Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
File: a5p0BaYIXJq6zwg9yQpJX80mjPg.mft (raw, json)
Hash identifier: 14UlVwZAyfQGHhdU/iP3fanXrcnAzGpqQgkCpsB1PO8=
Subject key identifier: 34:14:D6:69:A8:E9:5A:7C:3F:27:2A:DA:0D:07:1B:05:72:1F:E7:23
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Certificate issuer: /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial: 01A12AD6BF1629D2B0931A00A3091B0E5777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
Manifest number: 1A99
Signing time: Sun 11 Oct 2026 12:01:18 +0000
Manifest this update: Sun 11 Oct 2026 12:01:18 +0000
Manifest next update: Mon 12 Oct 2026 12:01:18 +0000
Files and hashes: 1: a5p0BaYIXJq6zwg9yQpJX80mjPg.crl (hash: 4gPdfcb1flAm1NgJ+yHioCu3Mw324ZxcQ+Ev+/ex3ZE=)
2: woWrtfbpVBQC0d9nYGwEpRD6cSA.roa (hash: LNM1xNCNG/q1EK1QvoIE7h4vxMboHIOphEup0ou6cwU=)
3: ykUSB7SnDLYVNU1H24F4Mon4faM.roa (hash: qPljEv+Z7LpzikYCD2M1dh9iUZJ4rfcvFPJ/0nMq3UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:bf:16:29:d2:b0:93:1a:00:a3:09:1b:0e:57:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Validity
Not Before: Oct 11 12:01:18 2026 GMT
Not After : Oct 12 12:01:18 2026 GMT
Subject: CN=3414d669a8e95a7c3f272ada0d071b05721fe723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:85:ad:a7:7f:97:3e:f8:17:55:36:d9:70:
58:58:c5:1e:37:65:8e:78:3f:eb:fc:10:04:47:7f:
9a:a0:61:4f:b6:f6:c6:b5:45:17:92:80:de:02:c1:
00:cf:00:02:2f:41:05:0a:ba:c8:b9:c8:24:58:93:
6d:16:81:47:a7:f9:a3:07:a6:b4:43:96:60:96:2e:
84:23:c1:a1:39:6a:61:61:c0:f8:28:ec:a4:03:56:
df:9f:31:2c:53:96:93:0a:7d:c4:97:8c:4f:c1:1a:
e9:4b:69:d6:c7:2a:68:c4:ae:03:b6:bf:3f:fa:b1:
1b:28:91:07:67:b0:a6:38:da:f9:01:78:98:e6:6c:
f3:04:c9:d6:44:15:82:ff:ba:cf:73:7e:4f:30:2e:
f4:f6:47:32:f8:5a:52:b8:73:57:b5:0d:a0:f6:d8:
de:50:fb:f6:7a:3b:13:28:9b:ae:ef:00:46:9e:d2:
26:0b:54:01:96:bf:1c:1d:57:20:48:30:55:c6:ee:
dd:26:e6:2b:3b:fe:1b:15:d2:18:bd:d4:76:96:2c:
d3:ba:4d:ed:a4:b3:87:5a:92:62:19:ff:05:7d:b6:
e8:1f:33:98:83:14:94:42:cd:5e:63:a0:23:ae:0b:
83:55:de:74:c8:1d:8d:28:cb:a4:98:25:a5:6b:38:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:14:D6:69:A8:E9:5A:7C:3F:27:2A:DA:0D:07:1B:05:72:1F:E7:23
X509v3 Authority Key Identifier:
keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c1:c7:f4:0f:fe:3a:ae:f7:29:18:29:17:ec:b0:01:a5:6d:
ec:68:76:d8:d6:c4:9f:96:43:a6:d6:bb:04:94:97:1c:f6:ec:
56:83:7a:83:bd:46:c1:e8:04:a2:a7:3f:45:60:55:c5:31:3d:
43:f6:d0:f8:44:77:ee:87:d1:60:af:1c:6b:7f:dc:dc:8a:5a:
d4:ec:7a:98:47:03:08:cb:6b:5c:30:53:19:71:56:c8:9f:e1:
42:61:dd:40:2e:05:53:34:94:d9:0f:eb:42:71:3e:cb:56:be:
bf:0e:c5:08:d7:65:1d:f1:61:03:da:c8:f8:dd:69:68:a1:12:
43:94:9b:c9:66:fd:61:14:bc:c3:d5:64:6d:d4:42:d1:c1:8f:
da:e5:26:83:47:af:e9:ae:74:b3:26:19:07:b5:16:00:a4:54:
a5:69:9c:76:ae:62:2a:68:c4:1b:d8:d0:a6:10:60:56:c5:49:
60:06:82:f2:d7:df:df:06:22:ca:42:b9:9e:ff:37:c8:e1:ba:
ae:c5:de:79:53:3a:d1:c9:b4:e0:01:d4:c3:75:c3:f3:f7:9d:
21:89:d7:9d:f9:78:b4:80:ae:a8:15:ec:df:96:92:3c:5a:52:
14:b6:b8:66:af:71:33:44:07:29:34:40:fa:8a:73:6c:f7:c4:
a5:51:df:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:44:30 2026 by rpki-client