Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier: EJeOyHC1ouB1vH4IpCxWyei6ht/XKRRY82bT96mn7EE=
Subject key identifier: 1E:C7:B4:16:91:40:B5:DA:6A:F8:12:88:FF:33:CF:F7:93:5B:54:16
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 019E1D23567C7AB5918FB9AD90010BFF7143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number: 1911
Signing time: Tue 12 May 2026 17:01:55 +0000
Manifest this update: Tue 12 May 2026 17:01:55 +0000
Manifest next update: Wed 13 May 2026 17:01:55 +0000
Files and hashes: 1: 7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa (hash: rL2+XjzMdSu0K1H05+EkUEOgBJlzmxMsT4JTGcTaBGg=)
2: B6r7tlhytkHdJheo1dsqfbry4Og.roa (hash: kKHkZjflWwkN797C4PStA913gNP9MCPk6MZE/gB/7Ew=)
3: KDXG6Q4UesZZrscbvutRtXUjZ04.roa (hash: glnL5SMYp1iujQsRgxaeozZQtOiC0uKkyBB33wcXcDg=)
4: MIMB6hj-pbhZmAS4NaP7XqTgm34.roa (hash: o3IJJeBy3jpC50UkL8Zt+4vWy+FDSWr1Y6a3t5k0o+s=)
5: fVw_ICDNU6Bi8MAJYhmrvlrXmRs.roa (hash: c+yT9ByZZB/rH9Ty28IEJWoy1m6iGPvLwsGkGU/4scM=)
6: k0BFiQAl7Q4-lOH-wpVIf6F16RE.roa (hash: LWb7rK2buJgbYTwsimy6ORw0odV4aXlPrizohyk5THc=)
7: keDaDU-vCcS6klKiWWvwuQqa3NE.roa (hash: FwrW61c/rLAqQnYEyfpdGoA2bVf4TFLR0gcdIXQaNqA=)
8: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: rJNO0yAimIPNyB6beH8tPEgBZMB8PY3T0Zmr+3RtUwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:56:7c:7a:b5:91:8f:b9:ad:90:01:0b:ff:71:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: May 12 17:01:55 2026 GMT
Not After : May 13 17:01:55 2026 GMT
Subject: CN=1ec7b4169140b5da6af81288ff33cff7935b5416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:dc:98:31:eb:61:7f:d9:b3:18:d9:85:90:
9d:cf:eb:b8:ba:f7:7b:7a:c9:8e:ff:54:af:93:e6:
94:81:36:8e:8c:bf:26:0e:69:30:15:6b:a3:cc:57:
96:aa:3a:33:30:41:9b:5f:0f:01:7f:f0:5d:84:f2:
3c:31:dd:48:9e:c8:99:3e:f5:0e:8f:60:68:4f:56:
93:65:be:d1:c5:33:1e:41:15:5e:65:0b:f1:36:80:
ff:6b:22:35:a7:64:dc:b1:49:10:d4:b6:02:e6:4b:
d8:9b:72:4c:0e:b2:a4:13:42:c8:34:83:5c:de:bc:
eb:3f:93:06:ed:2a:1e:78:e9:8e:f4:5d:4d:0b:ac:
cb:cc:e7:da:b4:e0:23:3e:4a:86:78:de:db:ed:31:
c2:4c:9a:23:89:20:1d:df:b8:f3:ea:d9:97:21:d4:
48:4d:d9:6c:61:a3:60:5e:e9:63:62:7c:f3:d4:d6:
4f:ad:3a:62:a2:26:14:ae:2c:58:4c:5a:50:89:89:
c6:84:09:43:9c:66:68:0a:2a:f5:3f:60:3e:22:85:
25:02:41:59:d8:e3:65:18:d5:f1:60:56:a7:d2:47:
73:f3:b3:b2:e3:3c:bd:5a:07:ac:5e:76:61:06:59:
64:49:a0:af:d9:28:72:ff:a0:2a:52:5c:3b:dd:41:
23:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C7:B4:16:91:40:B5:DA:6A:F8:12:88:FF:33:CF:F7:93:5B:54:16
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:81:d7:81:39:52:9f:10:ca:c9:f4:87:5a:c2:75:28:09:16:
f3:79:4c:93:b6:30:ac:5a:92:f5:1c:23:83:78:3d:2d:4f:3c:
56:96:42:44:eb:fa:7c:34:cf:e1:5d:b3:2e:87:de:3f:99:ee:
fe:88:0c:fd:5d:39:38:f3:9b:31:2e:bc:bf:90:41:4b:fb:fc:
b6:c3:2a:95:ea:3c:c9:20:99:13:a5:cd:30:c4:41:b3:e4:f2:
44:fe:34:7e:5e:8b:d6:1c:cc:e9:00:d0:03:8f:d9:65:f7:86:
b2:72:81:13:18:4c:9d:f0:1a:af:98:8d:dd:84:d0:5b:6e:b8:
0c:5d:34:8d:77:55:ac:fe:59:89:08:21:86:1a:cb:4f:ca:93:
81:77:9d:38:77:a5:8d:8c:4d:ea:6c:f1:de:fd:7f:b6:25:c3:
5a:d5:59:31:a1:fb:68:95:52:45:e7:63:99:86:8e:92:31:24:
0b:b5:e3:f2:e4:dd:60:4c:15:93:e4:04:6a:24:c2:6b:7f:69:
5b:b6:4d:9a:4f:6c:89:f9:f8:41:8b:94:2d:c4:7b:54:47:88:
13:ba:88:ac:85:f3:00:fa:53:5e:35:7a:cb:bb:30:0d:1f:30:
00:8b:f6:1b:f3:94:10:f2:86:8b:c7:ba:28:4c:c5:a3:55:55:
2e:b6:d0:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dI1Z8erWRj7mtkAEL/3FDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTM4NTAzZDcyOTMxNjI2ZGNiOGQxZTk0NmIyYWUwNmE3
M2QwMmUwHhcNMjYwNTEyMTcwMTU1WhcNMjYwNTEzMTcwMTU1WjAzMTEwLwYDVQQD
EygxZWM3YjQxNjkxNDBiNWRhNmFmODEyODhmZjMzY2ZmNzkzNWI1NDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4fcmDHrYX/ZsxjZhZCdz+u4uvd7
esmO/1Svk+aUgTaOjL8mDmkwFWujzFeWqjozMEGbXw8Bf/BdhPI8Md1InsiZPvUO
j2BoT1aTZb7RxTMeQRVeZQvxNoD/ayI1p2TcsUkQ1LYC5kvYm3JMDrKkE0LININc
3rzrP5MG7SoeeOmO9F1NC6zLzOfatOAjPkqGeN7b7THCTJojiSAd37jz6tmXIdRI
TdlsYaNgXuljYnzz1NZPrTpioiYUrixYTFpQiYnGhAlDnGZoCir1P2A+IoUlAkFZ
2ONlGNXxYFan0kdz87Oy4zy9WgesXnZhBllkSaCv2Shy/6AqUlw73UEjkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7HtBaRQLXaavgSiP8zz/eTW1QWMB8GA1UdIwQY
MBaAFK+ThQPXKTFibcuNHpRrKuBqc9AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYt
M2I4YjBkMWE1OWE5LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYtM2I4YjBkMWE1OWE5
LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIHXgTlS
nxDKyfSHWsJ1KAkW83lMk7YwrFqS9Rwjg3g9LU88VpZCROv6fDTP4V2zLofeP5nu
/ogM/V05OPObMS68v5BBS/v8tsMqleo8ySCZE6XNMMRBs+TyRP40fl6L1hzM6QDQ
A4/ZZfeGsnKBExhMnfAar5iN3YTQW264DF00jXdVrP5ZiQghhhrLT8qTgXedOHel
jYxN6mzx3v1/tiXDWtVZMaH7aJVSRedjmYaOkjEkC7Xj8uTdYEwVk+QEaiTCa39p
W7ZNmk9sifn4QYuULcR7VEeIE7qIrIXzAPpTXjV6y7swDR8wAIv2G/OUEPKGi8e6
KEzFo1VVLrbQpQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:08:18 2026 by rpki-client