Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier: c6fYYNW6zOHumNIUYdXccdlkLGqLXjpibpTWvWko9Kk=
Subject key identifier: BB:1E:23:1E:6B:5B:41:01:A9:66:70:10:4D:61:5F:DE:6C:6B:6E:9E
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 01A0C2FAC8CD77BE74921CA4912E0B74911B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number: 1A71
Signing time: Mon 21 Sep 2026 08:00:10 +0000
Manifest this update: Mon 21 Sep 2026 08:00:10 +0000
Manifest next update: Tue 22 Sep 2026 08:00:10 +0000
Files and hashes: 1: 7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa (hash: rL2+XjzMdSu0K1H05+EkUEOgBJlzmxMsT4JTGcTaBGg=)
2: MIMB6hj-pbhZmAS4NaP7XqTgm34.roa (hash: o3IJJeBy3jpC50UkL8Zt+4vWy+FDSWr1Y6a3t5k0o+s=)
3: cLhMOaHsTiCbjcGDDECKr1VTwQY.roa (hash: Iqsn8kMpNh5UcFT7O/wgulPUF+XCyAq288IMTgURFHM=)
4: fVw_ICDNU6Bi8MAJYhmrvlrXmRs.roa (hash: c+yT9ByZZB/rH9Ty28IEJWoy1m6iGPvLwsGkGU/4scM=)
5: k0BFiQAl7Q4-lOH-wpVIf6F16RE.roa (hash: LWb7rK2buJgbYTwsimy6ORw0odV4aXlPrizohyk5THc=)
6: keDaDU-vCcS6klKiWWvwuQqa3NE.roa (hash: FwrW61c/rLAqQnYEyfpdGoA2bVf4TFLR0gcdIXQaNqA=)
7: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: F7t7zBk2e9eK2SvKnymPTj29XlIylcQRXk/VwoASTNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fa:c8:cd:77:be:74:92:1c:a4:91:2e:0b:74:91:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Sep 21 08:00:10 2026 GMT
Not After : Sep 22 08:00:10 2026 GMT
Subject: CN=bb1e231e6b5b4101a96670104d615fde6c6b6e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:65:ef:ac:e2:e9:06:21:fa:82:2a:9b:52:60:
58:3a:a9:da:fc:86:65:75:81:a1:5d:99:e5:9e:e9:
9f:43:4a:ee:36:ef:3b:8f:f1:02:d9:1e:0e:96:2e:
58:64:76:aa:cc:6c:27:00:16:19:08:81:8a:9d:d4:
1e:3f:d7:9e:88:c8:00:71:db:b6:d6:35:4b:22:38:
36:a7:47:f7:58:a1:cd:96:54:b6:ab:59:24:44:cc:
88:33:6f:c9:6b:9a:02:68:3c:6f:d5:b8:0f:26:90:
10:14:24:5b:84:5b:e5:8b:44:3e:1c:c6:ed:eb:d0:
ba:d1:29:e7:99:7d:0b:83:92:d7:1b:73:fe:fc:74:
e7:83:73:70:6d:1f:08:a0:3c:7b:79:3f:4a:ef:9d:
28:8e:87:55:83:8f:f3:be:13:b7:99:7d:1a:41:60:
d4:8c:21:c9:12:85:69:bd:df:0a:09:95:1d:37:93:
93:23:18:5e:7d:bb:79:09:52:b4:0e:86:ce:79:a7:
57:e5:aa:b2:a0:e8:03:e6:1b:6f:94:b4:97:c9:d8:
a4:8c:bf:bd:3d:77:f4:9b:12:6b:b3:08:80:ca:71:
7f:28:57:0e:0e:f1:f8:6f:d5:f0:25:e2:1a:de:77:
4d:2a:6c:41:06:f8:b9:4a:e1:0b:6c:e4:27:7d:3f:
a5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1E:23:1E:6B:5B:41:01:A9:66:70:10:4D:61:5F:DE:6C:6B:6E:9E
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:06:db:9f:a4:45:33:07:e6:67:82:4a:9b:2d:e9:4b:d3:03:
52:69:00:20:2c:48:96:69:19:0a:af:08:80:20:29:56:89:3e:
48:6f:a1:73:a4:34:5a:ee:2d:8b:35:a8:b1:9a:9d:30:ef:eb:
8b:46:28:ad:ad:d8:b5:90:d7:d6:57:1a:21:68:98:72:4a:64:
b0:fe:b6:2f:cd:e2:d3:5c:97:ed:0d:c9:d1:79:d3:26:9a:58:
cd:07:6a:de:75:f5:66:25:f0:22:a6:a9:84:0a:9d:3d:59:a7:
51:23:19:20:9d:ce:5a:07:58:62:f0:4f:a1:fd:ee:c8:b4:f5:
31:74:ec:81:22:4a:c2:da:5a:4f:57:92:dd:5e:e2:04:48:21:
87:90:a8:d2:c1:51:80:57:8a:3e:59:f3:42:35:ce:b1:01:b6:
53:2f:4e:aa:47:28:c9:ab:95:cb:97:a3:39:0e:23:b4:3f:e2:
dc:5d:36:ba:8e:02:a1:55:69:b0:34:d0:f6:3b:14:c4:c1:a4:
9e:2a:c1:c1:08:bf:89:44:51:3a:c5:b6:c0:6e:46:02:7b:7a:
86:5f:92:e3:6c:bf:0b:cc:4d:6e:e0:4e:4d:87:a7:61:8c:04:
0b:29:55:de:7d:af:d2:e6:0a:61:f8:6e:75:a7:78:29:a2:dc:
3f:ce:8e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:57:33 2026 by rpki-client