Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
File: rsr5Su3_76Q2a8or65GZLB2zTMw.mft (raw, json)
Hash identifier: frJOrCZmyAnNk3mcfWSSImcOG+MM8s6p4ArqsJ21fWw=
Subject key identifier: F9:EF:CF:30:69:05:B0:23:BB:67:B2:A2:61:4E:9E:61:A0:B7:8E:20
Authority key identifier: AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
Certificate issuer: /CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Certificate serial: 019E2091D855E086D285E6B9FD09370D5F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
Manifest number: 0C9F
Signing time: Wed 13 May 2026 09:01:29 +0000
Manifest this update: Wed 13 May 2026 09:01:29 +0000
Manifest next update: Thu 14 May 2026 09:01:29 +0000
Files and hashes: 1: UG6rGpMCRGYwc6M9y1VhChB7D-o.roa (hash: PZpY+UE6o2ohwLTnt0nTubnygJyEIP8h+jg+Dy/lOic=)
2: rsr5Su3_76Q2a8or65GZLB2zTMw.crl (hash: /Lb9vO3/7INkctCs1AWrB70mnvzA1V47uApG84qB4r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:d8:55:e0:86:d2:85:e6:b9:fd:09:37:0d:5f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Validity
Not Before: May 13 09:01:29 2026 GMT
Not After : May 14 09:01:29 2026 GMT
Subject: CN=f9efcf306905b023bb67b2a2614e9e61a0b78e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:f1:ce:df:a5:22:d1:12:62:bb:79:91:e2:
45:52:7d:d9:70:42:43:a7:fa:b0:d7:04:f0:ca:7c:
65:6e:f6:c6:84:a7:a4:82:84:8d:8e:e4:15:90:13:
e2:6d:59:dd:f6:4e:59:58:20:11:7a:5f:17:fd:e9:
d3:c9:42:a5:15:d4:92:aa:a2:a9:a7:cb:db:e4:89:
ba:74:bc:6e:c4:74:89:f6:6e:5d:c1:0c:2e:6a:df:
ec:a8:9a:56:4e:55:65:18:26:a0:00:18:33:9f:06:
3a:ce:8e:57:b6:5f:ab:d3:93:4e:c8:a6:9c:ca:54:
28:f2:9f:c5:e8:3a:ac:61:c3:9d:06:c7:22:79:ce:
95:24:a1:b8:b4:7b:ad:63:2a:73:51:77:7d:2a:65:
f5:8d:c3:a2:ae:a8:55:d8:cb:54:09:4a:a6:74:65:
db:28:ca:02:84:1a:9c:4d:6b:7a:ef:82:15:05:0a:
8c:26:81:04:38:67:d5:ee:16:f3:2e:45:c1:d2:87:
a8:3d:9f:89:21:8f:10:a5:60:7f:41:e5:41:0d:99:
88:97:99:c5:cf:39:9f:cf:e4:a5:29:64:5e:bc:0d:
be:1b:02:19:97:bf:8f:69:aa:95:bd:76:7b:e9:9e:
df:13:eb:39:17:89:c1:a8:26:b5:94:d1:d7:17:10:
02:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EF:CF:30:69:05:B0:23:BB:67:B2:A2:61:4E:9E:61:A0:B7:8E:20
X509v3 Authority Key Identifier:
keyid:AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ca:a0:c3:c2:34:49:f0:2f:26:02:d0:b6:79:14:cb:57:01:
e5:b9:3c:c3:13:9c:de:29:2e:30:71:b9:bc:9b:1b:64:ce:b6:
e5:2a:2a:37:fd:aa:19:de:08:a6:21:a5:f2:e6:ab:d8:43:57:
69:95:39:39:aa:03:00:84:f5:b2:b5:d3:1f:d7:8a:a2:77:55:
47:b2:e9:3f:9d:05:d3:1b:0e:6c:06:b0:ae:9a:f0:a5:6b:03:
3e:b5:a2:a4:f9:6a:1d:73:fc:9e:26:ba:7d:c1:c9:33:ca:b7:
3f:63:9f:91:e2:94:79:92:f2:d0:b7:1b:3c:f1:a7:7c:36:f1:
9b:d4:58:63:ef:18:03:fe:88:8c:a4:74:3c:cc:59:3c:96:85:
9b:2c:fd:42:46:75:9a:66:fd:25:82:75:f3:f7:23:fa:52:02:
9c:e7:b4:4b:d1:e0:a3:8b:3c:65:c6:bb:42:70:4a:da:4f:ca:
d1:a6:db:b7:15:05:36:e1:aa:e7:aa:da:d6:07:1a:35:e1:5e:
07:c5:a6:b9:68:cc:6b:1f:6c:80:a4:c1:66:47:44:91:54:28:
47:c5:4d:33:37:16:d8:c1:df:45:7d:56:00:ef:69:ef:36:f7:
ec:ca:6a:fc:fe:df:fb:c4:18:33:f4:86:14:79:64:ca:93:b1:
37:50:5c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:48 2026 by rpki-client