Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
File: r-o5b03jVdqNwHmh6IXgwzdezjI.mft (raw, json)
Hash identifier: KbE1bd0+whEb79waLIaLMX+DthKQc7bG5ASSE9fkh+A=
Subject key identifier: 2E:E9:67:30:82:25:EC:6F:8A:2B:8D:D6:E4:5E:46:70:5C:27:03:D5
Authority key identifier: AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
Certificate issuer: /CN=afea396f4de355da8dc079a1e885e0c3375ece32
Certificate serial: 019D9BF561CB74543BE3BBC25B3A903F129A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 15:00:42 +0000
Manifest this update: Fri 17 Apr 2026 15:00:42 +0000
Manifest next update: Sat 18 Apr 2026 15:00:42 +0000
Files and hashes: 1: r-o5b03jVdqNwHmh6IXgwzdezjI.crl (hash: kLAOrn9rigFlyS5jkSlY7fgwd0vNXTJb+aRNjXjiXCU=)
2: z5rFxgnCnaPJH1a7LD5FL2zaGs8.roa (hash: GmD2v7t0pIsrh27JBf/zFN4lRzjdZKNMPUUOE0IIN3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:61:cb:74:54:3b:e3:bb:c2:5b:3a:90:3f:12:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afea396f4de355da8dc079a1e885e0c3375ece32
Validity
Not Before: Apr 17 15:00:42 2026 GMT
Not After : Apr 18 15:00:42 2026 GMT
Subject: CN=2ee967308225ec6f8a2b8dd6e45e46705c2703d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:e3:d7:f5:8f:08:2b:4b:a1:78:6d:c9:c9:
bb:23:eb:b7:42:88:0a:d1:81:35:3a:8f:38:96:b3:
b4:69:ca:4e:5c:70:7f:69:84:ba:62:f9:9e:02:65:
d4:3e:f0:8b:f7:14:82:53:c6:5a:a5:54:d5:cd:f1:
91:3a:ab:42:55:2d:9a:79:d4:fe:0d:a6:49:a8:54:
ba:7a:c5:ef:40:b1:93:60:ff:c3:4c:be:83:08:1a:
13:2d:d1:d1:fb:60:df:f2:85:c5:1a:ef:8e:ad:5c:
38:20:28:5f:95:35:7d:27:a8:4f:9f:7a:cf:7c:ca:
89:01:fc:bc:1e:3c:6f:6c:08:5d:bc:67:21:5a:c8:
9d:f0:78:b2:df:56:67:51:45:3a:33:f4:96:e7:11:
98:67:5c:75:3d:a0:87:26:27:dd:90:5f:a8:4c:36:
03:9a:f9:b4:ba:67:7d:c4:51:7f:49:8b:89:5c:a1:
56:7a:3c:64:3f:c0:db:52:26:a3:5d:da:06:17:fe:
6d:ee:09:87:69:04:a9:c0:1d:2b:9d:6e:c1:97:2d:
85:40:8f:a5:e5:cc:f3:50:26:6d:4d:d5:4a:ee:17:
3e:24:6d:e2:0f:bd:84:6e:98:50:d4:37:bf:b5:26:
ad:2f:82:b0:22:a5:3a:11:58:c9:c9:fe:a5:a9:69:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E9:67:30:82:25:EC:6F:8A:2B:8D:D6:E4:5E:46:70:5C:27:03:D5
X509v3 Authority Key Identifier:
keyid:AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1d:4b:9a:9f:c1:9d:de:c3:b5:f5:dd:51:87:ee:65:52:7e:
eb:7b:55:7b:aa:7c:05:78:32:a1:94:56:69:19:90:91:f9:a4:
aa:9e:69:7f:23:0d:e7:f6:26:76:75:27:87:69:05:49:85:67:
2b:3e:26:37:7a:7a:8d:13:cb:e7:87:39:6c:42:3f:9e:8b:1f:
ae:de:5f:f2:15:a3:28:c5:c2:a7:c5:16:b1:8f:cc:41:51:b5:
5c:a6:41:43:82:8d:8b:4c:df:3f:43:2f:8b:17:0e:56:7f:35:
b6:a2:74:3a:40:d8:6d:a0:78:86:0e:3b:5a:d7:77:71:20:a2:
34:7a:55:2d:3d:9c:8f:a6:9b:e9:45:2f:46:1f:81:a0:50:85:
2c:f8:d9:49:a9:1a:03:88:1b:85:4b:e1:3a:62:b0:19:2f:b8:
86:ad:53:04:43:65:45:6c:cc:37:88:b9:ae:a5:02:9c:f5:44:
03:07:f9:38:32:9c:c1:7b:0c:30:6e:ec:b1:11:6b:55:76:da:
12:e8:06:32:28:98:97:d2:3d:86:d6:b6:fb:4e:27:29:ed:3f:
95:c7:43:da:90:15:79:d9:40:d2:4a:1f:25:b2:e5:2b:4e:a2:
d8:da:c4:4d:92:78:00:2a:8e:11:22:36:7c:64:02:bf:59:63:
66:6b:9c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:27:34 2026 by rpki-client