Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
File: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft (raw, json)
Hash identifier: yimycfa74C4EJMai26r8u+sJOrCh3oVFuA6plSWRtPA=
Subject key identifier: 52:1E:4C:DF:03:FF:A1:C1:00:42:90:C6:27:32:28:97:0D:1F:C6:C0
Authority key identifier: AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
Certificate issuer: /CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Certificate serial: 019E1F47A5A5316587FA7775FDB443B0D9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
Manifest number: 05E4
Signing time: Wed 13 May 2026 03:00:49 +0000
Manifest this update: Wed 13 May 2026 03:00:49 +0000
Manifest next update: Thu 14 May 2026 03:00:49 +0000
Files and hashes: 1: SW0jIvk1wvk_Jl_m70Mc6YZkuCg.roa (hash: xgcppBoYJknCSghed+wm1HRzdAorIWKU+WyvltEZlPQ=)
2: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl (hash: uXwCsB6k42Cf5jEOjhfmcKaQhJK5VUE6aoTI00/rdPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:a5:a5:31:65:87:fa:77:75:fd:b4:43:b0:d9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Validity
Not Before: May 13 03:00:49 2026 GMT
Not After : May 14 03:00:49 2026 GMT
Subject: CN=521e4cdf03ffa1c1004290c6273228970d1fc6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:82:dc:d7:42:25:6d:c5:36:ce:40:36:42:
9a:a6:fa:37:a6:d8:b7:a9:90:9d:89:cf:20:22:fb:
c2:bf:a1:bd:59:34:e0:a8:cb:cb:f5:37:80:1c:9a:
08:6a:e9:05:f2:9d:d2:83:d2:ba:31:36:46:f2:9f:
a0:72:dd:7e:d7:4a:70:42:7f:91:0e:79:0f:60:08:
d3:64:ab:73:b0:b4:af:3c:69:66:fe:d2:2b:69:cc:
75:36:80:62:22:c8:ab:b5:fb:8b:aa:29:d3:bd:df:
46:61:19:e3:91:75:ff:15:9a:6b:90:39:3c:fe:59:
a8:5e:1d:3c:c2:d8:06:b1:28:76:be:1f:5d:49:8f:
34:88:ac:63:de:ea:fa:d2:3c:44:4f:16:f8:7f:ab:
43:da:76:a4:e8:0c:7a:8e:f9:82:45:ef:c7:0b:83:
b2:6b:2c:b3:26:39:02:f8:33:b7:58:aa:04:9d:d4:
bf:68:49:8c:7a:18:1d:a3:46:42:2a:b1:5d:10:5c:
11:5d:e6:51:e9:9f:80:95:57:3e:b6:e6:9e:c6:66:
21:4b:b2:b6:63:69:22:93:df:78:c5:06:02:cb:75:
e7:e7:ab:88:4a:00:9c:f3:91:7c:67:d8:49:c5:f7:
c1:ca:3a:d3:01:8b:a3:2d:47:bc:b2:38:04:6a:c4:
f9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1E:4C:DF:03:FF:A1:C1:00:42:90:C6:27:32:28:97:0D:1F:C6:C0
X509v3 Authority Key Identifier:
keyid:AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f8:4d:63:cc:6c:06:7d:b0:48:65:3a:59:e8:d0:f0:d9:a5:
73:fb:72:08:f8:b7:85:cd:1e:0c:30:53:4d:06:74:fc:af:48:
85:51:0d:b6:79:43:72:4b:19:24:b2:c7:5d:e1:59:95:db:2e:
8c:7c:23:2b:77:de:b0:0d:58:d3:52:fa:b9:f8:78:57:58:c8:
10:ed:f8:94:80:0f:78:a2:3f:c2:4f:a4:10:b7:2b:ba:b7:14:
e4:49:44:84:81:41:f0:12:67:9d:80:2f:e5:1d:7e:37:7e:b5:
ca:28:0f:24:93:ce:98:85:2e:83:52:0b:9d:0c:19:ea:7a:8c:
bc:92:87:1f:7e:70:b0:d9:8e:8a:bd:c9:2b:22:c3:ec:f8:e9:
4d:2e:7e:4a:db:b5:19:b2:6f:7d:26:30:c2:cf:e2:c0:c7:d9:
38:7d:26:d0:b8:8c:83:57:0f:2b:c2:e4:07:dc:9a:87:46:19:
41:af:4d:51:c0:ec:a2:f2:c1:21:5b:10:6d:98:c1:b5:2e:ac:
44:7f:94:1e:52:85:d5:ba:3b:80:38:db:c0:4e:45:d0:2f:96:
80:2a:85:4b:18:6e:6c:b1:e5:32:b2:ce:f3:f7:31:77:5a:59:
f9:bd:74:66:5b:c0:76:a9:66:7c:c2:93:a8:e4:d5:a5:e5:5e:
ad:49:c5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:03:11 2026 by rpki-client