Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier: F5UPnmPFciYoTfUG1tsNULqxA2JXnfwRbAtbpJGMuak=
Subject key identifier: C7:39:FC:6E:F1:3F:13:65:58:2D:68:0A:33:B8:B7:32:DF:D6:83:CE
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 019D27DFE58B5A8E7B12126FFD9524C2326B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number: 1892
Signing time: Thu 26 Mar 2026 02:01:17 +0000
Manifest this update: Thu 26 Mar 2026 02:01:17 +0000
Manifest next update: Fri 27 Mar 2026 02:01:17 +0000
Files and hashes: 1: 7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa (hash: rL2+XjzMdSu0K1H05+EkUEOgBJlzmxMsT4JTGcTaBGg=)
2: B6r7tlhytkHdJheo1dsqfbry4Og.roa (hash: kKHkZjflWwkN797C4PStA913gNP9MCPk6MZE/gB/7Ew=)
3: KDXG6Q4UesZZrscbvutRtXUjZ04.roa (hash: glnL5SMYp1iujQsRgxaeozZQtOiC0uKkyBB33wcXcDg=)
4: MIMB6hj-pbhZmAS4NaP7XqTgm34.roa (hash: o3IJJeBy3jpC50UkL8Zt+4vWy+FDSWr1Y6a3t5k0o+s=)
5: fVw_ICDNU6Bi8MAJYhmrvlrXmRs.roa (hash: c+yT9ByZZB/rH9Ty28IEJWoy1m6iGPvLwsGkGU/4scM=)
6: k0BFiQAl7Q4-lOH-wpVIf6F16RE.roa (hash: LWb7rK2buJgbYTwsimy6ORw0odV4aXlPrizohyk5THc=)
7: keDaDU-vCcS6klKiWWvwuQqa3NE.roa (hash: FwrW61c/rLAqQnYEyfpdGoA2bVf4TFLR0gcdIXQaNqA=)
8: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: 90hbIA99LgrSEIAhOKLwoUjbCgrvvg+nyL0Hjmfl2NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e5:8b:5a:8e:7b:12:12:6f:fd:95:24:c2:32:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Mar 26 02:01:17 2026 GMT
Not After : Mar 27 02:01:17 2026 GMT
Subject: CN=c739fc6ef13f1365582d680a33b8b732dfd683ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:ae:52:bc:21:70:c8:ea:9c:90:cb:15:0d:
cf:a7:b3:18:7b:8d:8a:9d:09:53:ac:63:47:23:35:
a5:09:f3:6d:de:86:f7:bc:f7:54:b5:75:d1:74:b2:
59:cc:d2:69:0f:01:71:d6:91:17:68:b7:0c:12:62:
35:27:42:42:45:7a:1c:90:10:0b:d5:6d:08:11:3c:
83:c3:86:e3:d5:35:a4:e5:6b:c3:01:92:04:17:5e:
2a:31:5a:84:21:78:86:e6:a1:3a:7b:42:e9:65:a1:
77:45:fa:b5:34:89:96:4e:62:44:7c:f6:2f:a8:b2:
07:52:1a:c0:f5:c2:0f:3f:7b:98:60:6d:84:44:5b:
b4:f2:c5:be:94:48:96:e0:61:c2:ab:a8:9a:49:31:
32:7e:6e:ef:d8:e7:96:07:27:be:75:78:9d:cf:12:
8e:85:6f:52:f9:1e:8b:ac:56:63:e8:82:a9:7a:9f:
a1:06:ed:f6:6a:40:cc:e1:13:aa:6e:c2:13:cd:5f:
e6:16:43:4f:3f:01:1b:46:6c:79:6a:cc:9a:44:90:
62:14:94:f2:a7:18:06:5d:64:5d:4a:64:6c:e9:63:
3f:33:22:9b:86:06:d4:59:bd:4b:ba:70:9d:b9:c8:
4a:97:e7:ed:45:87:3e:33:34:ef:e0:1c:4f:99:31:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:39:FC:6E:F1:3F:13:65:58:2D:68:0A:33:B8:B7:32:DF:D6:83:CE
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4a:11:75:85:db:7a:0c:98:ad:eb:29:05:76:05:3c:e1:88:
15:34:18:e6:8f:37:cc:62:b2:96:69:60:f9:50:64:4c:c1:ad:
7f:69:e2:42:a1:cb:2d:33:12:f4:16:eb:9c:29:3b:51:f4:c8:
35:87:86:15:0c:fd:41:56:11:67:e7:8a:0f:e1:ff:75:d6:e5:
7a:22:00:29:63:5d:96:b6:45:65:5b:d2:11:c0:0e:6a:78:90:
51:61:6f:8f:9a:82:13:91:0a:f3:7f:60:7d:73:41:0d:34:73:
8d:02:5a:94:b4:46:00:0f:c7:42:35:26:66:28:6d:3b:a1:7c:
99:c0:6d:77:c9:e8:00:c1:c3:05:13:4d:18:f1:b6:7f:fe:f7:
c8:13:9f:f3:f1:44:db:91:99:3a:21:0e:41:fd:f7:8e:73:75:
ef:36:0e:53:dc:38:2a:fc:45:b3:c4:02:0e:9a:3c:8b:72:81:
47:9a:a5:8f:3c:f4:5e:d2:95:97:dc:e1:8f:0a:c7:55:b1:2e:
de:fe:a8:f3:0c:b7:f5:9c:3d:fb:04:05:87:b2:b7:11:f5:06:
09:1a:78:61:1d:90:43:9c:6d:20:20:ec:18:06:f5:f2:e0:e6:
09:5e:72:81:34:55:b3:e9:a7:40:5b:da:75:52:eb:ec:bf:dd:
da:ea:2c:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3+WLWo57EhJv/ZUkwjJrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTM4NTAzZDcyOTMxNjI2ZGNiOGQxZTk0NmIyYWUwNmE3
M2QwMmUwHhcNMjYwMzI2MDIwMTE3WhcNMjYwMzI3MDIwMTE3WjAzMTEwLwYDVQQD
EyhjNzM5ZmM2ZWYxM2YxMzY1NTgyZDY4MGEzM2I4YjczMmRmZDY4M2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwquUrwhcMjqnJDLFQ3Pp7MYe42K
nQlTrGNHIzWlCfNt3ob3vPdUtXXRdLJZzNJpDwFx1pEXaLcMEmI1J0JCRXockBAL
1W0IETyDw4bj1TWk5WvDAZIEF14qMVqEIXiG5qE6e0LpZaF3Rfq1NImWTmJEfPYv
qLIHUhrA9cIPP3uYYG2ERFu08sW+lEiW4GHCq6iaSTEyfm7v2OeWBye+dXidzxKO
hW9S+R6LrFZj6IKpep+hBu32akDM4ROqbsITzV/mFkNPPwEbRmx5asyaRJBiFJTy
pxgGXWRdSmRs6WM/MyKbhgbUWb1LunCduchKl+ftRYc+MzTv4BxPmTFTHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMc5/G7xPxNlWC1oCjO4tzLf1oPOMB8GA1UdIwQY
MBaAFK+ThQPXKTFibcuNHpRrKuBqc9AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYt
M2I4YjBkMWE1OWE5LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYtM2I4YjBkMWE1OWE5
LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0oRdYXb
egyYrespBXYFPOGIFTQY5o83zGKylmlg+VBkTMGtf2niQqHLLTMS9BbrnCk7UfTI
NYeGFQz9QVYRZ+eKD+H/ddbleiIAKWNdlrZFZVvSEcAOaniQUWFvj5qCE5EK839g
fXNBDTRzjQJalLRGAA/HQjUmZihtO6F8mcBtd8noAMHDBRNNGPG2f/73yBOf8/FE
25GZOiEOQf33jnN17zYOU9w4KvxFs8QCDpo8i3KBR5qljzz0XtKVl9zhjwrHVbEu
3v6o8wy39Zw9+wQFh7K3EfUGCRp4YR2QQ5xtICDsGAb18uDmCV5ygTRVs+mnQFva
dVLr7L/d2uoszQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:41 2026 by rpki-client