Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
File: r5VJF2-WbToiFBAHkJfIfw4dILE.mft (raw, json)
Hash identifier: a20h8N6r3PuMgzSGEAYHXKyK1qOvgx2gPgQG4ovnmNE=
Subject key identifier: 08:2A:7F:53:61:B3:AA:F4:12:A3:07:42:AE:40:E3:CA:F0:95:FE:21
Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1
Certificate serial: 019D284E30BF1712F29F6BFBC450EEF80DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
Manifest number: 0FE9
Signing time: Thu 26 Mar 2026 04:01:45 +0000
Manifest this update: Thu 26 Mar 2026 04:01:45 +0000
Manifest next update: Fri 27 Mar 2026 04:01:45 +0000
Files and hashes: 1: LOQz_syfMI8JZau8ZzzM3cSE-EU.roa (hash: jcxzi0LJJRE166oSQjl3Ya4HtG61eYjSPoLWrIadH1U=)
2: r5VJF2-WbToiFBAHkJfIfw4dILE.crl (hash: HqY/6uLJyX95jNFnOKGAkiw+YUtK8qjzo0dggaTL9GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:30:bf:17:12:f2:9f:6b:fb:c4:50:ee:f8:0d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1
Validity
Not Before: Mar 26 04:01:45 2026 GMT
Not After : Mar 27 04:01:45 2026 GMT
Subject: CN=082a7f5361b3aaf412a30742ae40e3caf095fe21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c5:82:39:a3:a6:6b:f5:9b:99:4b:d1:e5:81:
55:bd:b9:0c:fb:e8:62:75:73:ac:32:e6:ee:bd:26:
32:c1:ca:5f:1f:fd:8d:61:f3:6d:a2:e4:25:70:8c:
d4:3f:64:d4:66:a7:d0:a5:97:5c:be:4e:ba:fc:16:
36:b2:c5:f0:46:2f:68:61:7e:23:d6:57:dc:43:75:
52:f2:b3:75:93:8f:41:66:25:eb:20:48:90:2f:b2:
54:dc:92:df:d1:4e:ad:bd:56:75:41:fb:8d:84:db:
7f:54:9d:c4:fb:41:8d:ab:09:d3:3d:8b:8c:97:ab:
0f:0c:13:d6:d4:bb:50:f2:6d:aa:e5:b0:83:fb:bc:
4e:36:a4:87:05:90:b3:3d:4d:de:0a:22:0c:66:5c:
01:99:46:c2:e2:7c:9e:65:70:90:b5:d5:a6:95:fc:
88:e0:4f:7b:d4:dc:40:52:a2:78:ba:cf:04:76:3e:
6a:6b:71:ca:f4:d5:4e:8e:d3:a0:e3:67:4f:2c:90:
ac:d6:3b:c8:37:22:78:52:77:c2:08:58:37:28:5b:
de:a6:f0:3e:9d:a6:ae:14:64:75:28:28:7a:f2:06:
46:20:62:44:f9:21:b9:e6:a0:80:ce:5e:ec:55:10:
0f:ba:72:d9:66:67:be:e6:71:47:00:6e:bd:01:5a:
53:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2A:7F:53:61:B3:AA:F4:12:A3:07:42:AE:40:E3:CA:F0:95:FE:21
X509v3 Authority Key Identifier:
keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:df:48:84:e5:94:94:82:84:99:da:7c:c8:ed:b6:d9:86:d2:
7d:6e:11:72:94:4f:02:8f:80:b2:83:3b:53:6e:a5:18:0f:84:
27:c1:27:7b:93:88:93:0e:1b:d5:8b:19:dd:3f:5a:b3:bf:7c:
4c:c9:de:45:cf:11:4f:90:52:ea:67:4b:8f:97:eb:b6:eb:4b:
71:08:f5:8c:83:54:78:d5:1c:da:26:ee:c6:53:84:81:69:4e:
ed:e5:0c:29:fb:b7:85:d7:fa:19:12:6c:e0:a1:54:88:df:59:
9e:66:ee:0c:d1:bd:8c:19:3b:a2:93:b1:66:2e:b7:d6:f8:6c:
4c:33:de:ce:6d:08:2e:df:53:f5:7d:e1:54:31:eb:0b:80:8f:
83:3c:da:42:f8:00:76:bc:63:6c:c5:15:0a:73:55:e6:dc:03:
af:b0:81:8f:4c:68:95:09:5d:3b:b2:50:42:d7:db:71:c2:44:
bf:54:d1:6d:d7:3f:52:0d:2f:f7:1d:4a:90:3f:d9:8e:27:d5:
46:35:2f:e0:a1:84:13:fd:03:5a:5b:44:e6:72:9e:32:98:e0:
ca:1e:75:bd:7f:53:03:fe:c0:10:6f:fd:88:d9:40:f7:4b:61:
24:8a:1f:39:6e:a3:1e:22:da:1e:7e:cd:c9:89:80:a0:c1:35:
41:c9:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:11 2026 by rpki-client