Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier: gd4Kp/Pwzos6sAuxsa/C+fNe4m6HxXeK1OFGYOymNmo=
Subject key identifier: 37:8E:70:78:00:3C:1D:02:5E:7A:6A:8C:76:2D:38:F0:45:3B:DB:15
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 019D99D00FAC0F45111FF5166A677526A18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number: 18CD
Signing time: Fri 17 Apr 2026 05:00:42 +0000
Manifest this update: Fri 17 Apr 2026 05:00:42 +0000
Manifest next update: Sat 18 Apr 2026 05:00:42 +0000
Files and hashes: 1: 7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa (hash: rL2+XjzMdSu0K1H05+EkUEOgBJlzmxMsT4JTGcTaBGg=)
2: B6r7tlhytkHdJheo1dsqfbry4Og.roa (hash: kKHkZjflWwkN797C4PStA913gNP9MCPk6MZE/gB/7Ew=)
3: KDXG6Q4UesZZrscbvutRtXUjZ04.roa (hash: glnL5SMYp1iujQsRgxaeozZQtOiC0uKkyBB33wcXcDg=)
4: MIMB6hj-pbhZmAS4NaP7XqTgm34.roa (hash: o3IJJeBy3jpC50UkL8Zt+4vWy+FDSWr1Y6a3t5k0o+s=)
5: fVw_ICDNU6Bi8MAJYhmrvlrXmRs.roa (hash: c+yT9ByZZB/rH9Ty28IEJWoy1m6iGPvLwsGkGU/4scM=)
6: k0BFiQAl7Q4-lOH-wpVIf6F16RE.roa (hash: LWb7rK2buJgbYTwsimy6ORw0odV4aXlPrizohyk5THc=)
7: keDaDU-vCcS6klKiWWvwuQqa3NE.roa (hash: FwrW61c/rLAqQnYEyfpdGoA2bVf4TFLR0gcdIXQaNqA=)
8: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: ynrWfvI9IapPzUDRv7PncLDyWb1iDZPIvd2T8x7RR60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:0f:ac:0f:45:11:1f:f5:16:6a:67:75:26:a1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Apr 17 05:00:42 2026 GMT
Not After : Apr 18 05:00:42 2026 GMT
Subject: CN=378e7078003c1d025e7a6a8c762d38f0453bdb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e6:cb:14:3f:24:d8:a0:cb:85:07:33:74:1b:
07:5e:03:48:ab:93:80:c0:09:c7:98:05:2d:56:d8:
66:51:4e:86:99:be:a3:e7:ca:5c:31:84:f0:e3:51:
a4:93:05:5d:0d:a6:e3:ad:df:f3:e8:e2:20:69:fc:
93:8e:cb:5f:a0:21:8a:ad:1f:46:b5:1e:c9:7c:b8:
8c:89:0c:07:07:85:14:ca:54:61:ce:f7:f3:d0:3a:
3c:46:6d:5f:e3:87:5b:42:f1:5e:0b:ca:ce:62:c0:
4b:c3:17:23:7c:ff:fc:0d:2d:81:18:0a:65:6a:c7:
ed:f3:dd:2a:f6:6e:0f:38:20:c4:4f:bd:a3:2e:68:
27:23:0d:79:20:bb:f3:3f:80:12:03:9d:91:af:cb:
69:84:ee:3f:07:42:6c:28:db:a8:3b:63:1c:b3:c0:
36:5a:10:f2:7c:89:95:0c:1b:9f:f9:be:f4:4e:cd:
c3:e4:93:20:a3:e7:9e:e3:25:7d:02:79:12:ed:0c:
b0:1d:d6:75:8e:45:52:c1:d7:6a:b8:f6:e7:f9:0a:
5d:46:c9:5f:2b:de:51:95:74:25:64:52:58:e6:39:
aa:66:8d:c5:f4:56:b6:1f:0f:28:3d:47:5f:f8:6d:
d4:b9:31:a0:a3:72:07:59:6a:58:53:13:6c:5a:e0:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8E:70:78:00:3C:1D:02:5E:7A:6A:8C:76:2D:38:F0:45:3B:DB:15
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d4:5f:63:ce:d5:c0:d0:fb:91:06:bb:47:03:a4:55:fd:bf:
eb:28:4e:63:22:bd:87:c2:57:6e:e0:52:14:40:d4:70:33:a7:
2d:4b:cb:09:0a:49:d6:7a:e2:db:3f:0c:36:76:b2:62:3d:a6:
70:f8:60:43:83:43:92:e0:04:ec:15:52:f2:10:ab:be:21:34:
7e:2d:f9:0c:be:9a:5d:10:f0:69:3b:43:a0:0a:b1:c3:17:89:
c0:8c:7c:8a:c9:be:c9:76:51:93:7c:e2:91:37:8d:58:27:c4:
55:60:58:80:38:8c:6c:35:0b:04:fc:66:3a:85:de:e5:f2:67:
d4:10:ca:38:9d:91:a2:44:ee:8d:c1:f6:65:a3:8a:24:c0:09:
e5:9e:0f:0e:78:f4:1e:e0:65:63:c9:99:b1:22:e0:88:b2:ee:
22:18:42:d9:2c:24:68:0f:7c:72:c2:12:82:fb:fd:ac:c0:17:
0d:ac:4d:8d:14:04:23:15:27:af:da:99:60:70:4b:79:47:cf:
5c:07:9a:47:35:f1:e2:d7:56:e7:ab:cc:96:d9:bf:18:ef:cb:
6d:20:8e:32:71:00:64:67:ab:c6:63:69:5f:86:ea:a6:ba:6a:
51:29:3b:69:98:b4:e0:1f:e3:7e:5e:cb:07:7c:50:e4:77:35:
c7:80:22:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:20 2026 by rpki-client