Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier: BeLhMVtTsl8o/FY8Or4lRETiOxHnLf8/J2WwUPVdJSs=
Subject key identifier: B3:AF:A2:59:A2:B5:2B:59:01:57:7D:A7:2D:CD:6F:09:B8:47:13:EB
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 019CAC476BB89A2F5EC75DC99767EA4A0414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number: 1852
Signing time: Mon 02 Mar 2026 02:01:27 +0000
Manifest this update: Mon 02 Mar 2026 02:01:27 +0000
Manifest next update: Tue 03 Mar 2026 02:01:27 +0000
Files and hashes: 1: 7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa (hash: rL2+XjzMdSu0K1H05+EkUEOgBJlzmxMsT4JTGcTaBGg=)
2: B6r7tlhytkHdJheo1dsqfbry4Og.roa (hash: kKHkZjflWwkN797C4PStA913gNP9MCPk6MZE/gB/7Ew=)
3: KDXG6Q4UesZZrscbvutRtXUjZ04.roa (hash: glnL5SMYp1iujQsRgxaeozZQtOiC0uKkyBB33wcXcDg=)
4: MIMB6hj-pbhZmAS4NaP7XqTgm34.roa (hash: o3IJJeBy3jpC50UkL8Zt+4vWy+FDSWr1Y6a3t5k0o+s=)
5: fVw_ICDNU6Bi8MAJYhmrvlrXmRs.roa (hash: c+yT9ByZZB/rH9Ty28IEJWoy1m6iGPvLwsGkGU/4scM=)
6: k0BFiQAl7Q4-lOH-wpVIf6F16RE.roa (hash: LWb7rK2buJgbYTwsimy6ORw0odV4aXlPrizohyk5THc=)
7: keDaDU-vCcS6klKiWWvwuQqa3NE.roa (hash: FwrW61c/rLAqQnYEyfpdGoA2bVf4TFLR0gcdIXQaNqA=)
8: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: jo4y9acZmuvirRJ1V9UslKesfQfigDRw2GoMWYTsHFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:6b:b8:9a:2f:5e:c7:5d:c9:97:67:ea:4a:04:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Mar 2 02:01:27 2026 GMT
Not After : Mar 3 02:01:27 2026 GMT
Subject: CN=b3afa259a2b52b5901577da72dcd6f09b84713eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1c:f5:d8:35:89:b5:a9:15:d3:76:be:4d:6a:
fa:7d:4d:f6:e8:e3:e4:a0:39:f9:6a:bb:de:ab:3f:
bf:76:a4:4b:9f:26:84:c4:46:f3:58:93:f1:b1:cf:
37:45:12:fe:a2:b3:c3:9d:c7:3f:36:fb:63:0c:69:
3f:10:bf:92:7d:e3:81:46:6a:de:de:f0:5b:e5:f9:
09:47:df:11:cd:6a:f6:14:6d:91:29:b3:a1:15:97:
3a:bc:1c:7a:be:17:fd:38:64:2b:65:89:df:88:6e:
cf:8c:77:fa:a9:ba:56:da:8b:b0:c7:4d:33:b6:b8:
d8:53:e3:72:04:72:88:8c:d5:6f:11:3a:10:06:55:
f9:d6:2d:b7:7d:cd:a3:77:6a:42:da:32:75:9e:66:
8d:03:90:41:8d:4d:c7:75:ac:0b:d8:e1:cf:5e:3e:
a3:a0:24:37:7f:8b:75:2b:f8:b8:cc:2f:85:74:d6:
f7:8e:3c:76:85:09:3e:bf:4f:44:b5:51:4b:00:75:
37:cb:f2:e6:33:71:5d:43:f6:65:4d:35:59:1c:d2:
11:06:c3:86:3b:10:19:a7:3c:a9:35:ca:e9:16:38:
a2:aa:14:77:e1:24:a7:b0:dc:03:d0:1d:99:cc:08:
3a:96:fa:c4:04:ba:15:d9:e7:fb:11:65:af:48:94:
0c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AF:A2:59:A2:B5:2B:59:01:57:7D:A7:2D:CD:6F:09:B8:47:13:EB
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e3:fe:38:09:5c:bb:4e:5a:1f:14:b3:21:5b:a8:24:25:a6:
95:50:b8:7b:c0:40:53:a7:81:2c:f7:23:84:f5:9c:f9:52:cf:
87:3e:23:cf:65:30:93:14:4d:66:e2:8e:b9:6d:50:39:d6:a5:
d4:60:e8:16:79:40:14:6f:94:21:59:6c:c8:83:19:c8:9b:4d:
3f:35:91:c2:ba:5c:c6:3f:0e:c1:3b:e0:fc:ce:c5:ee:51:64:
b3:5c:28:98:d6:27:15:ec:cd:e7:4d:c1:52:72:a8:f5:83:f7:
bd:46:09:8c:79:a5:7e:6c:40:a5:c9:96:58:b2:26:c0:28:ce:
b4:31:ec:57:1c:8b:38:70:42:c1:73:69:c8:ad:a4:85:d8:f9:
06:9e:d8:f3:f9:87:5a:52:56:a7:fd:7e:69:c2:ec:50:2f:36:
c3:3d:ac:fd:a1:c9:bd:c2:ac:6c:27:32:77:54:a3:79:c5:3b:
89:fb:97:45:3f:63:16:42:7d:8b:c1:8f:6e:a4:0e:82:45:b7:
38:36:a1:41:56:d5:7f:28:c2:d5:83:39:4f:75:01:d4:cc:a2:
10:29:65:81:49:4b:80:02:d6:2c:f1:04:f5:57:5d:c9:d1:19:
41:df:b0:4d:bf:ae:aa:ad:3b:8c:e2:06:b4:e3:ee:37:bf:be:
49:53:1f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:29 2026 by rpki-client