Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
File: r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft (raw, json)
Hash identifier: wjXUID4BOKLCe0CgMALF76ucXyGSnhVEcm64fe5ihfY=
Subject key identifier: 24:A8:0F:30:1F:4A:98:B4:27:52:3E:E3:09:98:5E:9C:D8:D5:37:7B
Authority key identifier: AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
Certificate issuer: /CN=af934ec694af68134b7514c10dcd13857b459e38
Certificate serial: 019D284DA293B0525338F0AF5DD8EE9F3902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
Manifest number: 1284
Signing time: Thu 26 Mar 2026 04:01:09 +0000
Manifest this update: Thu 26 Mar 2026 04:01:09 +0000
Manifest next update: Fri 27 Mar 2026 04:01:09 +0000
Files and hashes: 1: G7zbH0s176fZtCse-15mMTljv8o.roa (hash: bng6dC4LjgT90wt4Nd1UlCg1rSNDjhq1PyJI9ymWjxk=)
2: r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl (hash: scytyTJTZNz5uH9UbmOlcJYUQt4sNM69/1ajJi6Bmnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a2:93:b0:52:53:38:f0:af:5d:d8:ee:9f:39:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af934ec694af68134b7514c10dcd13857b459e38
Validity
Not Before: Mar 26 04:01:09 2026 GMT
Not After : Mar 27 04:01:09 2026 GMT
Subject: CN=24a80f301f4a98b427523ee309985e9cd8d5377b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:cf:b6:7c:dc:9d:b8:80:63:ee:82:5b:9e:
4e:51:f6:1f:83:93:1b:21:64:92:57:7e:90:00:39:
1a:d1:01:79:aa:c3:03:bf:80:01:75:b1:de:66:7f:
6f:67:75:e1:e4:25:c1:59:13:1b:84:62:0c:a6:a5:
d2:eb:ac:db:36:21:de:6c:f6:fb:ca:b2:f2:0b:f1:
e5:cd:69:b3:66:a4:2f:1c:7e:01:e9:86:7d:a6:45:
5d:27:71:10:e4:bf:db:c6:a1:c8:77:7b:f3:ab:2d:
59:3e:1f:bd:cf:10:3c:5b:fe:6e:36:86:0d:e6:0c:
7a:7b:be:6f:94:14:23:67:32:e8:fd:e4:8a:54:73:
30:21:c8:9f:1a:92:b4:7e:e2:b4:01:12:73:0e:bf:
f2:55:ea:9b:4f:7b:06:fa:22:05:b3:ec:9a:3f:90:
90:cf:a1:a5:e9:24:b1:6e:bf:6a:cc:c8:33:fc:2c:
25:4a:4d:de:b8:e8:c5:52:06:ab:c3:5c:6b:2e:e2:
2f:1a:34:f3:62:31:58:05:d3:72:88:9a:4a:90:70:
c6:e3:5a:e2:12:3d:d5:27:a7:31:b3:6a:c4:30:ae:
0f:d3:8e:4a:a0:29:00:01:4e:6a:7d:7d:b5:61:17:
29:1d:16:d1:5f:2d:17:f1:0a:a2:ef:02:75:3a:bd:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A8:0F:30:1F:4A:98:B4:27:52:3E:E3:09:98:5E:9C:D8:D5:37:7B
X509v3 Authority Key Identifier:
keyid:AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c6:0e:d2:bc:fc:f0:f1:fc:0e:f9:b2:f7:37:0a:bc:1a:5b:
30:a5:85:8d:9e:13:29:b8:72:81:52:2c:14:d1:7b:b1:70:0f:
40:31:d7:bb:e6:be:54:4f:5d:bd:79:2b:d1:b0:13:6f:3f:54:
e4:e6:0c:8d:f4:6e:86:f6:7e:e6:29:80:41:fa:51:3b:5a:f0:
59:8d:b8:a2:28:b3:4b:3f:ca:8b:35:64:fa:cc:6e:06:07:75:
73:11:5f:47:cf:75:0d:2b:0e:71:78:43:22:bd:a4:b3:82:79:
9b:5e:01:a6:63:9d:f8:d2:ba:b9:13:2c:96:5e:db:11:34:c3:
0e:31:b7:f8:e1:e4:08:d9:5b:e7:ac:b0:6d:f9:cd:b5:1a:b8:
b8:bc:c5:9c:8a:95:d7:dc:74:86:63:ac:e3:b9:83:6a:03:0e:
8c:df:2b:53:c7:38:05:19:7a:96:7a:d4:e3:f3:73:5b:98:52:
f7:60:14:2c:bb:1d:82:59:eb:ef:c2:26:b2:66:c3:00:9b:d7:
95:3c:e6:92:c4:e8:5f:17:29:a4:ba:fe:d7:01:57:60:d7:fa:
f3:89:0d:54:d9:9a:59:09:88:d8:e2:e0:13:96:58:e5:3b:6d:
c6:12:66:75:b9:38:89:c8:d1:f1:37:83:40:39:b7:14:a0:7f:
da:58:7b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:49 2026 by rpki-client