Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
File: A5aaE8t8Nxi9NxdxJijnqxszsKU.mft (raw, json)
Hash identifier: MC3uJZrXAC0QgmUfI8nCyWc/2X3lmJXZME6GU8slkNw=
Subject key identifier: 2C:D3:F7:21:A8:78:66:5F:41:15:D4:1C:19:0E:AE:47:77:BF:96:FB
Authority key identifier: 03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
Certificate issuer: /CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Certificate serial: 019F17C293ABDA3BB00ADDD793EA0BEE3D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
Manifest number: 0DB5
Signing time: Tue 30 Jun 2026 09:00:55 +0000
Manifest this update: Tue 30 Jun 2026 09:00:55 +0000
Manifest next update: Wed 01 Jul 2026 09:00:55 +0000
Files and hashes: 1: A5aaE8t8Nxi9NxdxJijnqxszsKU.crl (hash: Cz4qphgR1Pw+s3pxj1zHO8if62hiZgvYTtkpLZ76r9k=)
2: ns2_9RvIYkB1i9QUreo7mZCNFB4.roa (hash: hRy6vBXZocA8W5sz3dmk0IcTUrCvsfp79eJVXqITSXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:93:ab:da:3b:b0:0a:dd:d7:93:ea:0b:ee:3d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Validity
Not Before: Jun 30 09:00:55 2026 GMT
Not After : Jul 1 09:00:55 2026 GMT
Subject: CN=2cd3f721a878665f4115d41c190eae4777bf96fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:56:c0:25:93:65:db:94:83:30:44:cd:7d:01:
16:c1:d5:69:85:3b:22:80:4d:17:29:5f:c9:b4:b7:
5e:48:c8:25:23:f6:37:0c:30:de:08:74:85:dc:10:
5a:db:22:c5:dd:e6:6f:ca:8d:d2:32:5d:21:a8:d5:
00:74:48:3e:3c:19:6c:86:8a:9c:ef:10:f0:35:cf:
ee:fd:58:f9:e2:23:a9:eb:7a:3f:f8:d7:ec:d3:0a:
58:28:22:d8:f0:55:69:62:04:a6:24:08:64:c3:08:
02:27:d5:cb:e5:41:cd:c9:35:32:a6:ca:44:df:a8:
52:ba:cc:84:0f:a1:02:eb:d0:af:5c:5b:d2:fe:89:
67:59:2a:a2:61:0f:85:ab:da:2b:c1:95:09:b9:7b:
f1:c0:f9:e0:b9:a7:a7:33:af:7b:24:df:6f:2e:68:
67:46:0c:45:2c:32:33:13:16:a3:af:ec:f5:22:65:
f0:81:ca:01:b9:bd:ec:c5:71:d4:5d:d7:49:7a:e9:
ed:36:29:b7:fb:e8:f2:95:b2:88:9e:98:8a:7e:b5:
ec:9a:46:5a:9b:c9:73:9c:48:03:ca:d9:a6:81:d9:
bd:00:3d:26:f0:a5:e5:55:51:15:89:1d:d8:ba:99:
6c:34:c4:d7:f5:8b:62:aa:7c:f3:6a:ce:67:b7:65:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D3:F7:21:A8:78:66:5F:41:15:D4:1C:19:0E:AE:47:77:BF:96:FB
X509v3 Authority Key Identifier:
keyid:03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c1:a5:ec:27:53:81:e5:b8:53:93:1c:75:60:98:69:89:91:
01:aa:19:51:03:82:5a:57:97:cb:8f:db:fa:01:67:60:9e:b7:
81:09:8a:96:ef:d2:e0:60:bd:d0:f6:4b:f1:a5:d6:ba:dd:72:
da:d6:5f:79:a9:9e:27:23:b5:30:9d:18:fb:69:b6:66:d7:c5:
eb:0f:c4:8f:6b:ff:80:6f:0b:9a:07:4e:77:cb:dc:0b:95:6b:
fb:39:7f:b3:7a:e8:18:a0:ba:27:18:f5:fb:e1:87:93:e3:5b:
02:f4:a4:e6:00:59:fa:f2:a4:9c:3e:aa:41:58:0c:3d:06:23:
a6:38:e9:6f:bf:29:e5:fc:41:ef:49:ed:f0:15:27:51:75:21:
1c:03:4b:fd:01:be:7b:3c:87:c9:c9:19:02:51:cb:76:04:8a:
a4:fc:33:ca:3b:6c:8c:84:8b:2b:84:e6:fb:46:c9:cc:79:12:
02:b2:30:3d:57:95:f6:28:23:b4:57:e5:ef:de:08:1b:58:84:
f9:e7:bb:8f:79:30:43:3c:95:69:b1:a4:68:65:dd:c3:c3:5e:
52:1a:d9:f0:3b:1b:cb:ce:0d:13:27:5f:d2:17:d9:2d:57:20:
90:16:56:c0:31:37:6d:70:19:2f:28:ac:a6:13:01:59:c4:c8:
37:1e:1e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:07 2026 by rpki-client