c:
f4:74:66:8e:ad:98:93:aa:59:83:d7:22:84:c4:ed:
7d:b7:3a:38:67:4b:3c:2a:d7:f8:1f:ce:fd:7f:70:
8f:4f:88:07:ff:64:44:59:26:b6:47:64:24:df:e1:
26:9b:b3:22:34:e5:8b:f0:e1:e0:c5:14:f9:7f:f8:
81:0b:8e:10:78:1b:52:2a:ad:9b:ee:b9:33:82:c1:
8f:46:f5:dc:c7:a5:97:0e:49:39:5f:65:28:8b:f1:
35:09:25:2e:1f:19:30:bb:c5:c4:74:ef:dc:5e:5d:
93:c3:6b:5f:e4:68:32:34:34:5c:36:a9:e0:af:e4:
ef:ff:81:ba:9e:ec:d8:88:49:e1:66:e9:08:2e:c2:
90:09:b1:86:f7:4d:f8:30:d8:37:a7:ee:6a:48:6a:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:93:D9:0C:9C:B7:22:00:5A:97:CA:B6:80:8B:CF:D1:CA:39:2C:A6
X509v3 Authority Key Identifier:
keyid:03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:13:ee:19:58:eb:2a:db:83:a0:fb:ae:18:77:8b:ac:f5:fe:
ca:d6:4c:93:bf:df:92:29:06:c2:9b:54:78:a0:0e:1d:44:0f:
60:eb:99:e1:f6:49:b9:08:94:f1:03:48:1a:d7:f8:5e:f9:9b:
28:ae:27:0d:43:79:0b:bc:bd:ab:39:8f:36:34:e8:31:6d:e7:
3b:62:9c:ee:17:b2:2c:0b:48:31:a9:3a:46:7e:b2:be:f1:ec:
3f:68:b7:bd:ef:fc:e4:50:cf:ff:14:0c:98:78:f6:e8:3f:f1:
cf:1b:ed:7e:fe:fb:0d:07:4d:60:44:81:52:81:32:50:5a:5b:
77:4e:d5:75:f3:69:57:7f:ad:b9:8f:95:a6:1b:a9:0a:66:5e:
d1:36:91:9b:68:2d:db:7c:76:3f:81:49:84:f5:b4:09:e7:d0:
8b:cf:7c:76:b0:a6:56:5e:7e:78:d0:44:15:7b:18:69:68:97:
5a:94:ae:03:15:15:58:97:8d:e2:ce:23:c7:2d:c8:c7:2c:e7:
9c:12:45:c4:8a:39:e1:01:d6:d2:e4:b4:63:ed:70:96:9a:cc:
ee:7b:3d:36:2d:73:c8:c2:25:33:2d:74:b9:f8:e1:dc:eb:e4:
ec:93:4d:9b:94:2e:af:55:ed:57:12:ca:18:49:2f:fe:12:e0:
0b:6c:29:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:00:52 2026 by rpki-client