Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
File: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft (raw, json)
Hash identifier: x7O+RU2AdPJRVKRNhYg/0BqLWBR3JbhQ5Ad6StwCDHM=
Subject key identifier: DC:7D:91:9F:1B:7B:E7:7C:00:42:36:8C:1E:38:47:60:FB:06:5E:E8
Authority key identifier: AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
Certificate issuer: /CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Certificate serial: 019F921176BA653D73B93AB3BA95EC760C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
Manifest number: 06A4
Signing time: Fri 24 Jul 2026 03:00:45 +0000
Manifest this update: Fri 24 Jul 2026 03:00:45 +0000
Manifest next update: Sat 25 Jul 2026 03:00:45 +0000
Files and hashes: 1: SW0jIvk1wvk_Jl_m70Mc6YZkuCg.roa (hash: xgcppBoYJknCSghed+wm1HRzdAorIWKU+WyvltEZlPQ=)
2: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl (hash: mHx6nIGh1lZcA5voyVBndZRA1okWFIPj9OxkGkF4HcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:76:ba:65:3d:73:b9:3a:b3:ba:95:ec:76:0c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Validity
Not Before: Jul 24 03:00:45 2026 GMT
Not After : Jul 25 03:00:45 2026 GMT
Subject: CN=dc7d919f1b7be77c0042368c1e384760fb065ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:fc:4d:cc:33:cc:96:bd:59:55:52:b1:df:
fb:67:32:65:9b:e7:7c:e8:7c:ca:4e:07:3a:d4:06:
41:b9:31:ae:98:9a:69:f8:e9:b1:61:b1:c8:88:68:
99:6d:7d:3f:07:f9:99:59:8d:20:bc:7b:66:e7:f1:
63:23:e1:fb:c2:65:ba:e5:fd:d1:ef:d2:4f:1c:5e:
73:36:7b:41:32:ca:6f:f9:ee:c2:f7:5b:1f:a0:01:
88:bf:48:7b:7a:ca:e6:a9:14:66:d6:7e:45:2d:e1:
ba:d4:53:01:b4:a1:b3:d7:0f:7b:cc:70:9d:86:c7:
26:2f:9f:90:72:20:5f:d2:4b:6e:e4:ce:df:a4:5f:
ab:a2:da:2d:69:c5:49:3e:19:b1:50:0e:8f:c2:8d:
ad:c8:8b:ed:aa:ff:57:05:29:8f:57:1d:60:ae:af:
d2:dd:08:55:fc:92:36:e3:fe:62:8a:c2:87:2f:7e:
d3:ae:b7:61:ce:42:c3:d4:4c:89:4d:ef:bb:d6:70:
21:c6:4a:00:c7:77:48:f6:3e:f4:4b:7d:0b:0d:3e:
a6:85:2c:68:f3:78:23:ce:bb:83:aa:23:4a:31:66:
21:91:cf:24:0f:a6:36:64:91:5a:50:94:96:5c:7e:
e8:85:5a:cc:9d:06:a3:b1:6b:93:ee:11:fc:6e:01:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7D:91:9F:1B:7B:E7:7C:00:42:36:8C:1E:38:47:60:FB:06:5E:E8
X509v3 Authority Key Identifier:
keyid:AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:60:c3:90:30:b7:94:16:ba:0b:24:b9:4e:0b:aa:e4:32:45:
b5:a8:2a:54:1a:ff:bb:a1:86:c2:df:6d:2b:e0:1a:21:96:d3:
1a:89:10:9d:11:bb:9f:73:e8:9d:9f:8b:b4:ac:c2:8b:0e:61:
7b:fc:fa:fb:e4:1c:e6:e3:8c:44:42:0e:db:83:99:b7:b6:77:
48:c8:04:18:0e:69:75:f7:77:33:26:3b:02:9d:31:6b:15:78:
64:7e:f1:b7:69:e0:6a:77:64:8f:9b:97:0f:a0:b2:a8:be:f0:
70:d3:3e:5b:30:19:25:4e:bd:8e:13:2f:30:3b:8d:e3:dc:4a:
49:4a:9f:c2:15:f7:60:6a:e2:0d:fc:5e:80:dd:3a:73:e4:11:
c3:3c:b1:a4:79:33:2b:2e:6e:74:17:85:1c:65:49:57:6c:66:
01:77:bf:28:81:74:81:12:33:61:2a:21:96:75:3d:5a:c0:dd:
a6:6a:f0:c5:ce:3b:a0:f4:7d:bf:c8:67:1f:7e:31:a6:50:bc:
0d:66:38:6d:4d:7f:9d:c8:70:fc:ed:ab:ad:f4:67:0e:28:5d:
47:34:9c:47:06:10:12:8e:61:0c:57:d6:a9:02:c5:f7:95:4a:
a2:4d:aa:a4:e1:95:f6:09:45:d5:c3:b4:65:c3:50:62:f1:34:
33:b8:4a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:57 2026 by rpki-client