Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
File: a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft (raw, json)
Hash identifier: Au0KP7GVo9/ES/WMQWVCbi2ht7uqPXnqqk1iycQATac=
Subject key identifier: 09:20:CF:35:8E:D7:BB:1C:BA:32:94:A3:9B:B2:AB:1A:B6:2D:54:35
Authority key identifier: 6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB
Certificate issuer: /CN=6b966a7800333799d7cd820e3097116473ca42eb
Certificate serial: 019DDCFA7698010E6456C0C0227CD9E16ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
Manifest number: 19
Signing time: Thu 30 Apr 2026 06:01:34 +0000
Manifest this update: Thu 30 Apr 2026 06:01:34 +0000
Manifest next update: Fri 01 May 2026 06:01:34 +0000
Files and hashes: 1: WrUWqB5jJeFqCbC5EXq-ks26-Bo.asa (hash: F2DPSfLQYJyDePcz+eV6IzbvmlLEE0e2BJutA3Z+nlQ=)
2: a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl (hash: Dz27Zvx9H0uS7KVlNKcmWRxEaYmZn2xGVBDucqP3g2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:fa:76:98:01:0e:64:56:c0:c0:22:7c:d9:e1:6a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b966a7800333799d7cd820e3097116473ca42eb
Validity
Not Before: Apr 30 06:01:34 2026 GMT
Not After : May 1 06:01:34 2026 GMT
Subject: CN=0920cf358ed7bb1cba3294a39bb2ab1ab62d5435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:de:62:ba:dd:fe:ba:a0:c2:9a:08:45:01:
47:81:bd:9b:65:ef:25:f6:0f:74:bf:6c:bd:58:aa:
c2:bc:90:3e:56:e3:b2:45:0e:5e:9e:69:88:b1:48:
02:6e:81:a2:bb:9c:1b:77:f4:95:a9:66:20:74:66:
2e:82:64:4f:88:45:54:75:0a:83:b0:88:08:aa:1c:
dd:c0:bc:ee:e5:55:2d:76:b9:b4:7c:8b:b8:35:76:
3c:c5:de:1b:01:17:bf:5f:8f:8c:69:76:a7:fe:44:
6c:b5:ae:8e:f1:e9:01:a3:4e:b5:2c:aa:15:e0:84:
64:94:1a:2b:07:d4:bd:57:57:f4:ea:ae:d9:a4:f1:
b6:ef:ea:90:37:17:9b:79:b0:00:65:e1:b9:7d:99:
73:8c:46:72:17:21:5f:18:77:01:35:09:4e:9f:68:
74:f7:81:d9:78:40:70:1a:21:53:9e:ef:e8:f2:d7:
d7:7d:7a:50:69:ac:df:37:15:2c:6d:75:7c:6d:11:
54:81:f5:95:2b:41:ef:fd:49:17:3a:76:48:16:e1:
c1:f2:d4:51:d7:93:43:de:fd:96:87:09:ec:f4:db:
11:f2:56:30:3a:19:b0:cd:df:e8:67:62:79:4a:e0:
a5:29:72:0e:ea:44:1f:ae:0c:02:f3:ee:d5:f5:e4:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:20:CF:35:8E:D7:BB:1C:BA:32:94:A3:9B:B2:AB:1A:B6:2D:54:35
X509v3 Authority Key Identifier:
keyid:6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:59:35:14:53:31:97:35:0a:a1:79:9c:2c:fe:4f:51:3b:7b:
71:e4:35:15:00:bc:44:c7:1a:8a:a5:3c:09:32:f9:d3:d9:fa:
79:53:2d:c3:2d:78:8d:93:78:f0:99:ba:2f:eb:40:c7:4b:79:
ce:93:c6:90:ec:e1:4d:57:b2:fa:a5:52:50:a7:07:63:4b:64:
43:35:e6:4b:24:6d:39:a7:8f:1f:03:ca:bb:47:38:fb:26:c2:
6d:b6:a3:75:b6:e0:3f:ab:fe:17:4a:06:f3:46:d6:ba:50:9b:
f1:e4:5d:1a:8b:10:3d:58:fa:20:2c:6d:47:c2:e5:10:7e:07:
8f:5a:4f:ea:98:9d:c9:eb:f6:05:7e:63:f9:7a:c3:e1:9f:f7:
ec:fa:90:40:be:bf:68:d9:06:32:35:38:89:dd:82:1d:1a:63:
7c:d0:48:57:21:aa:8d:97:91:e4:8b:51:17:e3:dd:96:6b:de:
f2:3a:3d:e0:52:77:ad:2f:78:9f:86:29:ad:73:18:e3:15:b8:
92:01:df:77:55:89:0f:8c:eb:bd:02:04:c3:8c:2c:42:10:a7:
72:66:84:f3:1a:e9:87:4c:05:a1:2e:fe:34:1b:96:f7:3d:c5:
e9:d0:d8:b5:5f:3d:93:62:9f:75:1d:7d:57:05:f7:37:82:21:
12:24:bb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:46:35 2026 by rpki-client