Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/5loh5Pr8mTpaPjY1ZG8OUaPre20.mft
File: 5loh5Pr8mTpaPjY1ZG8OUaPre20.mft (raw, json)
Hash identifier: YzIVpKACkgJc1/6rUKRWPBHpmUCXG3Y2Pz8pEFlhoDY=
Subject key identifier: 13:87:C4:43:DA:61:B8:03:D8:66:C7:05:CE:27:C9:90:BF:EB:CE:EC
Authority key identifier: E6:5A:21:E4:FA:FC:99:3A:5A:3E:36:35:64:6F:0E:51:A3:EB:7B:6D
Certificate issuer: /CN=e65a21e4fafc993a5a3e3635646f0e51a3eb7b6d
Certificate serial: 01A0404E4DEB4B69B7FFDF5AD16C63567B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5loh5Pr8mTpaPjY1ZG8OUaPre20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/5loh5Pr8mTpaPjY1ZG8OUaPre20.mft
Manifest number: A7
Signing time: Wed 26 Aug 2026 23:01:08 +0000
Manifest this update: Wed 26 Aug 2026 23:01:08 +0000
Manifest next update: Thu 27 Aug 2026 23:01:08 +0000
Files and hashes: 1: 5loh5Pr8mTpaPjY1ZG8OUaPre20.crl (hash: oHs6cb4yeVCUgYdJPS+g+IEg8HjBDh0fWZFgnnUbpfE=)
2: WLBqKFSRYhW2BLxrPxBOnJ5-nEE.asa (hash: /lRmFidkYST8vyWDfHx47uGzvp12UzkNdZt/L+a0R9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/5loh5Pr8mTpaPjY1ZG8OUaPre20.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/5loh5Pr8mTpaPjY1ZG8OUaPre20.mft
rsync://rpki.ripe.net/repository/DEFAULT/5loh5Pr8mTpaPjY1ZG8OUaPre20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:4d:eb:4b:69:b7:ff:df:5a:d1:6c:63:56:7b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e65a21e4fafc993a5a3e3635646f0e51a3eb7b6d
Validity
Not Before: Aug 26 23:01:08 2026 GMT
Not After : Aug 27 23:01:08 2026 GMT
Subject: CN=1387c443da61b803d866c705ce27c990bfebceec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1a:02:ed:fc:59:e1:c9:45:2e:4f:a9:bb:28:
35:f1:e7:2b:ae:38:66:6b:49:d4:96:be:85:a3:36:
b8:09:e3:36:ce:d6:7e:8e:72:ed:cd:75:95:28:7c:
54:a5:24:30:71:6a:e1:d4:ce:ee:35:6e:82:d5:59:
76:9a:9c:d9:49:25:f3:a6:75:3a:fd:85:36:90:51:
64:97:74:1e:78:d8:56:f1:50:d2:14:41:cd:43:51:
f0:f9:34:a2:8f:30:96:20:5c:ac:59:bd:80:56:4c:
6a:e0:0d:6f:b2:2f:91:dd:f6:8a:10:ae:9f:38:15:
b4:65:9c:93:8e:7b:b4:b9:a8:85:a3:b3:28:e0:f0:
7f:f6:4e:08:f9:d4:6d:59:4f:83:0c:38:e0:34:9b:
70:0f:7c:71:54:15:b0:ac:46:0b:d1:20:2a:50:35:
ab:cc:6c:f0:66:71:33:49:49:29:21:f0:c5:d4:73:
c0:99:ad:56:03:0a:ad:84:29:0b:e4:86:6f:7d:61:
05:25:54:ea:7b:dc:28:a6:b8:4b:ea:86:fc:a6:f6:
3d:aa:2b:9d:0e:b9:a0:17:b8:c6:86:21:ec:8c:66:
df:ee:1e:b3:99:e8:71:24:01:19:b2:f8:a1:a4:f8:
cb:6d:cb:01:29:3e:84:41:97:0c:98:d9:24:91:8c:
e2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:87:C4:43:DA:61:B8:03:D8:66:C7:05:CE:27:C9:90:BF:EB:CE:EC
X509v3 Authority Key Identifier:
keyid:E6:5A:21:E4:FA:FC:99:3A:5A:3E:36:35:64:6F:0E:51:A3:EB:7B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5loh5Pr8mTpaPjY1ZG8OUaPre20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/5loh5Pr8mTpaPjY1ZG8OUaPre20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7d9c4c-2f34-45b6-a7f0-050d1a938644/1/5loh5Pr8mTpaPjY1ZG8OUaPre20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3d:c6:78:52:d5:ce:48:3e:6d:e1:de:cf:66:61:2d:7f:81:
0e:75:1d:4c:ad:a1:c8:a7:5e:a3:cd:d6:09:7a:17:2c:3e:e7:
2d:e5:1d:7c:0e:4f:e2:f4:47:27:cd:ae:ea:4f:7c:73:32:b6:
89:ac:bb:ba:e5:f0:6e:55:25:a4:f9:43:11:be:67:c4:99:04:
0e:63:20:0f:01:76:54:6d:21:26:73:60:9a:a0:72:fe:14:07:
d7:cd:78:e8:5b:08:8b:17:c9:5c:14:0f:9a:1d:07:cb:9b:cd:
9b:18:c7:bf:61:9d:e1:4a:0f:e3:8d:90:69:4e:84:19:3e:45:
b9:e3:da:f7:1d:40:1e:73:ca:66:60:3d:a3:7e:9a:5f:c6:f4:
0b:86:4e:d8:c8:b6:70:2f:74:01:ed:5c:5c:07:aa:f9:5b:be:
d0:94:05:00:10:41:17:e7:f2:11:e0:23:9f:28:24:2c:88:3e:
82:07:b9:76:96:91:ac:fc:d1:7e:33:ee:a9:ec:76:0e:e1:e6:
33:d0:98:31:00:46:61:97:ac:ae:13:c6:01:63:66:9b:c2:9e:
ac:fe:12:07:9b:66:a9:a4:5a:e4:24:0a:8c:f1:bb:af:5a:f8:
66:f3:0b:86:93:3a:7e:ff:8c:de:c5:34:2d:f8:18:4d:9c:d8:
57:e1:6c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:14 2026 by rpki-client