Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
File: r-o5b03jVdqNwHmh6IXgwzdezjI.mft (raw, json)
Hash identifier: dvYYQ+cN7jt5RXw2A3CYAg2ro+UYNTrXjNJBs4pyDjk=
Subject key identifier: 40:AD:D9:F2:9E:1E:E3:82:DB:44:C3:65:E7:7B:3E:DB:26:CF:95:F3
Authority key identifier: AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
Certificate issuer: /CN=afea396f4de355da8dc079a1e885e0c3375ece32
Certificate serial: 019CAE6C789173A76F2123BEB5E848F5D678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 12:01:10 +0000
Manifest this update: Mon 02 Mar 2026 12:01:10 +0000
Manifest next update: Tue 03 Mar 2026 12:01:10 +0000
Files and hashes: 1: r-o5b03jVdqNwHmh6IXgwzdezjI.crl (hash: iCZy4MvnyB3+rjUlJZtM2jd0s4Rnwnt1qFBRQ9p8VWY=)
2: z5rFxgnCnaPJH1a7LD5FL2zaGs8.roa (hash: GmD2v7t0pIsrh27JBf/zFN4lRzjdZKNMPUUOE0IIN3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:78:91:73:a7:6f:21:23:be:b5:e8:48:f5:d6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afea396f4de355da8dc079a1e885e0c3375ece32
Validity
Not Before: Mar 2 12:01:10 2026 GMT
Not After : Mar 3 12:01:10 2026 GMT
Subject: CN=40add9f29e1ee382db44c365e77b3edb26cf95f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:a0:24:32:c2:c6:28:49:ac:3a:b3:dc:bc:
90:bb:2b:60:80:79:88:91:5f:0e:8e:c1:9f:19:c8:
e4:c5:3c:a6:fb:35:c9:ac:48:1d:73:d2:8b:66:a7:
6a:c2:9b:82:d8:35:9d:1d:2a:5f:5c:90:a2:5e:33:
61:ed:52:13:83:94:a7:be:1d:6b:a2:5c:f9:49:fd:
47:ea:39:00:5c:87:7c:0f:92:dd:10:89:b7:72:a6:
f4:6c:a0:cd:61:7a:43:b5:69:98:3b:b3:3c:22:b3:
7b:5a:39:f6:d5:6e:a6:a5:7c:71:56:69:00:cf:36:
50:f8:dc:1b:26:5e:56:86:e1:5a:46:30:43:23:c9:
37:ea:0f:9c:6d:7b:8b:e9:48:05:11:a8:ed:30:18:
71:15:66:a8:f7:e7:23:06:08:05:de:c8:cb:e8:98:
c8:f9:e1:d2:53:4d:12:61:cf:63:91:95:6e:07:b4:
8a:dd:1d:b3:a7:17:bd:d2:ed:d4:bd:e0:23:d5:a4:
94:35:2d:b8:21:52:82:db:2a:49:e0:d4:26:4f:47:
40:a7:9d:b3:48:9d:ec:ec:7f:0c:b5:2e:b7:89:0a:
f3:b5:2b:c5:60:c9:5b:96:aa:e3:52:e7:b3:df:34:
09:28:dc:fb:d7:80:e7:c7:fd:21:48:aa:9d:7f:e7:
58:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AD:D9:F2:9E:1E:E3:82:DB:44:C3:65:E7:7B:3E:DB:26:CF:95:F3
X509v3 Authority Key Identifier:
keyid:AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d2:a3:84:6a:bd:55:cf:60:67:00:28:68:2a:a7:2b:0d:19:
c3:51:47:98:45:41:fd:3a:fe:d3:00:fa:37:38:2e:32:43:e3:
8b:61:1d:db:cc:0d:7f:de:3f:b8:c3:82:4e:be:e0:68:e0:57:
0a:57:3b:bd:ca:5e:6a:55:08:61:aa:47:21:f5:f3:f0:a5:d0:
78:d4:bf:3f:6b:4d:6b:c3:c1:a3:67:19:4b:d5:fe:96:79:39:
de:5d:09:34:87:f3:d6:e6:67:8e:8d:75:2e:17:a3:72:83:97:
92:17:90:7f:7d:b3:f8:74:f9:f1:92:47:38:97:69:03:cf:d5:
1a:9d:09:13:12:d9:20:0d:c3:e0:cf:b9:a9:79:f4:5a:2c:2e:
a6:b8:44:66:9c:51:f4:de:a5:19:3f:ba:7a:89:c7:13:44:25:
0e:9d:ec:30:06:11:98:74:8b:83:ed:8b:3f:6c:b2:60:07:d0:
e7:6b:e4:37:b8:65:6c:77:04:7f:59:bb:26:8f:d9:5a:b2:23:
49:12:ae:98:cd:0a:d5:fa:9d:75:a5:27:bb:6b:69:b7:97:db:
73:28:37:bf:20:57:8b:5c:70:5d:7b:1e:a4:7a:25:79:4b:52:
76:91:dc:e6:d1:b7:25:ae:e5:35:39:3a:d3:95:6a:8d:c3:ec:
11:69:c9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:43 2026 by rpki-client