Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
File: a5p0BaYIXJq6zwg9yQpJX80mjPg.mft (raw, json)
Hash identifier: opdkMxD5f16YQO3IZkS6GdyRyCQgIZyYDsymjYr2Spg=
Subject key identifier: F9:58:48:F5:1A:F8:00:F7:40:9A:91:63:18:B4:6D:C0:DD:18:93:DA
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Certificate issuer: /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial: 01A0E4072E200585C04FE189FC1AA73365FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 18:01:10 +0000
Manifest this update: Sun 27 Sep 2026 18:01:10 +0000
Manifest next update: Mon 28 Sep 2026 18:01:10 +0000
Files and hashes: 1: UB7uA7qZY4hotmQ_gspaCGyzzn0.roa (hash: rFiUkvV2QoRGRwKB4Ob/3EoVrYVbZPcUNtTj1otQ3PQ=)
2: ZthW5Kx3nnyHShrf3oe0_B7fMkE.roa (hash: 6QVqgqpQ7L5V1ofPTuomvtP1OHn9ZAgQxlpd3xTRTEU=)
3: a5p0BaYIXJq6zwg9yQpJX80mjPg.crl (hash: BBwHXbYY0Qm5ptMnDNq3V5h1WsRqaCYFYPT5qlU3lIE=)
4: woWrtfbpVBQC0d9nYGwEpRD6cSA.roa (hash: LNM1xNCNG/q1EK1QvoIE7h4vxMboHIOphEup0ou6cwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:07:2e:20:05:85:c0:4f:e1:89:fc:1a:a7:33:65:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Validity
Not Before: Sep 27 18:01:10 2026 GMT
Not After : Sep 28 18:01:10 2026 GMT
Subject: CN=f95848f51af800f7409a916318b46dc0dd1893da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:11:c6:de:0c:25:c9:89:7d:12:ae:a6:4a:4d:
36:4e:3f:6e:82:ca:78:44:1c:c6:e7:14:a8:8c:66:
27:5b:f7:8d:a1:a7:e6:a0:00:c5:5d:5d:f8:17:df:
6c:fd:d3:e4:da:93:94:c6:95:5a:32:79:14:8f:6b:
0e:7d:b9:b3:85:69:0a:d0:34:5e:3f:86:b5:82:f5:
da:67:42:c0:f7:bd:5a:c5:99:70:98:5f:b3:96:8c:
c4:20:7d:49:f5:fa:dc:0d:ce:6c:35:94:5f:aa:7b:
9f:70:2b:5d:f1:61:47:05:a5:70:ec:70:fc:ef:b1:
19:fc:fe:59:93:34:eb:bd:43:38:22:b1:74:c2:0f:
47:4f:14:4e:5a:32:84:41:cb:5f:af:cf:0f:94:58:
50:34:57:ca:ed:6d:b2:51:e7:47:b3:dd:43:cb:e1:
be:93:44:bb:93:ef:2b:3c:04:74:e1:b6:36:64:ab:
41:4b:47:c9:2a:f6:da:d6:88:6f:03:3b:c2:74:0b:
f3:3e:75:77:fa:fe:03:df:9c:09:f4:fd:06:b6:de:
d5:89:b0:17:6b:41:ce:9a:7a:22:83:7e:db:be:bc:
cd:ad:ca:cd:b5:24:ae:d2:be:7e:89:b6:51:04:3d:
be:10:46:6c:e4:38:75:68:47:b8:ea:c6:c2:6a:95:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:58:48:F5:1A:F8:00:F7:40:9A:91:63:18:B4:6D:C0:DD:18:93:DA
X509v3 Authority Key Identifier:
keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:33:8b:70:fd:6f:a0:c2:eb:33:12:7d:5a:ff:2c:f3:57:82:
4b:df:b2:c5:40:68:8f:a9:8a:54:dc:30:21:c8:ef:b4:05:66:
d6:6f:42:56:77:3d:35:0e:4b:b5:4b:ee:9c:a0:b3:89:00:71:
ab:57:96:e6:ef:9d:c4:f2:35:77:18:c2:e3:18:16:e8:49:34:
6a:5b:d8:95:ea:e7:50:5e:0a:83:fe:55:79:15:4e:d6:e1:24:
36:c4:5d:6d:cf:19:d9:1e:8d:ef:8b:02:11:eb:f8:9b:96:8c:
6d:ad:6e:28:fb:30:f8:59:d1:21:ce:d8:83:0d:1b:d9:e1:af:
c5:16:90:dd:1f:78:70:ff:88:d9:04:0b:6b:6c:3b:0f:8e:9d:
c1:7e:db:7e:c1:03:a9:9a:b9:7e:06:a6:b8:26:78:e1:27:b7:
e9:2f:14:00:d0:6e:e5:36:7b:96:f2:36:38:06:5f:d4:7f:83:
72:ee:4b:c1:bb:32:bc:12:eb:5f:28:09:1c:0a:35:be:50:d5:
a6:9a:ee:20:22:f8:2c:3d:0b:fb:53:c2:10:53:77:2b:a9:44:
10:ca:54:51:21:11:ea:06:fc:30:b5:c0:90:48:26:dc:bf:ab:
53:5b:92:1d:83:96:f3:f0:17:46:f8:3e:31:8c:4c:a4:17:62:
61:0d:e0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:53:33 2026 by rpki-client