Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
File: a1zOqpdLKQWssmKvRSwCKAMWqrs.mft (raw, json)
Hash identifier: gUv5S+YrzOK8P1W3+bFeeCKdes8/TPeztkP0piL74n8=
Subject key identifier: 53:A6:85:0A:6D:73:A4:86:DE:13:1A:EA:D2:29:94:71:F8:E1:72:3F
Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
Certificate issuer: /CN=6b5cceaa974b2905acb262af452c02280316aabb
Certificate serial: 019D2816FC1E09716FADF5FD18FF1D4F7305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
Manifest number: 07C5
Signing time: Thu 26 Mar 2026 03:01:27 +0000
Manifest this update: Thu 26 Mar 2026 03:01:27 +0000
Manifest next update: Fri 27 Mar 2026 03:01:27 +0000
Files and hashes: 1: 6jji6GeuDi-28zZLjTZ0rqsVQ5g.roa (hash: jhgAVRcRyQTR4kfw/aMMXP8njp+EzzXJbfCtIYZkQOE=)
2: a1zOqpdLKQWssmKvRSwCKAMWqrs.crl (hash: WepMmk0JUOhylxdOVf9NGUwB4EWKQzziu7lxOYWXocs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:fc:1e:09:71:6f:ad:f5:fd:18:ff:1d:4f:73:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb
Validity
Not Before: Mar 26 03:01:27 2026 GMT
Not After : Mar 27 03:01:27 2026 GMT
Subject: CN=53a6850a6d73a486de131aead2299471f8e1723f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:07:03:e5:1f:e3:34:61:e3:3c:59:97:a6:9c:
7e:50:12:09:b2:e1:99:58:b3:49:d2:8e:ae:e9:8e:
77:a6:89:b5:27:af:71:b3:6d:ac:3a:9e:16:d6:b2:
47:86:40:e7:14:4a:b8:b5:d2:5c:f3:f9:3a:d4:79:
85:10:32:46:2e:27:3b:ec:33:8f:7c:f0:c1:39:b4:
d5:b2:21:89:96:db:69:6c:53:22:ec:be:06:e6:d5:
59:ae:10:3d:f6:bc:7d:a1:27:18:f3:60:0e:df:3a:
f5:14:a1:be:4a:87:af:81:c9:3e:13:02:0d:7e:42:
30:95:1c:cd:72:c2:99:5c:be:ea:38:c3:76:8d:e2:
f5:b7:b0:b2:7d:d6:c0:3c:da:cf:85:f8:38:6a:ac:
0b:44:c0:97:a9:28:42:49:87:73:47:ef:6a:f0:fb:
f0:56:9e:4d:93:72:5f:b1:f4:82:6f:72:0b:b2:e0:
e5:18:66:dd:b4:5c:19:56:34:7e:43:b3:05:91:b6:
59:82:20:6a:9e:a4:d2:20:cc:bc:c5:b8:cd:e3:be:
75:dc:42:31:b6:ab:81:1b:4f:38:80:1f:54:09:c1:
18:dd:bc:2d:ab:c0:1f:63:c7:6f:7d:ec:d8:95:9d:
d1:4c:15:a5:d0:c5:e3:47:48:4a:23:96:25:43:c5:
71:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A6:85:0A:6D:73:A4:86:DE:13:1A:EA:D2:29:94:71:F8:E1:72:3F
X509v3 Authority Key Identifier:
keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:94:a0:89:46:ab:e1:d2:ed:16:d8:cc:a2:0b:a3:82:01:c4:
4e:b9:13:97:0e:2d:d8:84:dc:97:5c:70:2d:b6:ce:31:5c:f6:
1c:f5:95:33:83:84:91:44:7e:01:12:f7:ff:71:d8:1a:87:b3:
ce:ee:04:f0:0e:0c:58:af:3e:2f:37:13:56:82:c0:6d:66:54:
eb:35:48:76:42:2b:a2:ac:c9:ae:ab:0d:fe:53:09:f9:07:97:
8b:d3:1b:84:62:ee:74:35:d3:ea:7e:e7:f8:a9:40:26:c5:7d:
4c:e3:cb:76:14:60:b5:04:bc:e1:8d:ff:22:f6:78:01:98:04:
58:cb:53:e6:82:b9:d1:78:b2:c0:13:f3:46:8c:d4:57:17:1b:
41:e9:d8:01:cf:9c:a2:02:f9:31:88:6d:72:fb:ce:5d:12:d6:
3e:5d:34:16:b8:8d:fe:96:3d:6c:7c:6e:7c:5c:ee:53:7a:8a:
2b:f0:c7:b0:87:2f:2a:42:9b:15:20:16:67:20:c6:b0:29:78:
63:ca:43:99:eb:e5:74:66:19:92:0e:9e:6e:ab:bb:fa:2e:8a:
4c:a9:e1:e5:89:81:aa:93:08:07:b6:3f:9d:19:ad:9a:1c:a2:
e5:e4:66:72:49:39:86:00:3d:79:e9:83:33:4e:87:13:de:d9:
b9:ac:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:24 2026 by rpki-client