Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
File: r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft (raw, json)
Hash identifier: 27tu/NWNiBSEeUricmGC17m626FlzrvJavsBCp0lxj0=
Subject key identifier: AE:B1:0B:28:83:14:BE:7A:15:E9:69:B5:0A:31:E5:A4:54:FD:1C:63
Authority key identifier: AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
Certificate issuer: /CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Certificate serial: 01A10324A5087D294FC5DCE0B966A7AE2E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
Manifest number: 0EF2
Signing time: Sat 03 Oct 2026 19:01:35 +0000
Manifest this update: Sat 03 Oct 2026 19:01:35 +0000
Manifest next update: Sun 04 Oct 2026 19:01:35 +0000
Files and hashes: 1: niXIs67HnTRfFLGC1HZAY3uj8cU.roa (hash: wwuo2W8ON5QM/uq0sqdrnWPPJasVC2ONRBN1iw5lrCg=)
2: r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl (hash: rXHPwiEwhp3XgY8Htzc5ll/EMDotMls0mJrZv+qG6Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:a5:08:7d:29:4f:c5:dc:e0:b9:66:a7:ae:2e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Validity
Not Before: Oct 3 19:01:35 2026 GMT
Not After : Oct 4 19:01:35 2026 GMT
Subject: CN=aeb10b288314be7a15e969b50a31e5a454fd1c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:c9:51:e6:80:67:ca:65:6e:4c:ea:b3:13:
ab:7b:44:31:fe:ce:74:d4:50:9b:0e:69:58:76:d3:
90:68:ca:80:50:47:ee:c0:3b:95:ef:76:de:e2:a2:
b5:39:1b:be:0f:a3:42:b1:5b:3b:a6:9e:53:85:90:
9b:98:c2:fb:e7:38:41:9d:ec:05:b2:9b:21:a6:16:
15:a4:5d:56:31:ce:e6:a8:88:23:a3:51:aa:f2:86:
94:17:1d:79:46:8e:0f:19:2a:3a:45:52:86:be:b4:
ed:e5:ec:ce:f6:67:db:64:50:c8:8e:b9:72:8e:a6:
73:df:ca:ca:ab:63:6c:4f:70:22:8e:78:b7:9b:04:
fe:4a:c1:ba:01:d0:05:7d:ee:c2:10:84:6f:3b:31:
92:92:28:19:10:63:33:be:10:fc:33:49:24:ca:2a:
79:53:98:30:f2:1c:9c:1f:e8:08:37:f3:6a:82:ad:
a8:be:fb:3f:b9:b0:2f:b0:b5:a3:68:77:2b:7d:73:
36:ce:be:bc:41:b8:bc:eb:9c:df:49:e3:42:88:4c:
62:b9:9d:09:ce:2e:db:7d:c6:62:42:05:78:25:24:
f2:8e:68:db:1f:ff:70:a7:3e:0e:ad:64:46:1e:27:
3a:cc:80:d0:ef:58:50:61:f0:40:60:a2:d1:7e:40:
48:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B1:0B:28:83:14:BE:7A:15:E9:69:B5:0A:31:E5:A4:54:FD:1C:63
X509v3 Authority Key Identifier:
keyid:AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:21:e4:c0:c0:c1:36:91:36:18:00:f4:2b:74:c5:5d:88:bf:
4e:03:3c:75:4d:54:76:22:99:2e:9a:a0:e6:f0:89:79:b9:05:
45:64:f6:bc:e5:a2:17:1f:62:63:c3:e9:7c:90:a9:c2:c1:0c:
4b:58:6a:e2:df:9e:46:45:04:26:e7:31:7e:cf:33:c3:e9:8d:
c0:5e:21:d9:b9:1f:54:3b:a7:6b:2d:2c:73:06:1c:bd:2b:9e:
8d:09:0e:be:38:8d:96:e6:2a:4b:29:fa:68:e3:4b:b1:fb:f4:
e7:93:9c:60:22:ef:5f:88:39:7c:cd:02:6a:03:ec:10:6f:16:
69:c3:86:a6:39:d9:57:3b:a7:5b:cb:98:91:8d:00:88:9f:88:
3a:a9:a6:b5:ac:74:c6:28:33:5f:ec:78:6c:67:0a:32:8b:b5:
e7:59:a1:88:61:44:b0:b2:3a:73:c5:b1:5d:da:70:9d:ba:e7:
c1:50:5a:5c:40:ed:8c:f5:08:13:ad:94:b7:bc:54:1f:1c:35:
92:d2:de:e1:23:0f:0d:e2:8e:64:1a:79:10:c2:5a:27:18:8e:
42:d6:05:b5:04:2b:57:77:1e:52:ca:75:5f:88:05:72:60:f6:
9a:cd:74:b0:9c:34:88:f4:b5:9c:dd:59:2e:29:67:6a:53:e0:
1c:cb:a7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:59:17 2026 by rpki-client