Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
File: a5p0BaYIXJq6zwg9yQpJX80mjPg.mft (raw, json)
Hash identifier: hJHIjcBHHfBxSBeBClzZE7sZt2NNL1WoXHXs9oZhq6s=
Subject key identifier: E3:04:45:84:CF:25:2C:A1:6B:AC:0A:A4:81:56:10:AD:15:D0:CC:D1
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Certificate issuer: /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial: 01A03FE052354C03688307A4D8E29B976E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
Manifest number: 1A1E
Signing time: Wed 26 Aug 2026 21:01:00 +0000
Manifest this update: Wed 26 Aug 2026 21:01:00 +0000
Manifest next update: Thu 27 Aug 2026 21:01:00 +0000
Files and hashes: 1: ZthW5Kx3nnyHShrf3oe0_B7fMkE.roa (hash: 6QVqgqpQ7L5V1ofPTuomvtP1OHn9ZAgQxlpd3xTRTEU=)
2: a5p0BaYIXJq6zwg9yQpJX80mjPg.crl (hash: HtVtM0ejy6WW6tOaRKxapo+oSmRtRqH/bWhyo0H/i8w=)
3: woWrtfbpVBQC0d9nYGwEpRD6cSA.roa (hash: LNM1xNCNG/q1EK1QvoIE7h4vxMboHIOphEup0ou6cwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:52:35:4c:03:68:83:07:a4:d8:e2:9b:97:6e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Validity
Not Before: Aug 26 21:01:00 2026 GMT
Not After : Aug 27 21:01:00 2026 GMT
Subject: CN=e3044584cf252ca16bac0aa4815610ad15d0ccd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:04:2d:96:97:aa:d4:7c:fa:f5:6e:3c:13:
1e:87:35:88:68:2f:0c:21:81:51:6b:d8:3e:cc:a7:
58:ee:3a:54:5a:d1:96:fc:42:bc:df:75:18:0a:de:
43:22:1a:90:36:7a:70:3d:16:a6:6b:fb:b2:f6:eb:
5c:49:36:ce:cc:8a:c3:e4:4f:d4:99:81:0e:7d:cf:
d5:26:10:f9:03:32:d8:c3:0a:a2:12:5a:5d:af:e3:
1d:2a:b2:ab:cc:d5:78:04:fb:01:27:f4:cd:c3:74:
53:5c:6b:81:bb:5a:10:36:7b:5e:58:97:1f:ad:da:
37:93:db:23:d4:f4:9e:65:2e:26:28:d7:5c:db:ee:
d9:5c:94:84:30:38:93:dd:e8:be:c4:ae:9d:df:20:
9f:0b:5b:02:a4:ea:64:39:cb:9c:ae:a6:64:c3:e5:
74:ae:33:76:7d:43:54:1b:96:91:45:14:97:18:44:
b6:fb:89:d9:a9:ef:31:d9:eb:a5:61:9a:2f:20:89:
55:5e:4d:da:e2:8a:83:3e:39:2c:fd:0f:01:42:d5:
65:f0:ff:c4:7f:cf:70:e9:2a:4a:fc:cf:3b:bf:00:
df:a6:73:2c:56:70:64:b2:69:d1:cc:33:75:a8:6c:
76:8e:ac:c6:2f:17:72:07:da:92:6b:c9:e4:f5:a7:
46:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:04:45:84:CF:25:2C:A1:6B:AC:0A:A4:81:56:10:AD:15:D0:CC:D1
X509v3 Authority Key Identifier:
keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d9:90:6f:f5:94:7c:c9:ea:bb:f3:18:d4:da:45:31:f2:19:
bf:6d:5f:1a:89:1a:23:61:d1:22:55:73:58:62:e2:3e:ee:c2:
6a:74:a3:d2:01:d1:4c:ff:dc:86:a4:89:14:88:03:b9:62:be:
4b:72:19:59:e8:b7:02:ff:4c:4e:bd:f6:0e:b0:8f:6e:83:f2:
f4:db:55:b3:c2:2b:d9:7b:68:15:aa:0f:86:ca:9f:3a:3c:d5:
7a:b3:06:35:c1:93:bf:c8:37:b1:fe:23:f4:47:fe:f3:f6:c1:
0b:82:ec:ca:13:56:e2:4a:aa:a4:11:66:a5:1e:36:bc:8b:2a:
b5:4a:8a:ba:09:c8:27:8a:d4:13:87:5f:2a:60:a3:6c:69:c2:
14:2f:4e:2f:6f:5e:17:a5:c4:73:57:f7:aa:1d:de:ac:06:18:
86:b0:95:9e:f2:ac:9c:b6:8e:80:60:16:ce:03:82:80:f2:d9:
3f:1b:12:cf:a2:1f:ff:6a:19:2d:c2:8b:b2:dd:bd:19:9f:2d:
58:32:92:c5:57:07:3e:14:72:39:7e:c9:e3:38:c9:0c:58:5c:
9b:5f:67:61:bb:fa:e6:f7:19:bf:84:90:e6:15:22:d1:13:49:
92:26:40:e8:f1:13:f1:83:27:ca:e2:d5:99:47:a5:e9:45:b2:
ca:86:25:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:18 2026 by rpki-client