Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: gOprC2pCMFLkzn5NdXyJmt+YgsoNrtLVHOrMpFH6xoE=
Subject key identifier: 0A:47:2C:45:08:9B:01:63:0E:3D:A5:E5:36:A6:02:3F:5E:DC:C3:19
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 019CABD9BF5369BA50881041F21574139EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 0875
Signing time: Mon 02 Mar 2026 00:01:39 +0000
Manifest this update: Mon 02 Mar 2026 00:01:39 +0000
Manifest next update: Tue 03 Mar 2026 00:01:39 +0000
Files and hashes: 1: KtxgiXPBK2OwoC3ywjIlMfN-WUQ.roa (hash: 82rT1wn8tLHS3yTCKW0vJmoxGtSf+pDEWCX5BqeTJXM=)
2: WjMwl8ZfVOdoyhMOTA8BMehWEJI.roa (hash: RHZCcknMsS5tx01/QhJWB8dlrXaXtmtm/9S2WPp95p0=)
3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: Vf61Rmcks+cLH+UBPMLX7MX29Yomy4Hq6mANoOZymTc=)
4: kKa1XAZi28YxfpB3mEQct4rM5D8.roa (hash: WRwHyOAs556xA5lR2SanPEOIWdbcPQ5+gONgps5Y/Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:bf:53:69:ba:50:88:10:41:f2:15:74:13:9e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Mar 2 00:01:39 2026 GMT
Not After : Mar 3 00:01:39 2026 GMT
Subject: CN=0a472c45089b01630e3da5e536a6023f5edcc319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:08:b7:88:9a:50:38:64:51:e2:7c:a5:a0:
09:e3:be:ad:e6:51:c7:c3:91:07:a2:11:71:fe:97:
a9:b1:d7:a9:8c:be:bf:9a:5c:3f:00:bf:7c:84:4a:
69:e9:2c:aa:6b:30:3f:fb:87:71:25:9e:b9:58:73:
a6:4c:e0:b6:2d:c8:55:fc:98:17:9b:27:94:7e:f2:
0f:8e:cd:0d:6e:f1:2e:99:47:30:4d:83:5e:00:b2:
b0:c5:43:57:e2:3f:f1:e9:6f:3f:e8:5f:a7:22:b6:
55:b7:79:d7:aa:1d:9b:37:a4:bc:2c:04:d8:33:65:
e5:4a:6a:2d:0f:e0:08:fa:b0:2d:f4:5f:13:14:9c:
54:9f:70:ae:71:43:3d:c8:b3:d5:34:c8:47:c3:05:
ee:29:51:01:e3:1b:77:67:8a:bf:f4:1c:a3:3c:4a:
bf:9d:6b:7f:43:dc:eb:10:1a:22:76:02:6b:49:08:
b6:86:94:ec:a8:67:81:bf:98:b3:b6:cd:ae:bd:13:
b9:9c:be:e9:a3:91:3b:06:60:87:a9:73:a7:81:2e:
57:dc:cc:f2:88:8d:53:fd:7f:99:de:86:d9:e3:cb:
b3:10:cf:71:88:b4:c3:bb:69:07:07:13:21:d2:e9:
bf:e6:02:05:b1:48:36:09:f7:91:4f:1c:54:1a:ea:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:47:2C:45:08:9B:01:63:0E:3D:A5:E5:36:A6:02:3F:5E:DC:C3:19
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:da:50:5b:a2:a7:89:46:1e:90:1f:9d:50:0c:55:86:22:94:
11:0a:cb:2c:e3:55:fb:e9:c9:fd:52:43:89:bc:62:1f:5f:49:
65:d2:a7:53:ca:4e:dd:9e:1d:55:96:06:54:62:39:29:51:00:
7f:47:e1:9a:fa:9b:32:ea:de:d1:85:be:25:22:af:a0:d2:ac:
87:f1:cd:92:61:c8:f7:13:ad:16:97:d9:ed:8c:fd:91:68:24:
d2:40:da:e9:7d:05:2e:72:c7:91:1f:5f:67:10:cd:ff:e4:66:
36:1b:9e:ef:24:b5:4b:4f:74:eb:a2:41:c4:78:1a:4f:56:91:
e7:3b:91:24:48:b5:9a:7f:37:25:cb:87:fd:71:30:3d:37:d8:
0d:71:84:71:d8:2e:a3:77:f1:49:83:32:68:f1:7d:75:41:fa:
76:be:b5:84:f2:7a:ea:af:27:e7:a7:00:1a:96:51:d0:84:df:
4f:f7:f0:23:07:a7:8d:c4:16:4c:ec:33:42:78:5d:5a:c8:b6:
8f:37:8f:5a:8f:0e:d1:43:7d:dd:d4:55:dc:d2:9d:6d:06:e9:
fb:f2:02:df:6b:c7:1c:8b:ff:60:96:49:07:61:fd:d2:19:52:
b7:c1:79:a7:25:ac:0a:b5:28:de:b1:6e:dc:58:5d:eb:00:26:
51:bd:05:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:19 2026 by rpki-client