Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
File: a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft (raw, json)
Hash identifier: DM9d+gjUgzjL9n+PQhLQ2qBgQ59VzKuDVl65iFFHuNU=
Subject key identifier: 8F:E9:FD:34:00:05:22:FA:D5:EE:27:60:41:AE:8B:5A:DA:84:09:37
Authority key identifier: 6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB
Certificate issuer: /CN=6b966a7800333799d7cd820e3097116473ca42eb
Certificate serial: 019EBEECBCC73C057F5C772EDF196EE48F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
Manifest number: 8E
Signing time: Sat 13 Jun 2026 03:00:46 +0000
Manifest this update: Sat 13 Jun 2026 03:00:46 +0000
Manifest next update: Sun 14 Jun 2026 03:00:46 +0000
Files and hashes: 1: WrUWqB5jJeFqCbC5EXq-ks26-Bo.asa (hash: F2DPSfLQYJyDePcz+eV6IzbvmlLEE0e2BJutA3Z+nlQ=)
2: a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl (hash: B2c7uMZt2fDlJkvKg52scOVgmuPgj6om7L8gTfz8wSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:bc:c7:3c:05:7f:5c:77:2e:df:19:6e:e4:8f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b966a7800333799d7cd820e3097116473ca42eb
Validity
Not Before: Jun 13 03:00:46 2026 GMT
Not After : Jun 14 03:00:46 2026 GMT
Subject: CN=8fe9fd34000522fad5ee276041ae8b5ada840937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:65:84:28:a8:74:7d:25:69:88:61:97:13:18:
7b:6d:5c:36:60:d3:fc:cc:a8:81:89:e9:eb:44:9d:
5d:8f:1f:ea:4a:4c:20:04:e0:7e:23:1a:31:59:18:
3f:e6:37:88:5b:0b:cf:ea:28:dd:9e:3e:00:2a:be:
9b:e9:4c:88:6f:41:f5:04:95:b8:c7:ec:07:8b:19:
d2:58:14:8d:ba:a6:99:6a:e9:07:27:5b:ec:46:04:
c2:ab:e0:bf:45:8a:23:2f:0b:21:ed:cc:80:a8:a0:
34:74:c8:37:7f:47:48:e5:25:f1:76:5f:03:36:c1:
c8:72:01:6e:0b:02:f2:11:76:e2:39:85:16:18:18:
86:7f:dc:d8:ca:a2:5e:16:cf:e0:58:96:7a:d0:a3:
93:19:c4:67:bb:0a:94:52:7e:f3:6b:52:9a:1b:45:
e2:ae:1e:07:00:22:db:d0:4f:51:fc:9f:b8:78:92:
62:fc:c8:c2:d4:7e:ba:05:c9:1a:6a:b6:fb:c0:f3:
2b:d7:12:ef:50:26:5a:bf:d1:86:0f:64:45:84:42:
80:03:b2:30:26:38:6d:ba:f6:da:61:60:6c:cd:3f:
65:a7:a0:32:38:f8:21:1d:ce:ad:5c:4d:75:f4:21:
a0:58:eb:3d:1b:27:6a:c3:6f:57:69:c0:1d:bf:95:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E9:FD:34:00:05:22:FA:D5:EE:27:60:41:AE:8B:5A:DA:84:09:37
X509v3 Authority Key Identifier:
keyid:6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:55:87:3e:34:bf:ed:6e:bd:34:cb:c5:df:ef:21:52:eb:db:
57:cf:c1:a7:aa:9c:95:26:e8:2c:fe:00:92:76:41:22:31:80:
02:9d:d7:2f:4b:4e:77:16:b6:b7:fb:e4:33:10:6e:36:9f:67:
75:3e:ef:b2:51:49:07:c3:52:8f:3d:4e:8f:12:08:47:c2:b6:
f7:08:27:4b:18:14:e1:05:1d:6f:ab:03:36:90:b7:e1:b8:30:
19:95:c1:bb:dd:9e:9e:bc:70:59:a7:9a:67:76:1f:c3:e5:a9:
14:f6:7d:59:13:f4:fd:2c:1e:53:78:76:79:fc:c1:9d:df:53:
ba:40:f9:f4:e9:24:5c:d5:7d:a8:ac:69:9d:cc:a7:d6:b9:e0:
88:b9:37:60:1f:c6:d2:ba:55:19:8b:67:da:45:7b:c5:91:c5:
bb:9d:10:0d:b3:89:a6:3a:ba:38:89:0e:2a:ce:f3:9a:d1:33:
4a:50:d3:1e:9b:a0:47:46:1e:e8:92:b2:10:be:ae:f8:70:d1:
49:a2:b2:ae:54:34:f2:9e:84:6f:8e:f4:c1:a3:98:74:a8:76:
96:1a:86:dc:64:66:e0:d9:f5:d0:cc:ff:2c:c5:d8:61:1c:76:
f0:86:e0:00:4c:14:af:19:b4:69:46:22:d6:6e:7e:53:7b:a5:
1d:20:73:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:53 2026 by rpki-client