Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File: r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier: K+AlA/jNQISDEKLv0tsidx7nN2zf63Gx8FxY3r+iypo=
Subject key identifier: DD:6A:77:DE:06:A5:1F:95:EC:39:D5:EB:77:08:11:6E:9D:85:9E:F2
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 019D292982393A25C6FE55B430403419201F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number: 1080
Signing time: Thu 26 Mar 2026 08:01:19 +0000
Manifest this update: Thu 26 Mar 2026 08:01:19 +0000
Manifest next update: Fri 27 Mar 2026 08:01:19 +0000
Files and hashes: 1: 7QHZaPi6zF_9KFLPmbyoF3ju4Js.roa (hash: uGtlhWfGFyzTsoRAgtfyrZfPlPC+L8/+nC/qurbI1KA=)
2: _SO3ZcEL-NxbVo2zGUmXJKashh4.roa (hash: DQyiiOHyh7kvQrHckqHxzZTNIDfF/xOylq73UWhMnm0=)
3: lyuKP6xRaaH3-14haYmNo8uGHO4.roa (hash: ZW7gfgcc5WNCnRZKczxY87VtQK4F6adXJdrsgRc8psU=)
4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: jq0I/zBkzOcgJtoFhbVV6QW4Zeux86aEJE4lbedoT64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:82:39:3a:25:c6:fe:55:b4:30:40:34:19:20:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Mar 26 08:01:19 2026 GMT
Not After : Mar 27 08:01:19 2026 GMT
Subject: CN=dd6a77de06a51f95ec39d5eb7708116e9d859ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:af:fc:39:a0:6f:92:1a:8b:e4:52:05:07:
98:66:23:f1:22:61:40:ca:88:9f:d1:c4:d5:09:96:
b2:0d:b8:f1:9a:5d:f0:c9:7f:a2:92:ee:83:49:86:
9b:2a:4c:1c:d3:cc:fe:cd:5f:16:df:12:a9:11:13:
06:27:80:2a:be:f2:40:77:24:8b:6a:75:47:31:46:
26:e6:bd:de:dd:43:84:29:fd:38:40:e9:5e:7c:27:
03:87:60:30:ab:75:66:62:c3:b2:1b:17:d2:09:f9:
13:6d:bc:5f:c0:c8:fc:f1:d6:f8:0b:0c:33:1e:a7:
07:02:46:dd:9b:2e:45:fd:67:3f:7b:2c:64:18:0d:
9a:d4:ef:01:1b:10:2d:db:96:57:9d:2b:39:f4:08:
0b:43:a0:8d:ac:08:87:15:f6:03:dc:bd:29:e5:e7:
1f:e1:1b:fe:08:7a:8a:34:e3:4c:42:5b:70:94:7b:
20:83:d3:41:e0:e3:b7:28:d0:71:5a:59:67:c0:6c:
78:21:80:d7:cd:2b:42:07:40:4c:22:37:ea:60:10:
12:32:16:82:d9:6b:07:d4:fe:d8:49:77:24:e1:52:
ec:82:07:eb:3f:3f:a5:99:59:e9:a5:13:ad:ed:66:
5c:bb:0b:ab:ce:1d:f2:90:d3:13:cc:fa:2c:96:19:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6A:77:DE:06:A5:1F:95:EC:39:D5:EB:77:08:11:6E:9D:85:9E:F2
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4e:80:6c:52:40:6a:db:35:9c:0a:13:69:6f:e7:95:64:b2:
58:5a:37:fc:49:95:4c:ea:dd:16:c0:ba:80:48:9f:a4:74:44:
ad:a1:bf:a1:bf:ef:31:a6:b9:e9:b5:af:62:bc:1b:e7:4e:02:
6c:ae:c0:25:ff:e1:23:a8:1b:92:39:21:53:e3:41:48:5a:72:
7b:c3:3c:fb:8c:0c:03:a1:4a:5b:27:f0:6c:72:d2:01:fa:e0:
e3:5c:71:dc:f9:5e:59:cf:14:5a:b1:95:6c:2f:20:6c:3c:48:
21:c6:f5:70:ee:38:8c:0b:e2:32:4b:56:4d:0f:42:4a:64:8a:
af:1e:5a:59:25:8e:18:d4:69:be:42:73:6b:89:44:ee:bc:d2:
0a:91:76:cd:f9:fc:c4:f2:95:5e:3e:c9:9c:90:1e:08:9c:97:
b0:de:a3:1a:84:bf:88:84:0e:f7:e6:e6:43:c0:f0:db:9b:6a:
84:dd:7e:82:c4:4c:4d:dc:00:ad:81:0c:98:3d:c1:36:15:f5:
05:65:30:ab:01:bc:62:b2:b3:8e:d6:d4:af:97:df:ea:25:bc:
69:0d:91:0f:27:74:10:16:68:97:0a:4d:4e:ee:44:3e:74:34:
06:2f:98:f4:02:a9:39:74:9a:ee:61:f5:d8:a0:11:8b:48:23:
4d:98:63:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:31:05 2026 by rpki-client