Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
File: r5VJF2-WbToiFBAHkJfIfw4dILE.mft (raw, json)
Hash identifier: TIe7UGqYFz2ZTO9BzE1dMb7dPVc+ZjwJ5InslyYUp2Q=
Subject key identifier: 00:6D:ED:9D:FF:BB:8A:6F:4D:12:6F:95:8A:38:46:FD:16:D7:91:82
Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1
Certificate serial: 019CAAC659900A51E54422C20DC7E3439141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
Manifest number: 0FA8
Signing time: Sun 01 Mar 2026 19:00:51 +0000
Manifest this update: Sun 01 Mar 2026 19:00:51 +0000
Manifest next update: Mon 02 Mar 2026 19:00:51 +0000
Files and hashes: 1: LOQz_syfMI8JZau8ZzzM3cSE-EU.roa (hash: jcxzi0LJJRE166oSQjl3Ya4HtG61eYjSPoLWrIadH1U=)
2: r5VJF2-WbToiFBAHkJfIfw4dILE.crl (hash: Bre84jWyEDsqwefDYWD9Cu+7bGh5CNlZZT9zzQT/aBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:59:90:0a:51:e5:44:22:c2:0d:c7:e3:43:91:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1
Validity
Not Before: Mar 1 19:00:51 2026 GMT
Not After : Mar 2 19:00:51 2026 GMT
Subject: CN=006ded9dffbb8a6f4d126f958a3846fd16d79182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:03:83:a5:c0:12:14:3d:f3:1a:06:4b:e5:05:
4f:9d:b3:33:19:2f:32:5a:b3:a2:3a:22:4b:16:95:
ca:af:66:cf:4d:b8:db:48:61:b2:ec:3a:33:90:e8:
c1:41:b3:84:fb:0a:70:e7:0c:cf:c5:99:5b:ce:20:
3b:1e:0d:04:87:e0:2a:93:a3:dd:ce:de:fb:0c:b7:
c1:ca:2f:be:e5:9d:3b:4d:34:6f:fa:07:de:23:67:
fa:e7:5e:6a:26:b2:0f:6c:9a:67:5b:96:76:10:cb:
92:8f:d5:d7:8a:04:b2:51:2c:18:58:41:ef:37:2a:
9f:b2:66:52:d8:2c:38:07:51:27:27:fa:4a:81:44:
80:2f:44:dd:c8:f6:77:4a:d6:67:2c:2f:1c:73:0c:
5a:a0:e8:e7:29:bf:6e:5a:19:3f:44:fc:d4:52:b0:
ba:b6:e1:6d:a3:f9:df:65:84:a2:20:04:0f:84:09:
dc:d6:11:26:71:9c:c2:60:41:8e:7d:90:85:51:ad:
88:a2:f0:a0:c1:f8:4a:cc:6a:3a:99:1b:c9:ab:19:
d7:39:2e:fa:85:78:fc:54:ea:cd:c2:ca:4c:8b:f4:
a9:22:27:97:82:30:54:4f:50:b1:23:17:f2:a3:a2:
1d:c0:96:01:ef:f2:44:d7:49:06:73:07:2e:b2:cc:
da:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6D:ED:9D:FF:BB:8A:6F:4D:12:6F:95:8A:38:46:FD:16:D7:91:82
X509v3 Authority Key Identifier:
keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:70:1a:33:4a:09:b6:17:ae:7c:77:48:2b:23:9f:11:c3:2b:
b3:07:71:5f:5b:a9:89:cb:69:6c:bf:57:1f:b8:62:6f:22:2d:
c0:17:3c:2e:ac:30:59:15:f2:24:c3:4e:a1:0c:c9:98:10:93:
39:43:9e:eb:fd:68:0a:a5:e8:bb:e5:99:ba:42:db:13:ae:72:
dc:aa:1f:b2:fc:ab:63:f6:bd:eb:c6:50:8e:54:74:f2:6e:bc:
ca:60:81:e9:3c:7c:c9:0d:b3:38:2f:d9:fc:aa:b9:d9:94:71:
04:69:78:8a:81:be:bb:0d:76:7b:f9:69:ab:c1:da:e3:67:3d:
d5:0b:7b:76:26:1e:d5:06:03:7b:78:89:91:4b:79:8f:3c:ee:
73:a1:52:eb:1f:52:89:c9:41:4b:20:e7:12:88:cb:89:7c:14:
13:7a:ff:9d:10:80:97:db:d2:07:77:d2:21:8e:4c:84:fe:8b:
d7:d7:d6:fd:81:b9:17:2f:fc:28:af:0f:6a:8e:d9:7d:c2:a6:
aa:7d:f9:25:87:43:71:8f:1a:60:44:b2:6e:0e:b7:e4:e2:02:
b6:e2:26:15:04:57:b2:24:c0:0b:3a:1a:4c:48:1e:a6:82:d3:
02:4a:5f:65:30:c3:a1:a8:f0:13:d4:01:32:0a:29:f3:61:ed:
be:a9:09:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:31 2026 by rpki-client