Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
File: a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft (raw, json)
Hash identifier: WXbVY5UkMY4JaSrGP5ZyYYvGZqH+4/wJwphbh4EZVmM=
Subject key identifier: 5D:A6:4A:B4:80:40:B2:19:86:D4:3E:F1:F2:B9:CF:E0:A2:A8:53:B9
Authority key identifier: 6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB
Certificate issuer: /CN=6b966a7800333799d7cd820e3097116473ca42eb
Certificate serial: 019EFCB8F6A5E16E8DD510DE2761F5673771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
Manifest number: AE
Signing time: Thu 25 Jun 2026 03:00:40 +0000
Manifest this update: Thu 25 Jun 2026 03:00:40 +0000
Manifest next update: Fri 26 Jun 2026 03:00:40 +0000
Files and hashes: 1: WrUWqB5jJeFqCbC5EXq-ks26-Bo.asa (hash: F2DPSfLQYJyDePcz+eV6IzbvmlLEE0e2BJutA3Z+nlQ=)
2: a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl (hash: f2BmS6wY1c3QgUh3gCIKC1CtOadhjYNvgl1AzCG66EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:b8:f6:a5:e1:6e:8d:d5:10:de:27:61:f5:67:37:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b966a7800333799d7cd820e3097116473ca42eb
Validity
Not Before: Jun 25 03:00:40 2026 GMT
Not After : Jun 26 03:00:40 2026 GMT
Subject: CN=5da64ab48040b21986d43ef1f2b9cfe0a2a853b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:c5:87:33:c7:79:12:8e:ec:08:2c:f0:6b:
ca:38:93:42:b8:b4:ca:2e:05:f8:0a:d9:93:45:5b:
18:a0:c5:a2:3c:3a:0c:8a:f9:ac:14:66:8d:e4:9d:
ce:58:40:0b:25:2c:97:ac:9c:63:ae:14:99:2b:fb:
33:a5:33:4d:3c:f1:43:b5:dd:52:73:da:38:38:41:
8a:9e:20:59:c5:88:35:fa:70:3d:df:82:98:67:3d:
cc:34:a6:b3:2e:05:5d:98:aa:68:41:cc:bf:b8:1a:
a2:db:f3:7a:0b:e4:af:cc:8d:3a:a8:07:f9:c6:24:
fa:3f:ff:be:56:6f:6a:bd:ce:a5:79:f6:e5:08:82:
f3:90:6e:d6:d8:e8:11:1f:18:b5:d7:c7:bf:95:ad:
1f:d0:b0:03:c2:d3:1e:39:d1:9f:7b:47:cc:77:a2:
4d:c0:18:00:11:f6:8e:63:90:17:19:7c:76:6d:e2:
a3:11:3a:d0:1b:6b:f4:32:ce:b1:d0:27:f1:ff:ad:
a0:5e:9a:80:a2:d2:0b:27:f0:60:86:be:de:df:c9:
a3:39:4d:b5:24:54:e1:1a:23:14:d0:21:11:b5:60:
63:bb:14:94:b0:22:55:d3:78:10:4c:da:95:2a:65:
c6:5c:b2:4b:71:81:31:27:6e:8c:fc:80:18:3c:6a:
e7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A6:4A:B4:80:40:B2:19:86:D4:3E:F1:F2:B9:CF:E0:A2:A8:53:B9
X509v3 Authority Key Identifier:
keyid:6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ee:8e:d3:86:a7:41:6a:18:f1:86:d6:3c:ba:e1:a6:c1:f3:
cc:e4:f9:7f:43:a5:e0:e7:5f:18:90:59:b6:ff:68:1e:d3:32:
39:15:e2:31:66:46:df:0a:de:17:97:9b:25:5c:24:4a:29:78:
a8:77:0a:44:25:06:b1:0b:26:b3:7c:ee:69:0f:c1:4c:70:38:
41:e4:97:ea:86:81:6b:fc:05:0d:a9:7b:8b:12:6e:4b:54:28:
c9:46:9e:18:99:4b:c1:9d:8a:7b:1d:76:f5:52:9e:78:d7:dd:
5c:f6:0a:e6:19:17:9f:e3:37:43:01:82:4c:ba:97:66:83:cb:
43:cd:b6:89:aa:71:3d:c5:1a:18:c5:36:17:2e:52:8b:cc:be:
1f:fc:67:a9:31:02:0c:2f:3e:82:24:4f:48:24:88:3d:e9:79:
39:2d:40:0b:99:1a:86:f7:21:4b:57:90:6d:c4:5c:29:55:64:
26:66:cd:cd:b3:5f:0d:d1:8f:ef:1a:49:4d:f7:aa:dc:67:ff:
5e:80:b3:17:b5:a1:2b:10:83:c4:85:b0:85:d7:ff:6d:02:f0:
8b:85:96:ed:91:c7:3e:ae:b4:10:5f:7d:f1:7e:ef:97:3e:e9:
59:ea:31:cf:08:c7:9f:0f:35:9a:ad:40:4c:da:d9:b5:05:99:
bd:26:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:30:13 2026 by rpki-client