Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: MgPqp6d4b6NwvHW0AXpbEAbzMD/CK9bZHfkzZ9H6F+Q=
Subject key identifier: B9:12:E8:5B:69:B0:44:F5:AE:A4:D2:33:E7:C0:C3:A0:49:B2:E1:25
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 01A0E73F7D1E06E36562B4EE2819EF34E15D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 0AA6
Signing time: Mon 28 Sep 2026 09:01:32 +0000
Manifest this update: Mon 28 Sep 2026 09:01:32 +0000
Manifest next update: Tue 29 Sep 2026 09:01:32 +0000
Files and hashes: 1: KtxgiXPBK2OwoC3ywjIlMfN-WUQ.roa (hash: 82rT1wn8tLHS3yTCKW0vJmoxGtSf+pDEWCX5BqeTJXM=)
2: WjMwl8ZfVOdoyhMOTA8BMehWEJI.roa (hash: RHZCcknMsS5tx01/QhJWB8dlrXaXtmtm/9S2WPp95p0=)
3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: nfcAzwI8X91z7Impw7kVNaPX8Ug2TnC7JukzWgf6Wvs=)
4: kKa1XAZi28YxfpB3mEQct4rM5D8.roa (hash: WRwHyOAs556xA5lR2SanPEOIWdbcPQ5+gONgps5Y/Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:7d:1e:06:e3:65:62:b4:ee:28:19:ef:34:e1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Sep 28 09:01:32 2026 GMT
Not After : Sep 29 09:01:32 2026 GMT
Subject: CN=b912e85b69b044f5aea4d233e7c0c3a049b2e125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:cc:01:c8:e7:a6:c0:66:32:59:f2:4a:9a:
64:5b:24:14:ab:27:6e:64:8f:13:1f:79:b6:ef:01:
1a:1d:af:64:50:7d:e0:c2:c3:15:dd:21:ad:76:d8:
d8:7e:be:99:57:06:07:81:2f:79:ba:1f:0c:99:b9:
2a:8d:ab:b7:c9:f2:af:ba:8a:a3:14:5b:f9:6c:be:
16:98:82:de:4a:96:08:96:55:88:fb:b1:87:97:f9:
18:f3:27:f2:a9:16:f8:8d:e1:fe:16:19:6c:69:4b:
ea:8e:ce:27:98:79:0f:42:18:b8:f6:70:ca:39:ed:
24:b6:85:18:c5:1c:6c:fd:f8:1b:7a:10:41:6d:44:
4f:2b:0b:c4:a2:b5:e8:a8:37:3b:c9:a5:73:06:06:
75:6d:06:c6:4e:78:b3:6c:0f:b1:2b:c1:88:28:87:
3e:be:c2:ed:d3:c2:eb:50:87:a6:a8:91:a8:20:ca:
44:62:78:c1:35:fd:20:7d:a3:f8:9a:76:d0:6c:2e:
06:5c:ea:04:b3:a6:dc:0e:90:b8:1f:2a:a4:a2:d8:
db:22:af:ba:06:a0:9f:1b:3a:69:32:2f:87:68:3d:
c9:e9:9d:49:22:28:0f:14:fe:7e:5e:97:8b:c8:2a:
43:b8:c8:61:11:22:ee:c3:61:d7:9b:85:0f:3b:d3:
07:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:12:E8:5B:69:B0:44:F5:AE:A4:D2:33:E7:C0:C3:A0:49:B2:E1:25
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e9:9b:e4:6e:16:6c:8b:c7:c6:6f:f0:73:a2:c9:29:14:f4:
7c:7b:e0:dd:9e:ce:cc:0f:9b:c9:e5:b9:60:a8:7c:c4:a1:75:
8c:86:51:eb:9e:ca:aa:42:dc:37:46:83:86:f2:b7:b9:a4:47:
f1:21:4b:73:ca:7c:42:f6:f8:5b:4d:a0:ba:12:3f:9c:1d:4f:
0b:e4:bd:e0:f6:c5:0d:75:e1:97:26:64:13:21:b0:5b:06:a0:
73:d3:e3:36:11:2b:fc:ed:d6:90:6d:4b:92:1e:7c:25:a1:5a:
38:33:0d:34:84:33:44:70:83:6d:ae:23:8a:0b:67:a8:32:e9:
e0:45:8d:62:92:d9:10:ae:c5:da:4a:0b:9d:5a:4b:49:20:0a:
a9:0d:cd:12:de:a8:db:bf:29:da:e8:c7:1b:a8:cc:d7:7c:ea:
41:18:6b:ae:fb:eb:07:ea:47:3b:e1:62:21:ac:fa:76:f6:08:
f5:1e:60:70:c2:70:0f:44:f6:cc:9d:60:13:9d:3d:a6:2a:0f:
89:dc:61:9c:e2:7d:79:0f:08:fb:52:1c:6f:7b:c1:5d:89:e6:
af:25:02:93:a1:75:7f:61:6a:32:7a:62:22:60:cc:12:56:af:
92:ac:f6:af:85:d0:41:59:28:b1:8e:30:c8:a1:97:e7:eb:9d:
c5:3e:b9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:21:54 2026 by rpki-client