Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
File: a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft (raw, json)
Hash identifier: oUZZprw8dk+4r9VUkZrA98OiPaIx/29xwbt35vrXJgU=
Subject key identifier: F2:AA:6D:A4:86:90:DA:BD:0B:7F:24:A5:06:D2:63:F2:6E:BC:31:DA
Authority key identifier: 6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB
Certificate issuer: /CN=6b966a7800333799d7cd820e3097116473ca42eb
Certificate serial: 019FA899404D808A4C17126D71DE49E56BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
Manifest number: 0107
Signing time: Tue 28 Jul 2026 12:00:43 +0000
Manifest this update: Tue 28 Jul 2026 12:00:43 +0000
Manifest next update: Wed 29 Jul 2026 12:00:43 +0000
Files and hashes: 1: WrUWqB5jJeFqCbC5EXq-ks26-Bo.asa (hash: F2DPSfLQYJyDePcz+eV6IzbvmlLEE0e2BJutA3Z+nlQ=)
2: a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl (hash: rD+89EOAUK/qHK+X8iE5w7MAZK8Tl5C0XBhfmr+a0u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:40:4d:80:8a:4c:17:12:6d:71:de:49:e5:6b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b966a7800333799d7cd820e3097116473ca42eb
Validity
Not Before: Jul 28 12:00:43 2026 GMT
Not After : Jul 29 12:00:43 2026 GMT
Subject: CN=f2aa6da48690dabd0b7f24a506d263f26ebc31da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:3a:7a:24:fd:53:67:4d:b2:36:d4:8e:6f:
7e:63:b7:d3:cb:06:9e:61:1a:cc:71:de:e9:c0:46:
87:a8:7f:79:60:93:cd:12:dd:64:49:ca:f4:e3:c2:
8c:d0:2e:c8:40:1e:47:0f:af:3a:6f:d0:35:f4:7c:
ae:df:83:f3:79:0c:2b:21:0c:f6:b2:d3:4c:de:92:
85:2a:f5:99:0f:6f:e9:d0:f8:6d:3f:d8:52:d5:08:
1f:1d:09:f5:2a:d5:91:6d:dc:5c:4a:60:ba:f9:5b:
45:71:b9:6f:eb:ea:c5:d7:75:3c:c7:3c:ae:47:0e:
15:a8:02:f6:61:d7:d1:4f:3f:75:78:93:2e:72:f0:
43:87:ea:b4:dc:2e:b4:7a:16:9c:68:72:f2:70:e8:
4e:68:b6:ec:1a:6a:90:27:a3:50:b2:1b:59:03:cb:
72:ad:eb:5a:c8:49:7d:20:96:6d:2a:25:98:8b:9b:
99:74:b0:8e:ea:fd:f7:89:f1:6d:d3:be:6c:03:84:
34:3d:84:55:68:66:0f:bd:2f:ca:49:73:3d:fb:31:
c8:34:b6:c1:6b:e0:75:78:3f:68:8d:a4:f0:de:7d:
f2:ce:01:b2:5f:db:c2:20:50:9f:55:3f:3a:52:cf:
f8:3f:31:22:48:22:04:da:c1:4d:3c:2a:f0:d2:17:
6b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AA:6D:A4:86:90:DA:BD:0B:7F:24:A5:06:D2:63:F2:6E:BC:31:DA
X509v3 Authority Key Identifier:
keyid:6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b7:e7:e0:b3:9d:5a:be:31:86:4b:80:ca:40:05:cc:39:2e:
5c:2d:47:c3:f7:6d:e2:89:81:18:9c:1d:b0:55:f4:d6:3d:b1:
fc:41:26:6d:f1:17:08:dc:65:e4:4d:40:11:79:5e:82:7c:ff:
78:82:60:5b:57:82:09:2f:9a:54:3c:5d:04:df:41:aa:1e:de:
90:f9:dd:b3:94:d9:c1:57:23:87:03:b8:02:e2:a6:af:7a:ef:
eb:96:da:af:67:d5:b5:e0:37:04:33:33:dd:40:68:cb:d6:29:
0b:f7:98:c8:28:50:78:0f:0a:78:6a:e9:bf:27:1e:ac:34:19:
5b:0d:60:d4:93:e6:87:cc:a9:cc:35:2f:4d:da:8a:5f:48:59:
21:c7:a6:14:8a:61:bb:33:0d:a5:a3:b6:fe:a6:12:28:72:48:
37:4a:a7:2b:a0:07:71:a7:d8:a6:f3:e9:d1:29:8e:cd:ae:dd:
18:ce:df:3d:7c:31:c7:e8:70:15:38:8a:f4:6b:72:8e:ce:5e:
38:55:20:4c:9e:92:18:3e:6b:9e:3a:8d:b7:f7:80:49:f1:a6:
2c:79:df:0a:b3:21:47:a7:93:50:34:f1:57:bd:ac:ec:f7:87:
80:e9:e0:4b:92:ce:f5:00:27:08:97:00:18:81:29:92:49:d0:
59:a7:66:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:06:55 2026 by rpki-client