Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: XvFi8fSceY3QshL1SI0lrafd8r2e3ixCpLKahL/JE5A=
Subject key identifier: DA:B5:0B:60:29:21:23:73:41:80:C7:28:9C:6F:04:E2:E6:04:9F:ED
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 019F5D492B4CF0ED32332EEF58703B515777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 09DA
Signing time: Mon 13 Jul 2026 21:01:44 +0000
Manifest this update: Mon 13 Jul 2026 21:01:44 +0000
Manifest next update: Tue 14 Jul 2026 21:01:44 +0000
Files and hashes: 1: KtxgiXPBK2OwoC3ywjIlMfN-WUQ.roa (hash: 82rT1wn8tLHS3yTCKW0vJmoxGtSf+pDEWCX5BqeTJXM=)
2: WjMwl8ZfVOdoyhMOTA8BMehWEJI.roa (hash: RHZCcknMsS5tx01/QhJWB8dlrXaXtmtm/9S2WPp95p0=)
3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: L7RE3l9MXbhrY3tQaSR8cjXXQ8YK32VwITxoUW88g1k=)
4: kKa1XAZi28YxfpB3mEQct4rM5D8.roa (hash: WRwHyOAs556xA5lR2SanPEOIWdbcPQ5+gONgps5Y/Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 21:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5d:49:2b:4c:f0:ed:32:33:2e:ef:58:70:3b:51:57:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Jul 13 21:01:44 2026 GMT
Not After : Jul 14 21:01:44 2026 GMT
Subject: CN=dab50b60292123734180c7289c6f04e2e6049fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:35:fc:91:c9:f0:a3:93:83:5d:a3:db:b9:
cc:3d:4b:f4:35:05:d6:2b:6a:1e:0a:66:0d:b4:76:
d1:d3:52:b9:0c:6f:4a:14:e4:1d:ae:3f:85:97:07:
04:9b:66:c7:cb:bb:6d:79:15:6a:39:f1:85:d1:72:
20:7f:24:f0:4a:07:c5:e8:b1:05:b2:53:84:0b:94:
74:47:97:80:4b:ec:3e:09:b0:e7:63:57:76:11:c4:
b9:70:b0:3c:c7:88:08:15:21:ee:61:af:62:bd:a9:
20:54:3f:b0:78:df:83:e9:7a:b5:47:a1:ea:a0:0c:
52:b6:e8:77:71:7c:71:b9:0a:12:b2:a0:36:32:98:
eb:5f:21:79:d4:5a:90:1b:f9:09:81:45:10:a2:b9:
b6:24:a3:bb:70:46:13:2f:67:7e:4b:9b:3d:12:9a:
2c:71:c4:b7:e2:b9:bc:33:f9:63:31:a4:0c:b3:17:
1e:b5:44:dc:c6:b9:27:fb:71:9a:cd:6e:b1:1f:81:
21:e8:25:32:1f:3c:b9:a3:cd:60:a0:ac:5e:0f:fa:
fc:25:8f:d9:51:a8:b2:7f:0d:e6:ba:e0:a6:db:cf:
a9:79:a7:46:3c:f5:84:f3:db:50:dd:6c:92:57:c9:
7d:14:70:72:50:10:5b:fb:ab:6c:55:fe:b3:e2:d8:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B5:0B:60:29:21:23:73:41:80:C7:28:9C:6F:04:E2:E6:04:9F:ED
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:67:34:f6:72:6b:9a:f2:f4:82:d5:17:55:39:9d:7b:e6:6c:
0e:c2:d4:24:14:11:c0:ae:6c:a9:2c:66:7e:df:47:d6:b1:5e:
b0:0e:8e:b3:a8:25:01:48:a2:2f:d3:15:37:e0:8e:e6:a7:4f:
c7:41:e5:0e:79:68:48:1c:20:8c:b6:73:71:12:2c:7f:57:16:
ce:3b:88:c1:a1:32:6f:be:ac:63:25:dd:48:5f:59:af:18:87:
5a:8c:ce:aa:85:9f:74:5f:4f:d4:07:51:a9:a5:19:ed:ec:8f:
b3:b0:2b:07:ed:58:10:3d:07:8d:ac:8e:f6:d9:a2:ac:01:9c:
c3:90:95:11:7f:01:86:b6:c9:59:2e:e9:fc:e4:8b:0f:68:e3:
fc:bb:5b:cc:a4:17:24:e9:61:d6:06:0a:cc:be:2a:54:83:d4:
2f:c7:25:4f:f1:4e:60:2e:ab:57:bb:6f:f7:7f:43:70:69:12:
ef:46:de:77:71:f1:61:42:ea:ee:f7:ec:54:37:9d:2c:d3:62:
0b:05:6e:da:59:19:93:ec:88:d0:9a:e4:67:b2:58:cc:73:8d:
73:a8:b7:cb:c0:b3:b7:ad:47:1d:52:e9:23:c3:52:f4:ad:b4:
ae:42:43:21:00:6b:7e:2c:67:14:12:d5:67:46:82:0a:ac:bd:
85:bb:cf:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9dSStM8O0yMy7vWHA7UVd3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiOTJjZjMzOTBjYWE1ODc5ZTc1OTcyOWNkOTAwOGM2ZWNh
NTVhMjcwHhcNMjYwNzEzMjEwMTQ0WhcNMjYwNzE0MjEwMTQ0WjAzMTEwLwYDVQQD
EyhkYWI1MGI2MDI5MjEyMzczNDE4MGM3Mjg5YzZmMDRlMmU2MDQ5ZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs181/JHJ8KOTg12j27nMPUv0NQXW
K2oeCmYNtHbR01K5DG9KFOQdrj+FlwcEm2bHy7tteRVqOfGF0XIgfyTwSgfF6LEF
slOEC5R0R5eAS+w+CbDnY1d2EcS5cLA8x4gIFSHuYa9ivakgVD+weN+D6Xq1R6Hq
oAxStuh3cXxxuQoSsqA2MpjrXyF51FqQG/kJgUUQorm2JKO7cEYTL2d+S5s9Epos
ccS34rm8M/ljMaQMsxcetUTcxrkn+3GazW6xH4Eh6CUyHzy5o81goKxeD/r8JY/Z
Uaiyfw3muuCm28+peadGPPWE89tQ3WySV8l9FHByUBBb+6tsVf6z4tiJxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNq1C2ApISNzQYDHKJxvBOLmBJ/tMB8GA1UdIwQY
MBaAFGuSzzOQyqWHnnWXKc2QCMbspVonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTVMUE01REtwWWVlZFpjcHpaQUl4dXlsV2ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xMjM0OWUtNTI4Mi00NzJhLWFlNTIt
MmEwNjIyMzYyM2UwLzEvYTVMUE01REtwWWVlZFpjcHpaQUl4dXlsV2ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xMjM0OWUtNTI4Mi00NzJhLWFlNTItMmEwNjIyMzYyM2Uw
LzEvYTVMUE01REtwWWVlZFpjcHpaQUl4dXlsV2ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWc09nJr
mvL0gtUXVTmde+ZsDsLUJBQRwK5sqSxmft9H1rFesA6Os6glAUiiL9MVN+CO5qdP
x0HlDnloSBwgjLZzcRIsf1cWzjuIwaEyb76sYyXdSF9ZrxiHWozOqoWfdF9P1AdR
qaUZ7eyPs7ArB+1YED0HjayO9tmirAGcw5CVEX8BhrbJWS7p/OSLD2jj/LtbzKQX
JOlh1gYKzL4qVIPUL8clT/FOYC6rV7tv939DcGkS70bed3HxYULq7vfsVDedLNNi
CwVu2lkZk+yI0JrkZ7JYzHONc6i3y8Czt61HHVLpI8NS9K20rkJDIQBrfixnFBLV
Z0aCCqy9hbvP/A==
-----END CERTIFICATE-----
Generated at Tue Jul 14 03:59:14 2026 by rpki-client