Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier: R2BfTHwBFqKQ8SclHnQjYbBBgZL2yKCzeWyT3ubCCAA=
Subject key identifier: C8:BB:1B:6F:9B:7F:86:88:4A:06:AA:D9:F4:CD:6F:3B:C8:C6:3C:5A
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 019EBF5B23B00947B28323A9EF97CB51C6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number: 1965
Signing time: Sat 13 Jun 2026 05:01:21 +0000
Manifest this update: Sat 13 Jun 2026 05:01:21 +0000
Manifest next update: Sun 14 Jun 2026 05:01:21 +0000
Files and hashes: 1: 7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa (hash: rL2+XjzMdSu0K1H05+EkUEOgBJlzmxMsT4JTGcTaBGg=)
2: B6r7tlhytkHdJheo1dsqfbry4Og.roa (hash: kKHkZjflWwkN797C4PStA913gNP9MCPk6MZE/gB/7Ew=)
3: KDXG6Q4UesZZrscbvutRtXUjZ04.roa (hash: glnL5SMYp1iujQsRgxaeozZQtOiC0uKkyBB33wcXcDg=)
4: MIMB6hj-pbhZmAS4NaP7XqTgm34.roa (hash: o3IJJeBy3jpC50UkL8Zt+4vWy+FDSWr1Y6a3t5k0o+s=)
5: fVw_ICDNU6Bi8MAJYhmrvlrXmRs.roa (hash: c+yT9ByZZB/rH9Ty28IEJWoy1m6iGPvLwsGkGU/4scM=)
6: k0BFiQAl7Q4-lOH-wpVIf6F16RE.roa (hash: LWb7rK2buJgbYTwsimy6ORw0odV4aXlPrizohyk5THc=)
7: keDaDU-vCcS6klKiWWvwuQqa3NE.roa (hash: FwrW61c/rLAqQnYEyfpdGoA2bVf4TFLR0gcdIXQaNqA=)
8: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: 2Mz8Dq4WU9NczB4aAyXoXlorP6olqnZhN5NU5DNZIHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:23:b0:09:47:b2:83:23:a9:ef:97:cb:51:c6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Jun 13 05:01:21 2026 GMT
Not After : Jun 14 05:01:21 2026 GMT
Subject: CN=c8bb1b6f9b7f86884a06aad9f4cd6f3bc8c63c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:31:ca:09:71:31:2d:1e:ef:56:3d:82:87:
f0:83:48:99:d2:71:72:ea:03:57:85:8a:64:ea:68:
31:13:66:1c:4c:8d:4a:c0:45:f8:bc:ae:18:80:56:
f9:09:21:70:62:13:92:28:c7:d3:39:82:de:79:88:
49:a9:62:37:8d:40:8a:d9:20:ce:fa:86:43:01:14:
4b:9a:87:f2:86:ac:80:d8:70:0d:55:84:6d:1e:b4:
0e:d8:d7:fa:83:88:75:87:6d:49:1e:ab:45:6a:ee:
a0:2c:3e:82:e6:98:44:c6:76:65:ff:07:78:99:86:
13:1c:13:ef:dd:8e:25:3b:09:7b:a8:d4:b4:dd:06:
2d:c7:a9:c0:ea:24:10:3f:92:97:f5:7c:7c:d5:ed:
51:9e:50:e7:87:8c:02:42:a5:a0:51:52:a9:56:88:
37:ad:8d:90:f9:15:8c:1c:e3:bd:98:be:37:84:d6:
de:68:54:18:ce:a2:99:6d:dd:3b:c5:7d:03:ce:51:
f3:46:77:d9:9e:29:0d:0d:e3:29:6b:80:e5:84:8f:
7b:eb:56:8e:87:9e:a7:65:79:cc:ef:e4:08:ef:7e:
e0:0b:ad:a6:2e:48:17:75:39:38:48:d1:22:90:39:
d4:fe:de:fa:cd:39:f7:9f:d2:aa:ab:7b:db:b2:f7:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BB:1B:6F:9B:7F:86:88:4A:06:AA:D9:F4:CD:6F:3B:C8:C6:3C:5A
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7d:87:f4:bb:09:e8:b2:9e:15:d9:3b:0f:5c:57:07:7d:9e:
c5:8c:e4:9e:31:75:ed:a6:81:54:93:96:45:64:e7:5b:55:86:
0e:69:1f:82:5e:51:cc:47:39:f0:11:80:b3:71:a8:7e:ac:d6:
fd:36:24:86:11:ba:0a:fa:c7:98:92:c0:ea:2c:f2:e5:10:a8:
b9:d9:55:79:ce:6d:89:ea:f7:82:ae:6c:6b:56:90:f2:58:04:
04:d0:58:09:3c:17:61:c4:10:68:5f:a5:4a:9a:58:46:2c:c2:
f0:e3:55:5a:dd:8b:ff:37:fd:92:5f:a8:b2:4c:c5:66:82:ee:
a3:c6:b1:1a:48:b9:cb:68:e7:dc:91:b7:ce:05:2f:49:94:a0:
67:36:62:a8:24:69:72:7c:08:f3:0a:20:3c:17:27:58:c9:af:
35:d6:29:0d:33:85:6f:0f:90:d9:7e:d8:41:b2:6a:e1:58:96:
3f:6d:b7:d2:91:0b:67:35:e8:56:ac:43:47:31:61:8f:d6:06:
f7:05:e5:27:fe:88:dc:c1:df:d1:2c:44:11:fa:dc:a0:0f:a7:
83:64:03:eb:ae:c4:5a:82:ea:ae:3b:ae:57:be:96:ee:c3:a9:
9d:5f:d6:d4:61:09:af:69:31:bd:3e:1a:fb:7f:1f:07:7d:71:
cc:b0:87:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:19:08 2026 by rpki-client