Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: rpG+TthlpHenpfuDSRxnSUyhXAqerIqRVuy3/2NHYQA=
Subject key identifier: 40:4D:F2:C4:14:62:24:1E:74:ED:62:40:07:93:80:09:8C:33:E5:52
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 019E1EA2E74B377273D583F7B3F090BB7762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 0935
Signing time: Wed 13 May 2026 00:00:52 +0000
Manifest this update: Wed 13 May 2026 00:00:52 +0000
Manifest next update: Thu 14 May 2026 00:00:52 +0000
Files and hashes: 1: KtxgiXPBK2OwoC3ywjIlMfN-WUQ.roa (hash: 82rT1wn8tLHS3yTCKW0vJmoxGtSf+pDEWCX5BqeTJXM=)
2: WjMwl8ZfVOdoyhMOTA8BMehWEJI.roa (hash: RHZCcknMsS5tx01/QhJWB8dlrXaXtmtm/9S2WPp95p0=)
3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: 3PoxMemf0lYWgQzCbY4mKcIHnuE6q41vBn/j8tZKUFk=)
4: kKa1XAZi28YxfpB3mEQct4rM5D8.roa (hash: WRwHyOAs556xA5lR2SanPEOIWdbcPQ5+gONgps5Y/Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:e7:4b:37:72:73:d5:83:f7:b3:f0:90:bb:77:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: May 13 00:00:52 2026 GMT
Not After : May 14 00:00:52 2026 GMT
Subject: CN=404df2c41462241e74ed6240079380098c33e552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:82:76:97:fb:36:44:92:df:29:b4:c3:44:
7e:0b:ef:3f:fe:39:75:59:7d:98:3f:0a:46:44:9b:
ce:bd:bc:3c:f1:13:e3:e6:76:a6:34:a6:2a:46:cf:
3b:9a:f3:e1:03:34:5b:01:fb:63:71:61:e0:25:11:
35:35:00:6d:5d:ff:ae:76:e8:11:5a:ce:e2:d7:3f:
86:4f:bf:b1:cc:99:24:df:1e:27:a9:c9:16:8c:2b:
a0:91:4b:b8:a0:62:f3:34:0d:99:73:8a:24:7e:ff:
dc:5d:7a:b8:6e:fe:71:16:9a:96:65:7a:45:00:f9:
39:90:33:89:ca:d0:3a:22:89:b4:40:86:b7:c4:ad:
79:b9:2d:d0:00:ec:27:0c:4e:83:6e:d7:b9:c4:4e:
11:ac:cb:38:cb:53:af:b9:ae:6f:c7:31:1e:a1:c4:
9c:a4:e7:20:b5:9e:f6:42:0d:33:9e:9d:4e:5d:60:
e6:eb:1e:18:36:15:10:8b:a2:b9:b2:ec:25:41:67:
6e:19:7f:cc:4b:72:09:78:08:1d:50:f8:8b:f2:65:
13:99:f6:0a:ed:1f:81:e1:2c:30:95:98:e7:64:e6:
5c:2e:cd:32:e5:bc:e0:5f:dc:6c:7d:f0:16:42:0b:
9b:6a:1f:b9:f9:c0:25:26:8e:27:63:2b:cc:d2:44:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4D:F2:C4:14:62:24:1E:74:ED:62:40:07:93:80:09:8C:33:E5:52
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:83:6c:d1:c8:10:d6:0f:8f:44:91:a8:fd:d7:3f:70:eb:c6:
12:af:23:75:75:dc:9d:24:d9:8c:cb:9a:29:31:12:f7:b0:69:
f7:e4:43:a5:66:60:f1:e7:7f:90:f5:7c:69:71:4b:42:dd:95:
eb:95:07:89:24:f0:8c:35:e1:2e:cb:b5:7a:d0:e3:94:df:94:
ef:53:5b:ae:3d:b9:5e:f8:db:84:59:91:4b:65:f6:9b:f4:b5:
92:30:29:af:43:ce:10:00:2e:72:ca:b2:63:78:e9:30:03:91:
2d:12:08:f1:0e:87:43:3b:d9:b6:b6:a6:cf:a5:87:a8:01:1a:
74:35:e7:9b:d6:fa:40:a7:a1:a2:6f:c0:dc:72:82:b4:19:4c:
e8:33:e3:20:02:8b:c4:fb:56:57:62:4c:1a:af:66:04:d6:a8:
1e:ef:84:78:48:b8:c1:34:74:35:7e:df:c5:d3:62:ea:5f:b2:
4c:95:d2:91:b5:fc:36:de:7b:ee:6a:12:1c:47:7d:e6:7b:86:
30:b8:54:1b:ac:ab:1b:04:27:c4:05:67:e9:db:91:49:22:d1:
da:c6:2d:33:f7:ca:68:43:f7:8a:a5:a5:00:7b:92:29:5f:3c:
7d:9f:e0:4d:87:4c:34:94:9a:08:bd:5a:0e:62:36:f6:f2:e7:
a0:f2:a5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:44:25 2026 by rpki-client