Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: x34I6Uk5KPJuSQ8g6XLOzY7+P4y49fbygzfGpxRRCq8=
Subject key identifier: 4F:46:1F:A1:C0:C1:11:90:04:33:F3:ED:39:DD:A9:62:E6:6E:B9:A8
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 019E3F77A7594F6A0ABE08B23302A1EA1DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 0946
Signing time: Tue 19 May 2026 09:01:06 +0000
Manifest this update: Tue 19 May 2026 09:01:06 +0000
Manifest next update: Wed 20 May 2026 09:01:06 +0000
Files and hashes: 1: KtxgiXPBK2OwoC3ywjIlMfN-WUQ.roa (hash: 82rT1wn8tLHS3yTCKW0vJmoxGtSf+pDEWCX5BqeTJXM=)
2: WjMwl8ZfVOdoyhMOTA8BMehWEJI.roa (hash: RHZCcknMsS5tx01/QhJWB8dlrXaXtmtm/9S2WPp95p0=)
3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: OThtUu6wDCTa0VPApKlQ/6R5iks5DnFC8dTKetY/OTU=)
4: kKa1XAZi28YxfpB3mEQct4rM5D8.roa (hash: WRwHyOAs556xA5lR2SanPEOIWdbcPQ5+gONgps5Y/Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 07:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:77:a7:59:4f:6a:0a:be:08:b2:33:02:a1:ea:1d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: May 19 09:01:06 2026 GMT
Not After : May 20 09:01:06 2026 GMT
Subject: CN=4f461fa1c0c111900433f3ed39dda962e66eb9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:15:41:46:60:f0:a7:07:3f:41:d1:ed:d2:c4:
e8:65:d0:10:d5:21:83:8f:2b:65:eb:ed:13:8a:4c:
1d:b8:5d:a6:7d:cd:41:12:bf:1b:ba:2b:27:5d:1a:
9e:bd:cc:e6:54:3b:c7:1f:aa:b6:52:61:93:10:20:
6c:70:40:30:7c:a1:8f:c3:8b:85:c7:c7:04:42:d6:
21:a9:8c:28:3e:1d:d9:73:b8:98:71:5f:6a:b2:97:
ff:be:8a:3a:d8:95:53:e3:b6:62:66:2f:42:42:f1:
e6:0a:4d:97:68:6c:83:89:7b:8d:57:c4:db:e5:44:
98:fd:ce:4e:2e:55:15:f0:0b:1a:00:38:5b:99:49:
cb:f0:90:cb:84:0c:01:b3:c8:f6:ac:00:07:44:e5:
60:a9:2d:87:c8:6d:9e:fc:3d:3b:30:35:3d:80:00:
de:fd:52:79:80:11:0f:5b:51:08:f8:f1:b6:51:1a:
aa:60:a2:9f:10:be:a4:9d:9a:85:86:3a:f9:29:39:
bc:55:d9:06:0b:3f:e5:f0:67:86:33:bb:7e:88:56:
e1:e7:58:1f:ab:5b:b0:d9:e1:b0:0d:e9:2a:2e:3a:
9a:ae:aa:95:32:a7:27:0f:92:5c:83:81:90:e1:ab:
03:ef:87:31:06:64:14:d7:b4:6b:fc:06:73:7d:d0:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:46:1F:A1:C0:C1:11:90:04:33:F3:ED:39:DD:A9:62:E6:6E:B9:A8
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:68:cf:ec:51:19:9f:59:bb:88:ab:b1:f6:cb:36:78:bb:ec:
85:5e:ae:01:37:dc:b1:ec:df:97:68:ca:2d:5b:10:91:8a:6e:
a0:e4:f9:74:3c:95:43:98:4e:e8:2d:b3:5c:2f:87:68:1c:47:
7f:07:53:30:78:e5:96:32:9b:09:07:44:e2:ef:f5:42:69:07:
10:70:90:45:d6:44:76:c7:f5:c1:4f:44:2a:1d:92:89:ea:d8:
0c:05:a6:c7:b6:53:ee:1b:a8:51:45:06:3e:ca:96:44:8b:d8:
7b:d2:e5:18:02:3b:d6:5a:01:7b:5b:3e:bb:4b:7c:a2:e8:a0:
82:5b:01:e3:26:b1:d5:df:a5:a2:2c:43:02:00:ac:ab:20:60:
67:86:62:b3:eb:13:8a:b4:6b:00:8d:22:c5:ba:41:a1:01:c5:
ea:39:f8:0b:f1:f5:6b:ee:60:7c:8a:9c:7d:b6:55:00:ef:df:
8b:ef:d8:79:ba:3b:ec:7d:3b:64:50:21:a0:fc:5f:3d:79:08:
9f:02:7c:bd:5b:97:52:c2:57:ad:05:2a:4e:54:f5:4c:d5:be:
12:4b:a7:7b:d2:c2:1d:1b:6a:8a:c5:b1:36:0e:dc:f5:4a:80:
e6:30:f7:87:4f:4f:51:d2:13:45:44:c1:ed:62:50:b9:ce:ff:
99:0c:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 13:29:47 2026 by rpki-client