Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
File: r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft (raw, json)
Hash identifier: O7pb50f3lK8Dzgo7/KSMszJ53ltcjvP8bgIRtrBiDU8=
Subject key identifier: 96:89:C9:3A:FD:BC:DF:09:BA:BF:DA:4C:8B:9D:C6:CE:80:02:68:61
Authority key identifier: AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
Certificate issuer: /CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Certificate serial: 019D284D72085E56D641DDE2B06A888DCECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
Manifest number: 0CF3
Signing time: Thu 26 Mar 2026 04:00:57 +0000
Manifest this update: Thu 26 Mar 2026 04:00:57 +0000
Manifest next update: Fri 27 Mar 2026 04:00:57 +0000
Files and hashes: 1: niXIs67HnTRfFLGC1HZAY3uj8cU.roa (hash: wwuo2W8ON5QM/uq0sqdrnWPPJasVC2ONRBN1iw5lrCg=)
2: r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl (hash: rPeGMRKezwO6xTf/V5rvxeZp/tvVbb+plIpnb5SyW7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:72:08:5e:56:d6:41:dd:e2:b0:6a:88:8d:ce:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Validity
Not Before: Mar 26 04:00:57 2026 GMT
Not After : Mar 27 04:00:57 2026 GMT
Subject: CN=9689c93afdbcdf09babfda4c8b9dc6ce80026861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:ef:4f:a0:04:44:2d:85:c7:f5:c8:de:c6:
2f:af:7b:51:c2:45:76:ab:fa:12:c6:f4:a8:19:c3:
f0:29:be:ed:2a:d2:49:8d:0d:05:90:97:ee:3c:78:
d5:67:9f:33:2b:9f:65:c4:01:49:3e:2e:b9:11:ba:
5d:75:a0:2d:8d:09:36:ae:e3:b4:09:fa:b6:e0:08:
e7:5c:f1:ed:f8:55:b8:3e:99:a2:f7:7c:74:0b:00:
d3:34:4c:3f:2d:02:ed:76:1b:09:bd:f6:05:4e:98:
1d:c4:ea:2c:ae:68:11:80:6d:b5:e3:a7:29:6b:dd:
2e:d2:87:9f:5a:67:f5:fa:2c:f0:9b:91:33:0f:fc:
67:46:f0:30:69:f1:05:51:9f:91:62:04:26:22:34:
75:cb:b7:82:67:01:41:e4:e3:f3:c9:ed:46:a9:cf:
9e:11:aa:e2:68:36:8f:e4:cd:50:79:76:ad:38:94:
d9:81:73:80:eb:89:34:1a:e0:9a:d4:2e:19:34:4e:
30:b6:a2:7b:f0:a6:01:4f:be:48:e3:bf:c2:f5:83:
87:91:5d:ed:22:1a:ea:3d:33:0e:45:2a:6f:3b:a4:
a6:97:2e:08:81:45:38:10:d7:1f:85:b2:f4:42:43:
86:90:0b:c8:0e:de:e6:10:54:65:e6:d4:21:db:7f:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:89:C9:3A:FD:BC:DF:09:BA:BF:DA:4C:8B:9D:C6:CE:80:02:68:61
X509v3 Authority Key Identifier:
keyid:AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:28:b3:6f:55:70:53:cd:12:04:e5:d1:c8:77:12:a1:c6:cf:
09:c7:16:6d:6f:57:21:9e:86:14:aa:d4:e2:e6:d0:27:fe:da:
2a:9b:ec:b4:4b:e1:5b:0d:04:e8:fd:79:56:33:93:3b:84:b5:
a5:6c:ad:ef:21:8d:b6:2e:fb:b5:c3:1b:3d:36:82:69:16:60:
65:ce:c4:fd:db:3a:73:c3:55:89:94:ab:f7:52:59:e4:a9:9a:
c7:61:1d:53:16:af:33:20:6a:41:26:25:9e:31:80:08:19:32:
78:5b:e9:03:a7:65:7e:71:d1:56:21:9a:b3:91:4f:29:97:4b:
40:b9:8a:7b:75:b3:88:e7:9a:63:40:19:75:0f:1a:a5:f0:92:
b9:ff:b2:3b:4d:3a:fb:dc:99:1b:04:67:64:54:d9:99:3f:08:
c2:86:b7:1d:37:6a:8d:d4:1a:a4:85:a0:4f:48:e0:33:c6:2c:
ba:e7:c9:13:6c:7e:02:ca:d3:29:e6:ec:9e:c3:b2:f7:9a:b2:
9a:98:26:d8:eb:b0:7c:91:39:00:48:fa:b9:c9:01:43:b7:ce:
e1:1f:75:28:91:48:ee:dd:d9:08:57:6e:16:4c:aa:56:32:54:
c3:5e:b9:53:bb:36:f4:05:94:14:54:6e:05:31:46:83:aa:f8:
7f:56:e2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:43 2026 by rpki-client