Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: +yVFLjNQhNtWRpfotVa3nFS+llbqtc+xvFdKn8qwxmE=
Subject key identifier: FC:4F:10:13:17:DB:C5:ED:7B:9B:40:CE:F0:15:2E:B0:F5:39:1F:7F
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 01A045080BC0757E2158B441674AB2B37973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 0A52
Signing time: Thu 27 Aug 2026 21:02:30 +0000
Manifest this update: Thu 27 Aug 2026 21:02:30 +0000
Manifest next update: Fri 28 Aug 2026 21:02:30 +0000
Files and hashes: 1: KtxgiXPBK2OwoC3ywjIlMfN-WUQ.roa (hash: 82rT1wn8tLHS3yTCKW0vJmoxGtSf+pDEWCX5BqeTJXM=)
2: WjMwl8ZfVOdoyhMOTA8BMehWEJI.roa (hash: RHZCcknMsS5tx01/QhJWB8dlrXaXtmtm/9S2WPp95p0=)
3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: s7+qF96kxDQBzki3HWjJX1Lc7+R22nexfc0j952mEFI=)
4: kKa1XAZi28YxfpB3mEQct4rM5D8.roa (hash: WRwHyOAs556xA5lR2SanPEOIWdbcPQ5+gONgps5Y/Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 21:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:45:08:0b:c0:75:7e:21:58:b4:41:67:4a:b2:b3:79:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Aug 27 21:02:30 2026 GMT
Not After : Aug 28 21:02:30 2026 GMT
Subject: CN=fc4f101317dbc5ed7b9b40cef0152eb0f5391f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:4f:d4:69:0c:a8:15:e9:cc:6e:c2:4b:17:
9d:08:75:af:aa:06:6c:36:24:8b:6a:27:fa:3d:67:
35:92:6d:14:63:a8:c9:d5:05:28:66:a7:a3:85:9b:
0b:2e:13:56:ae:0a:64:3a:43:c1:d8:9d:6e:46:b3:
9f:95:d6:de:14:50:97:97:de:b4:61:31:0b:68:b0:
25:96:03:14:ec:9e:ca:35:0d:ca:bf:82:16:91:f3:
aa:25:a3:82:ef:d1:17:30:ff:0f:b6:88:fe:23:26:
c8:4e:24:79:f2:fe:70:78:31:78:c4:7b:e7:a5:da:
95:5b:08:24:1a:45:b4:0d:7b:0d:e0:67:7b:ad:f2:
02:41:54:86:0c:e8:da:22:6c:82:db:0b:6a:03:0d:
2d:30:ee:c1:3b:dc:ea:e8:3c:36:6d:02:b7:c0:0c:
84:70:db:59:21:47:71:4c:23:ed:f5:ab:8e:fb:9e:
97:1c:9d:ea:76:07:27:a9:77:6f:e4:99:3f:7f:b6:
37:ae:e7:ba:89:9d:f8:29:16:b1:e0:5f:10:f2:8c:
22:a5:2e:46:c9:48:ca:de:b5:50:62:70:33:04:bf:
3c:00:51:17:b9:6f:2d:ab:73:79:ed:d2:ae:72:5f:
23:db:d3:0c:92:24:a2:8c:cd:24:75:9d:40:09:36:
d9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4F:10:13:17:DB:C5:ED:7B:9B:40:CE:F0:15:2E:B0:F5:39:1F:7F
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8c:bd:37:6c:ee:c7:0b:2d:57:1f:be:83:94:2e:f5:9d:9d:
6b:8a:b3:d7:bb:71:c8:43:df:9c:9a:a0:f0:83:3d:e9:f3:0c:
f9:b9:07:fc:3e:3a:6d:e3:c5:29:02:fc:1d:7e:56:45:bd:b6:
e1:98:21:ef:98:8c:db:6d:ae:b8:a6:5f:ad:5d:73:70:2c:3b:
07:f1:28:5d:3c:1d:0b:1c:e5:e9:93:13:bf:55:69:a8:66:30:
72:c1:03:76:88:4c:7b:e7:9c:55:79:8d:93:da:cf:88:8f:e4:
59:ac:ac:3b:2c:ff:ea:61:2a:fa:8f:3d:a3:55:4f:7e:a4:b3:
05:79:c1:ff:92:59:ed:57:b6:26:2f:b3:e4:d0:d0:db:9f:63:
37:98:9e:a1:ec:d8:d1:33:9d:45:e4:35:81:bd:dc:a6:d7:a0:
90:3d:32:d5:3c:8c:f6:ba:d3:13:70:30:31:dc:f4:5c:e1:28:
04:e4:26:f4:f8:1b:55:44:dd:8f:8c:62:60:5f:ce:54:4c:78:
a7:ad:9e:36:2c:f6:e6:69:af:7e:b0:a2:91:69:b1:41:41:c8:
e7:0e:e8:e0:ba:bf:13:1a:81:24:5e:c0:6c:23:44:78:02:b7:
f6:63:df:10:91:2a:cf:f1:e2:ff:4f:8d:b2:f9:f5:2e:06:4f:
39:db:54:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBFCAvAdX4hWLRBZ0qys3lzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiOTJjZjMzOTBjYWE1ODc5ZTc1OTcyOWNkOTAwOGM2ZWNh
NTVhMjcwHhcNMjYwODI3MjEwMjMwWhcNMjYwODI4MjEwMjMwWjAzMTEwLwYDVQQD
EyhmYzRmMTAxMzE3ZGJjNWVkN2I5YjQwY2VmMDE1MmViMGY1MzkxZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx59P1GkMqBXpzG7CSxedCHWvqgZs
NiSLaif6PWc1km0UY6jJ1QUoZqejhZsLLhNWrgpkOkPB2J1uRrOfldbeFFCXl960
YTELaLAllgMU7J7KNQ3Kv4IWkfOqJaOC79EXMP8Ptoj+IybITiR58v5weDF4xHvn
pdqVWwgkGkW0DXsN4Gd7rfICQVSGDOjaImyC2wtqAw0tMO7BO9zq6Dw2bQK3wAyE
cNtZIUdxTCPt9auO+56XHJ3qdgcnqXdv5Jk/f7Y3rue6iZ34KRax4F8Q8owipS5G
yUjK3rVQYnAzBL88AFEXuW8tq3N57dKucl8j29MMkiSijM0kdZ1ACTbZswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxPEBMX28Xte5tAzvAVLrD1OR9/MB8GA1UdIwQY
MBaAFGuSzzOQyqWHnnWXKc2QCMbspVonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTVMUE01REtwWWVlZFpjcHpaQUl4dXlsV2ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xMjM0OWUtNTI4Mi00NzJhLWFlNTIt
MmEwNjIyMzYyM2UwLzEvYTVMUE01REtwWWVlZFpjcHpaQUl4dXlsV2ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xMjM0OWUtNTI4Mi00NzJhLWFlNTItMmEwNjIyMzYyM2Uw
LzEvYTVMUE01REtwWWVlZFpjcHpaQUl4dXlsV2ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoy9N2zu
xwstVx++g5Qu9Z2da4qz17txyEPfnJqg8IM96fMM+bkH/D46bePFKQL8HX5WRb22
4Zgh75iM222uuKZfrV1zcCw7B/EoXTwdCxzl6ZMTv1VpqGYwcsEDdohMe+ecVXmN
k9rPiI/kWaysOyz/6mEq+o89o1VPfqSzBXnB/5JZ7Ve2Ji+z5NDQ259jN5ieoezY
0TOdReQ1gb3cptegkD0y1TyM9rrTE3AwMdz0XOEoBOQm9PgbVUTdj4xiYF/OVEx4
p62eNiz25mmvfrCikWmxQUHI5w7o4Lq/ExqBJF7AbCNEeAK39mPfEJEqz/Hi/0+N
svn1LgZPOdtUTw==
-----END CERTIFICATE-----
Generated at Fri Aug 28 06:09:46 2026 by rpki-client