Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier: 0nilqj0dB5ffq733wRRH+LHu5xrcKwcfyzhANPT6kB4=
Subject key identifier: 18:CC:4B:23:E9:83:DE:41:64:97:EA:38:5E:F5:25:74:62:6F:88:8C
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 019FAA196D43EEF064E54E8752D05282FE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number: 19DF
Signing time: Tue 28 Jul 2026 19:00:20 +0000
Manifest this update: Tue 28 Jul 2026 19:00:20 +0000
Manifest next update: Wed 29 Jul 2026 19:00:20 +0000
Files and hashes: 1: 7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa (hash: rL2+XjzMdSu0K1H05+EkUEOgBJlzmxMsT4JTGcTaBGg=)
2: B6r7tlhytkHdJheo1dsqfbry4Og.roa (hash: kKHkZjflWwkN797C4PStA913gNP9MCPk6MZE/gB/7Ew=)
3: MIMB6hj-pbhZmAS4NaP7XqTgm34.roa (hash: o3IJJeBy3jpC50UkL8Zt+4vWy+FDSWr1Y6a3t5k0o+s=)
4: U4HfGHAP2WoYFqQD4L0of_EnLKI.roa (hash: ZnMT/i5/9pGZI+9FFghOIhbXR3PyKujFwDawHaprb68=)
5: fVw_ICDNU6Bi8MAJYhmrvlrXmRs.roa (hash: c+yT9ByZZB/rH9Ty28IEJWoy1m6iGPvLwsGkGU/4scM=)
6: k0BFiQAl7Q4-lOH-wpVIf6F16RE.roa (hash: LWb7rK2buJgbYTwsimy6ORw0odV4aXlPrizohyk5THc=)
7: keDaDU-vCcS6klKiWWvwuQqa3NE.roa (hash: FwrW61c/rLAqQnYEyfpdGoA2bVf4TFLR0gcdIXQaNqA=)
8: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: tK5Vy0Xi9D1dfFPXKSyuZQ/7jnH/pfH8Fqg8GkIkmGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:6d:43:ee:f0:64:e5:4e:87:52:d0:52:82:fe:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Jul 28 19:00:20 2026 GMT
Not After : Jul 29 19:00:20 2026 GMT
Subject: CN=18cc4b23e983de416497ea385ef52574626f888c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0b:da:1d:7b:90:3e:ff:15:03:1f:4d:6b:02:
68:f4:56:b4:b0:8d:3f:d2:e3:58:2d:f4:7f:5a:f2:
f4:85:8c:6d:95:30:58:c1:2d:23:3a:7a:d4:83:e4:
01:f0:ee:f8:d3:eb:08:e6:36:08:5b:06:e4:59:6c:
45:8a:15:8c:dd:ca:4b:a6:a6:f4:95:9f:a6:34:09:
78:1b:5f:59:f9:2a:a9:39:21:9e:80:86:f6:ae:1d:
1f:0b:df:a2:a3:a4:42:ec:73:92:2d:89:c3:a0:da:
1c:97:9b:78:6a:44:05:f2:8f:11:3c:40:16:be:b2:
17:73:cf:1f:05:f5:b5:c5:99:56:70:5b:e5:8f:1b:
66:20:dc:35:a4:07:47:c9:e9:48:74:b7:7c:c2:9d:
85:0e:7f:7f:18:39:8d:ca:f2:23:36:72:12:bc:e1:
3a:05:81:a8:34:15:a6:22:44:10:8c:ee:83:0b:36:
6a:af:5e:bf:0b:fa:38:85:34:0b:6b:c8:ea:d0:27:
ae:9c:a5:6f:b6:d1:a5:a0:0e:bb:61:0f:91:5a:48:
af:26:2a:d2:ae:46:53:27:2d:7e:a6:b6:c6:53:89:
b6:14:a6:b6:2d:f3:3c:67:a2:41:52:52:1a:de:eb:
d9:76:4c:85:0e:37:b5:79:f9:94:9a:10:e1:8b:d4:
44:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CC:4B:23:E9:83:DE:41:64:97:EA:38:5E:F5:25:74:62:6F:88:8C
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ce:df:a9:bb:98:c2:81:fd:43:d2:87:6b:36:46:78:7f:a6:
01:2f:a2:2a:63:3f:83:ac:07:82:ce:04:f9:38:e6:93:72:bf:
53:1a:1d:90:ba:5c:6b:4c:d9:6e:3b:73:10:75:af:2c:15:6a:
b1:35:36:8f:f1:05:af:25:61:36:b7:47:88:2a:a6:79:5b:b2:
f9:f0:56:2a:57:f4:87:bd:6b:ee:62:74:ab:2f:a5:b9:13:0c:
18:eb:f6:44:ce:2b:a3:ee:ba:dd:74:c9:8d:12:d1:4b:10:21:
40:ea:bd:6f:e8:22:6a:74:80:82:56:19:c3:89:46:8b:52:b5:
4f:86:17:71:0c:99:b3:b8:34:00:14:34:a6:6f:eb:50:0f:33:
90:25:c7:a7:1b:29:11:6e:44:ee:0d:20:ae:1b:3b:94:eb:29:
f5:d9:30:d8:93:a3:14:21:ac:92:49:67:b0:f9:d7:c7:e2:89:
e9:f7:55:f1:cc:8b:ac:39:0a:24:b2:b9:1f:19:96:70:97:e3:
a4:93:3e:a4:97:c1:10:ac:3d:45:b6:cc:d4:35:ba:03:c6:f4:
02:b9:34:a7:aa:fb:27:54:47:8d:ab:26:ec:6f:72:15:d5:6a:
bc:6b:91:1e:3e:56:c8:4b:ab:45:b7:2c:4c:b1:1d:42:f1:6b:
e4:f5:c9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:26 2026 by rpki-client