Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
File: a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft (raw, json)
Hash identifier: /aGoWUADhAoLsNay8p2gonHiyMo6YXYleB8JquwDZXc=
Subject key identifier: 1D:64:9F:A6:9B:6C:D7:6C:26:00:73:0B:95:64:B4:1D:44:DB:F5:F3
Authority key identifier: 6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB
Certificate issuer: /CN=6b966a7800333799d7cd820e3097116473ca42eb
Certificate serial: 01A0E3628FA5BBE9330DAD48A4BA672EB32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
Manifest number: 01AA
Signing time: Sun 27 Sep 2026 15:01:22 +0000
Manifest this update: Sun 27 Sep 2026 15:01:22 +0000
Manifest next update: Mon 28 Sep 2026 15:01:22 +0000
Files and hashes: 1: WrUWqB5jJeFqCbC5EXq-ks26-Bo.asa (hash: F2DPSfLQYJyDePcz+eV6IzbvmlLEE0e2BJutA3Z+nlQ=)
2: a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl (hash: F4V3htqzz9Nw5qViri2oaoSFS8/Ok/RxVSdlBLgluwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:8f:a5:bb:e9:33:0d:ad:48:a4:ba:67:2e:b3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b966a7800333799d7cd820e3097116473ca42eb
Validity
Not Before: Sep 27 15:01:22 2026 GMT
Not After : Sep 28 15:01:22 2026 GMT
Subject: CN=1d649fa69b6cd76c2600730b9564b41d44dbf5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bc:2b:96:f1:27:98:dc:1d:72:f4:96:3a:6a:
4f:7a:3a:4e:79:16:60:6e:de:23:de:c4:6c:74:7f:
3a:0f:63:9c:78:83:33:86:50:de:3b:ac:d4:3c:fc:
8c:96:40:ed:00:ae:de:ba:0a:8d:64:10:0b:54:12:
8e:78:fb:98:4e:51:4c:2c:5c:86:d3:08:b6:8c:2b:
f9:28:9c:49:b4:4e:59:65:ef:d8:3e:99:b4:a3:ee:
de:48:c5:56:86:df:92:41:06:8e:09:25:99:58:28:
7a:fc:65:3e:67:04:e2:31:8b:3f:e2:8e:e0:35:e8:
9f:17:8b:c2:e4:af:18:02:b6:63:65:0b:68:ff:e5:
be:31:ae:a0:bf:1a:b0:de:65:e6:76:f1:68:47:97:
ce:92:fc:d8:71:e0:b9:4b:a6:e4:20:cc:e1:97:d1:
4b:f5:85:ac:c9:cd:77:27:ab:cd:c8:70:e9:9b:ba:
2f:7d:97:11:c6:af:b5:db:25:b0:2e:cb:77:f1:25:
5c:b4:2e:5a:ec:88:2a:91:41:55:37:45:52:fe:32:
d3:95:54:1e:fb:f6:5e:9b:5e:49:6d:8b:47:2a:79:
23:72:62:ec:ab:c5:67:fd:ca:64:74:bf:95:12:d6:
f5:95:58:0c:60:7a:85:5f:06:8c:cb:c7:30:9e:dc:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:64:9F:A6:9B:6C:D7:6C:26:00:73:0B:95:64:B4:1D:44:DB:F5:F3
X509v3 Authority Key Identifier:
keyid:6B:96:6A:78:00:33:37:99:D7:CD:82:0E:30:97:11:64:73:CA:42:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5ZqeAAzN5nXzYIOMJcRZHPKQus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/70936b-1deb-4ede-964f-4502f2d65375/1/a5ZqeAAzN5nXzYIOMJcRZHPKQus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:4e:09:43:a6:16:d8:ed:82:83:65:1e:0b:cb:25:9f:67:d5:
d6:86:17:42:e9:c1:b4:ac:40:c5:ac:34:18:b7:5e:3c:e7:6e:
7f:ae:ea:2c:61:0f:cf:59:56:9c:72:94:7e:56:61:63:04:01:
92:bd:9c:bf:77:38:00:df:ab:a8:3d:cc:e9:38:59:02:7a:5f:
c8:3e:cd:59:f9:90:c1:96:1d:ed:eb:ef:98:a6:72:17:2c:9e:
99:1a:ef:a1:00:01:36:51:dc:c1:72:f3:a0:82:84:01:ab:63:
86:de:3c:1a:79:99:01:38:e3:27:af:c1:12:bd:a1:29:9c:85:
b6:83:dd:bd:04:f8:79:da:ee:f7:3d:60:41:e2:2f:c7:a0:91:
fb:00:9a:1c:de:0c:1b:71:c8:07:99:28:33:df:0a:76:20:a3:
a0:0b:64:20:44:2b:40:6a:d6:36:93:09:9e:43:60:a5:7b:a7:
81:fd:f2:9a:9f:97:b1:7b:b1:80:16:b6:c4:0b:86:fe:de:55:
41:f3:3d:ee:47:ae:d7:7e:8b:16:a0:20:db:75:9a:a4:5e:ba:
01:40:0a:ce:3f:0f:42:a1:2b:58:d6:a0:0f:95:40:18:0f:29:
0f:29:13:48:49:0b:d5:af:e7:d6:91:bc:ab:47:aa:c1:17:25:
35:88:29:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:48:58 2026 by rpki-client