
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier: SSZANV5gJo7VMej7qB6//TSxwZTlcNxQLoCxhs5BJWI=
Subject key identifier: 95:7F:9B:5F:40:A6:9A:7D:5B:A2:64:64:41:32:48:CA:A6:39:7A:8B
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 01A0E1E1C35272A55D8F78CF2145D23F30C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number: 1A81
Signing time: Sun 27 Sep 2026 08:01:04 +0000
Manifest this update: Sun 27 Sep 2026 08:01:04 +0000
Manifest next update: Mon 28 Sep 2026 08:01:04 +0000
Files and hashes: 1: 7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa (hash: rL2+XjzMdSu0K1H05+EkUEOgBJlzmxMsT4JTGcTaBGg=)
2: MIMB6hj-pbhZmAS4NaP7XqTgm34.roa (hash: o3IJJeBy3jpC50UkL8Zt+4vWy+FDSWr1Y6a3t5k0o+s=)
3: cLhMOaHsTiCbjcGDDECKr1VTwQY.roa (hash: Iqsn8kMpNh5UcFT7O/wgulPUF+XCyAq288IMTgURFHM=)
4: fVw_ICDNU6Bi8MAJYhmrvlrXmRs.roa (hash: c+yT9ByZZB/rH9Ty28IEJWoy1m6iGPvLwsGkGU/4scM=)
5: k0BFiQAl7Q4-lOH-wpVIf6F16RE.roa (hash: LWb7rK2buJgbYTwsimy6ORw0odV4aXlPrizohyk5THc=)
6: keDaDU-vCcS6klKiWWvwuQqa3NE.roa (hash: FwrW61c/rLAqQnYEyfpdGoA2bVf4TFLR0gcdIXQaNqA=)
7: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: Oh8ThxI8JO3Zllv3uS03y0YRXrNofD1+d8SpL2xcyGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e1:c3:52:72:a5:5d:8f:78:cf:21:45:d2:3f:30:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Sep 27 08:01:04 2026 GMT
Not After : Sep 28 08:01:04 2026 GMT
Subject: CN=957f9b5f40a69a7d5ba26464413248caa6397a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:31:99:f8:f1:38:81:d0:8c:cc:5f:7d:04:11:
3b:01:6a:f9:7a:8c:4a:15:7d:66:89:66:01:55:c0:
62:2b:ac:45:0c:33:89:7c:45:7b:73:36:32:1a:9a:
11:fc:f6:0f:55:bc:25:49:84:0e:8a:84:7c:e2:92:
2b:a5:a5:ae:5c:91:3c:0d:c6:8e:6f:e7:60:05:bf:
fc:8e:c5:07:09:8e:04:54:ad:51:89:f3:29:98:a5:
34:ec:5c:1e:41:34:1b:ea:0e:cf:7e:c9:65:9e:b2:
dd:9e:0f:2a:af:f6:0f:41:41:ea:02:d7:34:46:90:
56:12:71:a3:e1:be:6c:57:e4:07:a7:ac:e4:f6:0c:
c2:e2:a2:64:af:a5:fc:ed:f8:29:20:4a:78:cf:54:
6f:f2:e4:75:e5:21:d7:f8:e3:bb:76:1e:eb:51:8c:
92:e1:14:6e:fc:bd:90:01:f5:55:47:b3:67:22:79:
1b:ac:e6:e1:27:74:cd:96:ee:ce:d5:29:ee:e2:80:
67:fa:de:c1:df:31:76:e7:00:8b:f4:1c:98:05:6e:
0a:fe:51:8c:6d:1f:a4:d4:2a:ed:01:72:22:10:78:
e4:67:1b:ec:b4:de:8e:f5:09:93:50:33:9b:f4:5f:
53:bd:e1:2d:aa:8c:b2:8d:6c:30:0f:30:8e:96:ef:
ab:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7F:9B:5F:40:A6:9A:7D:5B:A2:64:64:41:32:48:CA:A6:39:7A:8B
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ce:56:bb:d6:f6:09:12:9b:d8:31:ee:a7:21:50:56:bd:1c:
d1:07:d2:3b:44:17:2c:35:a9:2d:d2:99:67:76:6a:f5:ce:a9:
0b:63:dc:50:38:ea:b0:90:f0:75:0d:01:8a:a2:06:6d:24:d1:
f2:75:38:3a:3c:53:f6:13:97:ba:d5:af:35:17:fd:a6:95:77:
7f:21:98:70:7a:ab:b4:b0:c9:e7:b7:23:68:df:ad:2e:25:db:
ad:42:d3:e1:81:5c:e1:84:9e:b4:e0:e8:c5:a5:88:19:a6:0c:
39:bd:5e:48:70:0c:09:dc:04:73:f2:ab:8e:2c:de:23:b4:21:
09:ff:97:c6:14:fe:3e:21:bb:ce:04:51:25:9a:54:bc:09:af:
00:d0:6f:d0:95:ec:f0:eb:55:73:17:ff:ed:6a:c2:c8:52:33:
bb:21:7f:e9:d9:9c:2f:99:88:37:71:bd:8d:15:13:17:39:9d:
51:70:2a:3a:09:55:9b:21:60:63:7e:c8:8d:2f:5e:cf:d6:53:
78:b1:90:d0:e5:69:98:5d:84:e4:bf:00:fe:80:42:16:68:8e:
33:ee:2a:35:b9:05:ae:d3:90:0c:72:84:5f:87:09:8a:d6:49:
8d:9e:3a:ba:9a:63:69:e3:d4:55:9f:a8:3b:bf:ab:7e:f8:36:
a7:e6:a9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:45:58 2026 by rpki-client