Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
File: a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft (raw, json)
Hash identifier: lxh67ex54b/Wxwy7HCyzBgRXKgEH7T7D1fCLEJzy9ac=
Subject key identifier: DD:4C:FC:5A:33:14:58:F7:8B:E0:35:22:44:ED:01:B8:93:32:27:37
Authority key identifier: 6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB
Certificate issuer: /CN=6b966a7800333799d7cd820e3097116473ca42eb
Certificate serial: 01A0C8589FB36939772CCD922553D0782699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
Manifest number: 019C
Signing time: Tue 22 Sep 2026 09:00:46 +0000
Manifest this update: Tue 22 Sep 2026 09:00:46 +0000
Manifest next update: Wed 23 Sep 2026 09:00:46 +0000
Files and hashes: 1: WrUWqB5jJeFqCbC5EXq-ks26-Bo.asa (hash: F2DPSfLQYJyDePcz+eV6IzbvmlLEE0e2BJutA3Z+nlQ=)
2: a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl (hash: 4f9J7nf0l/1/5Secnu31t3Lcg2g2gUQBNYctvzdNiF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:9f:b3:69:39:77:2c:cd:92:25:53:d0:78:26:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b966a7800333799d7cd820e3097116473ca42eb
Validity
Not Before: Sep 22 09:00:46 2026 GMT
Not After : Sep 23 09:00:46 2026 GMT
Subject: CN=dd4cfc5a331458f78be0352244ed01b893322737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:93:f8:0d:4d:0c:a9:34:11:2a:9d:d7:5f:
b9:4c:b6:92:3a:6e:42:50:02:aa:e0:7d:b4:ad:63:
a7:c3:ed:76:e4:88:f5:b9:dc:c5:e4:12:a2:a6:3b:
9d:ed:10:bb:16:b6:bb:01:f2:3b:a5:cf:7d:c5:ad:
11:1b:e6:50:87:f1:9b:95:95:f6:07:3b:30:ce:56:
ca:25:f2:ff:b1:61:73:47:19:03:7a:18:54:1e:f3:
f8:d7:7b:74:a6:7f:ce:37:1b:b9:9a:9d:1f:5d:42:
94:1e:2c:ae:81:d1:4c:2f:1f:04:42:3e:cc:c7:7e:
0f:cf:99:8a:d9:1c:c9:be:10:97:fc:a6:98:a8:c3:
76:e0:1a:24:ac:6d:ff:49:3a:90:01:97:04:2a:94:
8d:a8:6b:76:91:47:be:8a:43:7c:84:97:e2:17:c5:
70:8d:a4:61:be:7e:bf:5e:c6:a2:bc:c8:81:a7:f5:
69:d9:9c:51:be:37:47:a4:2c:66:35:db:bc:aa:32:
a0:9f:62:f8:17:85:0e:d0:81:98:2a:96:19:3f:39:
41:fe:21:04:25:6a:53:27:a2:c3:d8:fb:a8:c8:54:
c8:57:f5:7f:0b:5f:ed:e5:1f:f2:1d:6a:36:3c:86:
34:e5:f7:67:fb:7c:74:4f:19:8e:4d:a2:93:e5:71:
d9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4C:FC:5A:33:14:58:F7:8B:E0:35:22:44:ED:01:B8:93:32:27:37
X509v3 Authority Key Identifier:
keyid:6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:be:0b:f4:69:e7:64:06:a7:6b:8d:11:7a:6e:73:dd:29:81:
9f:3f:ba:eb:86:0f:ee:e6:8c:31:81:02:b7:90:4f:e3:3b:46:
bc:7f:e1:e6:3f:a8:2a:90:0f:a7:ec:c5:16:e2:36:5c:cf:07:
97:e7:bf:c8:64:1f:75:c4:d8:fe:63:33:37:ea:43:20:23:8b:
9e:f1:6d:79:80:28:ce:99:ca:ec:bf:e2:c8:50:22:c0:81:62:
3b:10:4a:ec:b5:c3:51:68:d2:93:4f:d3:9e:6b:a8:df:14:fa:
f3:6a:b9:fe:6d:fa:58:06:b4:61:b3:87:e6:6a:8f:f8:fd:d5:
c6:51:eb:66:49:36:29:06:74:23:cf:4c:ff:b6:8d:8e:3a:4f:
b8:a3:04:36:eb:39:43:db:5c:d9:1d:5a:c5:8b:ed:7f:c7:93:
35:95:a5:e2:92:f0:ea:a3:a3:5f:e3:f7:40:17:3e:96:7a:52:
b3:26:eb:64:69:25:de:48:93:2d:ff:dd:6a:54:b2:ea:64:d8:
bc:6c:3e:6a:d8:8c:a1:4b:1f:94:7f:a3:ae:f5:70:b1:bc:cd:
42:33:69:7d:35:2f:7d:79:1f:b2:e9:8b:54:84:e1:7a:f9:60:
1c:f2:15:64:fe:b5:ac:15:73:73:e4:7a:e5:bd:f9:a9:8d:19:
29:a9:31:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:02:41 2026 by rpki-client