Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
File: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft (raw, json)
Hash identifier: Hro5E+kDi4F3fp2KsXmfbfoVleS9EPzPSOcdT4D/d3I=
Subject key identifier: F4:D0:8F:5A:22:17:C2:6A:E0:66:EE:39:A3:DC:68:EB:EF:55:BB:98
Authority key identifier: AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
Certificate issuer: /CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Certificate serial: 01A0DC4D926EAD217C1DD4892F2F1D631AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
Manifest number: 074F
Signing time: Sat 26 Sep 2026 06:01:06 +0000
Manifest this update: Sat 26 Sep 2026 06:01:06 +0000
Manifest next update: Sun 27 Sep 2026 06:01:06 +0000
Files and hashes: 1: SW0jIvk1wvk_Jl_m70Mc6YZkuCg.roa (hash: xgcppBoYJknCSghed+wm1HRzdAorIWKU+WyvltEZlPQ=)
2: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl (hash: lTluNgH71i3MLIOeICGXRcLHfZOkMO9mdeEVMdU9Hpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:92:6e:ad:21:7c:1d:d4:89:2f:2f:1d:63:1a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Validity
Not Before: Sep 26 06:01:06 2026 GMT
Not After : Sep 27 06:01:06 2026 GMT
Subject: CN=f4d08f5a2217c26ae066ee39a3dc68ebef55bb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:38:6d:6f:8f:8e:8f:2e:a9:01:44:cb:bf:35:
00:cd:3d:5d:fa:bf:45:cb:fa:b7:25:d1:3a:cc:39:
60:12:a1:49:aa:a8:2f:8b:74:19:7a:8a:84:43:51:
e2:52:12:5b:4d:25:ce:9e:e8:00:e5:3c:50:df:33:
2b:00:fa:6b:2d:53:cd:81:6a:89:c6:1b:d2:4d:ec:
51:ce:98:8f:24:33:d6:ea:a5:96:57:fd:a2:df:d1:
7a:97:50:9c:a0:5e:d4:0d:4e:c5:a9:db:77:34:b8:
8b:33:92:00:46:e7:00:d9:18:54:3e:10:56:0c:fa:
f3:07:b8:65:b9:2f:64:5a:b9:72:1e:27:7b:bc:26:
77:53:d0:71:c6:04:7b:6e:a3:fc:1a:82:a6:19:f5:
00:22:5f:c7:6b:e0:39:ca:be:2e:75:df:43:36:a1:
f0:6e:de:79:c7:32:0d:5d:96:94:cc:35:de:e2:a3:
65:1c:0c:b8:b8:5c:7c:bf:35:fc:ce:48:04:84:a3:
7f:97:6d:90:b0:6f:21:29:3a:de:48:f8:e6:93:de:
f7:a0:79:f9:f4:3f:2f:68:7c:88:cb:52:a5:7c:81:
bb:57:cb:bb:36:dd:42:1b:d5:aa:c9:5f:a4:94:88:
07:be:61:2c:67:b9:fe:d3:49:65:4e:ff:b8:b0:44:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D0:8F:5A:22:17:C2:6A:E0:66:EE:39:A3:DC:68:EB:EF:55:BB:98
X509v3 Authority Key Identifier:
keyid:AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ca:a9:82:f5:96:c8:f2:cb:a4:da:c0:95:66:54:8a:cd:cc:
20:cb:89:7e:00:5b:be:87:41:84:2d:9c:3f:d2:e5:89:8e:c9:
05:fa:31:f1:06:a3:9a:db:c2:62:0a:2f:8b:ea:cd:d4:b5:16:
e4:16:b6:84:ea:4b:35:39:ba:6e:45:77:43:28:9d:80:c4:f5:
2f:2f:0c:c8:21:20:f9:2c:92:d2:8e:03:39:12:0f:30:af:e3:
41:29:0d:72:cf:16:29:bf:18:9f:1f:13:1d:3c:d0:98:c7:4a:
1a:f8:cc:6a:b7:39:72:50:97:0c:14:6b:72:85:54:0a:ba:6b:
4f:e2:8f:c0:02:ae:d7:c8:db:22:34:48:c7:35:d8:1a:39:50:
ff:ce:00:72:1c:38:2d:b1:eb:6e:9f:37:45:26:a2:86:cc:28:
78:17:84:e5:f7:11:79:0d:42:02:b6:88:bd:79:dc:ab:65:44:
0c:2a:fd:76:88:22:4e:af:a3:65:a9:88:a1:62:1b:b0:8b:12:
77:7f:56:30:cb:3a:6c:c9:5e:53:af:41:28:9b:69:3b:33:a5:
d6:d8:ef:9a:b1:02:76:0a:50:4f:8e:5c:57:1b:ce:fc:fd:6d:
5a:a7:f2:53:40:3c:db:83:5e:a4:7b:8b:81:e2:d6:ee:41:6c:
cc:80:f2:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcTZJurSF8HdSJLy8dYxryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOWIyY2VmZTM4OWExYWU0OTc1NmVkYzJiMzI5M2U1ODgz
MGNiODIwHhcNMjYwOTI2MDYwMTA2WhcNMjYwOTI3MDYwMTA2WjAzMTEwLwYDVQQD
EyhmNGQwOGY1YTIyMTdjMjZhZTA2NmVlMzlhM2RjNjhlYmVmNTViYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jhtb4+Ojy6pAUTLvzUAzT1d+r9F
y/q3JdE6zDlgEqFJqqgvi3QZeoqEQ1HiUhJbTSXOnugA5TxQ3zMrAPprLVPNgWqJ
xhvSTexRzpiPJDPW6qWWV/2i39F6l1CcoF7UDU7Fqdt3NLiLM5IARucA2RhUPhBW
DPrzB7hluS9kWrlyHid7vCZ3U9BxxgR7bqP8GoKmGfUAIl/Ha+A5yr4udd9DNqHw
bt55xzINXZaUzDXe4qNlHAy4uFx8vzX8zkgEhKN/l22QsG8hKTreSPjmk973oHn5
9D8vaHyIy1KlfIG7V8u7Nt1CG9WqyV+klIgHvmEsZ7n+00llTv+4sERPBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTQj1oiF8Jq4GbuOaPcaOvvVbuYMB8GA1UdIwQY
MBaAFK+bLO/jiaGuSXVu3Csyk+WIMMuCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVzczctT0pvYTVKZFc3Y0t6S1Q1WWd3eTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZjBiZmUtOTU1NC00YjdlLTk1ZGEt
NDY5NjE5ZDRlY2RiLzEvcjVzczctT0pvYTVKZFc3Y0t6S1Q1WWd3eTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZjBiZmUtOTU1NC00YjdlLTk1ZGEtNDY5NjE5ZDRlY2Ri
LzEvcjVzczctT0pvYTVKZFc3Y0t6S1Q1WWd3eTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8qpgvWW
yPLLpNrAlWZUis3MIMuJfgBbvodBhC2cP9LliY7JBfox8QajmtvCYgovi+rN1LUW
5Ba2hOpLNTm6bkV3QyidgMT1Ly8MyCEg+SyS0o4DORIPMK/jQSkNcs8WKb8Ynx8T
HTzQmMdKGvjMarc5clCXDBRrcoVUCrprT+KPwAKu18jbIjRIxzXYGjlQ/84Achw4
LbHrbp83RSaihswoeBeE5fcReQ1CAraIvXncq2VEDCr9dogiTq+jZamIoWIbsIsS
d39WMMs6bMleU69BKJtpOzOl1tjvmrECdgpQT45cVxvO/P1tWqfyU0A824NepHuL
geLW7kFszIDy9w==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:53:39 2026 by rpki-client