Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
File: A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json)
Hash identifier: VoymuFutjIkqWCh3NYyfI1g2wdPxfguAgrzLOA20z/U=
Subject key identifier: 59:68:74:E4:70:CA:28:F4:64:B6:06:35:7E:25:EB:BF:EA:07:85:BE
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial: 019EBDDA59C685C2EB46E5ADC46895BF99B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
Manifest number: 09C4
Signing time: Fri 12 Jun 2026 22:01:03 +0000
Manifest this update: Fri 12 Jun 2026 22:01:03 +0000
Manifest next update: Sat 13 Jun 2026 22:01:03 +0000
Files and hashes: 1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: vw4DG0DiEhvF1+3r4puDqfZZMa2vvdQVVHb22ddI6iQ=)
2: DALU3tcvOFTYsZrsDs2f4e9axOI.roa (hash: ebFcRHw5U0MTTaA0PwzsRWLgtLL3PnreXj9riBF5Jv0=)
3: ngE7Yefr8Kh8jZEtVDnS3arKhqU.asa (hash: 3GsUcPKh0tqn8pSBgRUlUFyh+eu6y6bpI0iAqEsI4q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:59:c6:85:c2:eb:46:e5:ad:c4:68:95:bf:99:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Validity
Not Before: Jun 12 22:01:03 2026 GMT
Not After : Jun 13 22:01:03 2026 GMT
Subject: CN=596874e470ca28f464b606357e25ebbfea0785be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:d1:c8:91:3c:93:6c:37:f2:65:ad:04:74:
a4:28:62:0d:e9:ea:e6:79:33:58:53:d1:f6:75:4f:
24:2d:ff:36:d4:d0:73:46:c5:db:5f:4d:0c:b8:d9:
bc:c0:76:9d:c3:8e:c5:3c:bd:ca:9a:7e:58:2c:3c:
dc:fa:1f:7e:33:8b:18:97:71:26:b5:95:fe:0b:2a:
cf:82:1b:3a:1d:3c:fe:c2:68:cc:63:35:95:80:0d:
ac:f6:6b:d3:8f:ba:89:54:e9:c7:49:72:d4:48:48:
19:2c:c0:21:fc:c3:43:d6:3f:c5:18:39:bf:ad:73:
2e:4f:dc:ba:86:80:03:37:c8:5e:33:9e:40:64:a1:
cc:86:29:c8:eb:41:57:93:4b:41:15:50:ec:02:1a:
a6:d1:d4:4b:3b:8c:d8:0c:eb:9b:78:7d:06:91:94:
0e:eb:27:8f:ec:26:10:5b:a9:f7:31:45:0f:22:84:
e3:53:4e:5d:01:b5:af:25:d7:49:5e:dc:08:aa:7c:
ce:5e:5e:5d:3a:51:02:59:4c:f4:f2:f0:9d:68:88:
7d:ec:1f:73:25:be:57:59:7f:48:5c:3b:de:72:09:
3c:d1:ed:61:22:61:b8:91:20:78:cd:aa:4f:93:d3:
15:4a:e0:5c:fa:0a:23:d1:22:eb:a2:62:ab:79:31:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:68:74:E4:70:CA:28:F4:64:B6:06:35:7E:25:EB:BF:EA:07:85:BE
X509v3 Authority Key Identifier:
keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4e:4c:17:96:9a:aa:f5:09:92:24:c1:81:4a:7a:4a:d9:54:
50:a4:b0:87:f3:9f:34:db:02:2c:56:9a:e6:49:d0:6e:71:9e:
47:cb:46:51:70:03:92:c0:10:e5:92:1a:03:c4:02:d3:8a:26:
7a:57:31:9d:c0:62:26:2b:b7:c0:93:e6:bb:c2:f3:5c:12:4f:
b3:29:d0:4f:45:7d:48:37:45:d2:a9:7c:71:65:1d:44:02:97:
eb:12:a6:10:65:47:d5:33:9f:a6:02:f4:37:04:16:d1:2c:9f:
74:d9:a2:48:2d:7e:c1:c1:8b:60:ad:e7:fe:31:2c:8b:84:95:
a5:b2:c4:a0:12:c0:10:70:66:98:5e:a3:bb:34:b9:73:04:ff:
ce:90:4f:75:fd:82:6b:3a:df:f3:7c:b1:37:ec:45:a7:a4:b2:
4e:fd:9d:c4:b1:3c:d7:07:c5:03:82:58:a3:e4:70:7e:cd:46:
71:90:4c:f9:d6:a8:f1:c2:52:91:ad:32:b1:a4:0c:e4:4c:dc:
fe:ce:1e:c5:2c:10:92:d1:a3:55:e9:35:f4:75:a8:81:ce:99:
fd:e4:ec:65:23:b6:9b:48:99:38:de:b1:2d:9e:f5:3a:d1:7b:
a7:0f:54:62:fe:01:88:af:6c:0c:5f:3e:92:2a:ec:6b:43:bd:
93:d1:9f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:34 2026 by rpki-client