Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
File: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft (raw, json)
Hash identifier: D23S+FIq7sprzlml/75/3RIXsCB3Gds4bcrHqbBeE40=
Subject key identifier: 1B:42:A7:41:6E:77:95:ED:5D:41:72:0A:7A:B6:17:89:A0:A0:F5:F5
Authority key identifier: AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
Certificate issuer: /CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Certificate serial: 01A0DA5FDC3F509D53F31BF83F63BEE1ABEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
Manifest number: 074E
Signing time: Fri 25 Sep 2026 21:01:50 +0000
Manifest this update: Fri 25 Sep 2026 21:01:50 +0000
Manifest next update: Sat 26 Sep 2026 21:01:50 +0000
Files and hashes: 1: SW0jIvk1wvk_Jl_m70Mc6YZkuCg.roa (hash: xgcppBoYJknCSghed+wm1HRzdAorIWKU+WyvltEZlPQ=)
2: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl (hash: a7TxEU9tl35G/5OlWamw9IwMvgM5qF5DDDxWmdKTPXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:dc:3f:50:9d:53:f3:1b:f8:3f:63:be:e1:ab:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Validity
Not Before: Sep 25 21:01:50 2026 GMT
Not After : Sep 26 21:01:50 2026 GMT
Subject: CN=1b42a7416e7795ed5d41720a7ab61789a0a0f5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:ac:82:97:96:4d:9e:34:a1:22:b2:c2:d5:
03:14:d1:29:ff:cf:44:c5:6a:09:68:96:a7:31:9e:
28:16:77:6f:4e:cd:54:23:7e:89:a0:85:d1:33:6e:
9b:35:93:89:d0:c9:38:b5:95:15:39:c7:a3:49:6d:
8d:f7:9b:a9:cf:7f:8d:26:1b:23:c0:49:a4:3e:40:
4a:0a:cc:28:f9:74:38:35:b2:44:1b:29:25:ac:c9:
64:2e:95:c3:0c:4f:ff:25:d7:8e:8d:87:c0:6d:cb:
a5:d2:9b:81:d2:05:0d:93:8d:20:2b:10:75:a3:87:
1c:31:e0:58:7c:44:e5:d5:4e:29:3e:c6:d3:64:93:
ee:bb:6c:f1:fd:b2:a7:a9:ec:a8:de:a8:e4:f6:7b:
ca:06:14:c8:5f:06:9c:29:d3:60:61:88:fa:af:3f:
9b:e1:93:3d:6e:c6:60:0f:84:f3:8a:a3:16:a1:06:
48:dd:b0:4b:1a:3d:4f:50:da:41:03:0b:0d:92:2f:
fd:92:8e:b4:73:78:80:ce:10:ae:6d:9a:81:cd:71:
1e:ad:39:74:55:af:32:0e:52:78:51:51:f9:76:ac:
b7:3f:dd:16:f0:c0:8e:ba:cf:15:92:17:2f:c5:09:
f7:be:35:e2:a1:22:ab:ca:38:10:bd:3c:ac:6c:ad:
a4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:42:A7:41:6E:77:95:ED:5D:41:72:0A:7A:B6:17:89:A0:A0:F5:F5
X509v3 Authority Key Identifier:
keyid:AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5d:5a:dd:51:bd:46:de:d0:1d:24:39:05:9c:ac:08:c4:61:
5b:db:aa:7c:eb:32:8b:3e:47:ef:6b:94:d5:57:6c:34:02:23:
72:96:91:d1:f8:5c:39:05:c8:3b:96:8b:a0:3a:15:4b:e5:00:
71:92:a2:aa:4d:d4:2f:48:73:23:00:bb:b8:bd:ca:3f:88:3a:
05:b7:c8:a8:46:d2:16:28:a9:f1:d4:ac:f1:91:94:7b:be:2a:
13:5b:8b:d6:40:b1:35:20:a4:ec:39:a4:08:da:70:91:17:a5:
c2:cd:99:ff:52:38:4d:74:d1:19:83:da:03:11:36:50:35:86:
bb:40:44:85:e5:80:5e:a1:7b:f7:43:6b:c5:a1:87:01:ff:0f:
e1:7d:7f:91:4d:6c:48:6d:a4:d6:63:2d:42:1e:4c:f5:06:ed:
3c:43:7a:77:9b:94:b9:de:d2:9d:9c:a8:55:4a:2d:41:ce:85:
30:d5:ab:0f:44:a7:79:44:4d:60:27:90:0d:ed:b4:95:13:01:
a3:17:02:39:e7:ae:3f:e1:b7:a3:bd:5c:42:17:54:0f:ab:eb:
19:9c:db:70:40:b4:28:34:42:27:1f:37:7b:39:14:1b:fb:69:
64:8d:31:a5:f0:61:49:31:fd:72:b1:2a:39:4e:b6:30:f7:8d:
ce:9e:99:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:05:29 2026 by rpki-client