Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
File: r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft (raw, json)
Hash identifier: NUNfgfInBNdeOmlqkJfZ6rO1yHYrM9OA3t3HAWLV0rw=
Subject key identifier: 3A:93:C8:C5:BA:E9:1A:7A:13:F4:DF:17:6C:8B:65:D1:32:2E:B8:B2
Authority key identifier: AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
Certificate issuer: /CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Certificate serial: 019CACB54393AFA7600CE2B02DE5C3F17D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
Manifest number: 0CB3
Signing time: Mon 02 Mar 2026 04:01:26 +0000
Manifest this update: Mon 02 Mar 2026 04:01:26 +0000
Manifest next update: Tue 03 Mar 2026 04:01:26 +0000
Files and hashes: 1: niXIs67HnTRfFLGC1HZAY3uj8cU.roa (hash: wwuo2W8ON5QM/uq0sqdrnWPPJasVC2ONRBN1iw5lrCg=)
2: r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl (hash: 1mBfrfpuT9V57Y89o0Nx5MvdWOUEhFUnsJ77McTnniU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:43:93:af:a7:60:0c:e2:b0:2d:e5:c3:f1:7d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Validity
Not Before: Mar 2 04:01:26 2026 GMT
Not After : Mar 3 04:01:26 2026 GMT
Subject: CN=3a93c8c5bae91a7a13f4df176c8b65d1322eb8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:38:02:ef:60:8f:af:a4:8b:1b:95:ae:13:
1e:ee:80:5f:ae:e1:94:86:5c:99:97:37:8a:6c:75:
c9:59:b8:ff:5b:ea:cd:42:15:f4:e6:fa:0b:f8:61:
e5:fa:1e:e9:f6:4e:c0:f8:67:1d:a0:1d:cf:f0:44:
ac:d5:98:04:3c:62:92:df:0f:30:e0:93:cb:87:24:
21:50:a6:a0:95:df:31:ea:59:77:1a:e5:98:b0:e2:
3f:60:6d:96:24:f2:af:d0:d4:5b:68:c3:d6:bf:27:
6b:76:78:3c:84:7a:7a:3b:5f:8c:55:fe:9c:50:a0:
b6:97:4d:93:e9:c7:f9:77:a4:9d:0e:18:03:8f:b2:
2c:d3:d9:60:6f:b7:a6:bc:6d:68:02:50:d0:bd:ed:
2f:a5:e1:24:02:bd:84:da:6f:81:fb:df:f9:8d:68:
e7:3f:2d:60:a1:b5:e2:23:78:21:ee:49:7b:47:49:
cd:d6:88:fa:10:d5:36:fb:26:52:66:b5:c1:57:f6:
c3:da:bc:bc:1b:7c:db:04:4c:1d:4a:ec:1b:a3:6b:
68:61:eb:67:53:82:6b:9a:4c:07:30:fb:ee:04:c8:
00:76:fb:a5:2f:72:05:97:4c:bf:9e:53:48:72:cd:
3f:62:af:e7:d0:62:fe:06:1c:e6:19:47:70:9b:c9:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:93:C8:C5:BA:E9:1A:7A:13:F4:DF:17:6C:8B:65:D1:32:2E:B8:B2
X509v3 Authority Key Identifier:
keyid:AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ca:8b:b3:cc:7a:8e:91:33:a8:a3:47:87:ca:ad:85:57:d6:
b3:4b:47:93:a0:f1:c1:58:cc:8e:47:28:0d:7a:5b:73:08:c5:
92:7b:be:4c:18:40:06:85:9b:0b:e0:a5:07:e5:0e:ba:a0:f8:
07:66:f7:2e:0c:4a:d1:09:ad:94:81:4a:2c:ae:60:3c:52:07:
5d:1b:83:26:9c:de:1a:18:07:cb:df:7a:bd:c4:ea:55:df:80:
91:ef:f1:94:a4:25:89:cd:05:6f:27:5a:f0:2e:1b:b0:2d:1d:
cd:ff:6e:7a:5d:9d:0f:23:a8:7a:4a:d7:b7:e6:ca:bf:62:e5:
92:57:c8:82:e1:19:3b:40:3e:e2:c3:23:08:ce:6b:90:41:c7:
7d:85:35:95:fc:dc:28:6a:9c:ba:ed:9b:a9:54:20:d2:0b:8e:
c2:51:46:1f:9f:38:ad:ff:8c:cf:0b:56:5e:ab:a0:10:94:ac:
f0:f0:16:13:ab:dc:f8:2b:65:97:86:be:e3:f0:2e:d1:6d:d0:
24:53:bf:09:95:43:91:1d:82:54:74:20:22:70:d6:66:c8:8c:
b3:c4:81:17:17:91:69:55:1c:a7:00:61:96:01:19:10:17:08:
85:a9:2e:ed:55:af:05:f1:45:20:e8:47:39:da:11:0b:2e:0a:
0b:80:37:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:37 2026 by rpki-client