Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File: r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier: 6QYdHYdr82GgQ4tu1T5YrBGOXAh6aEEpSaXuMekU0f4=
Subject key identifier: A8:9F:02:45:48:BD:82:E0:01:C3:1A:E4:8D:0F:B7:E3:0B:97:FC:5A
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 019CAD904F73699305F1F9E0D7672D5CEF47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number: 1040
Signing time: Mon 02 Mar 2026 08:00:41 +0000
Manifest this update: Mon 02 Mar 2026 08:00:41 +0000
Manifest next update: Tue 03 Mar 2026 08:00:41 +0000
Files and hashes: 1: 7QHZaPi6zF_9KFLPmbyoF3ju4Js.roa (hash: uGtlhWfGFyzTsoRAgtfyrZfPlPC+L8/+nC/qurbI1KA=)
2: _SO3ZcEL-NxbVo2zGUmXJKashh4.roa (hash: DQyiiOHyh7kvQrHckqHxzZTNIDfF/xOylq73UWhMnm0=)
3: lyuKP6xRaaH3-14haYmNo8uGHO4.roa (hash: ZW7gfgcc5WNCnRZKczxY87VtQK4F6adXJdrsgRc8psU=)
4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: 5lJaFkoWQTy67Aoc567xKvmx79PGTHmtFYcdeIA2F3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:4f:73:69:93:05:f1:f9:e0:d7:67:2d:5c:ef:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Mar 2 08:00:41 2026 GMT
Not After : Mar 3 08:00:41 2026 GMT
Subject: CN=a89f024548bd82e001c31ae48d0fb7e30b97fc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:dc:a2:87:91:f8:17:0e:e9:2a:24:6c:41:
4e:09:10:a4:67:7b:a0:f4:76:b8:f3:4e:70:de:02:
e7:ac:c0:bb:be:a2:77:3e:bc:51:ec:e2:5e:ee:a0:
4f:52:8a:a2:57:f4:49:5f:47:d7:78:35:7e:d5:29:
b7:ab:62:7f:e6:d7:95:fe:a7:74:c0:a8:c1:4a:09:
cf:40:58:cc:1f:b6:83:67:01:a6:db:7a:17:c1:4c:
65:ef:ea:04:92:22:95:e6:3b:af:2e:fc:62:1f:8f:
80:7d:e7:2f:c4:61:99:85:db:21:b0:66:e8:02:e6:
0f:8e:86:06:62:05:5c:61:2e:80:ba:81:51:39:a8:
fb:85:cc:4a:57:62:45:54:9a:10:2c:08:b8:18:a6:
aa:50:50:e5:49:2f:c3:97:b1:32:55:94:45:ea:f3:
24:94:9f:3c:62:e4:a0:ce:a4:6d:53:15:34:4d:f2:
d9:51:b9:e7:3a:d8:9b:12:9c:06:c6:2b:cd:24:ca:
0b:c6:af:9c:4b:96:09:59:c1:86:45:1f:7d:39:5e:
f5:32:99:f6:9b:37:6b:13:7a:af:cc:ae:63:a6:3f:
fc:9b:2a:27:1e:08:18:34:8c:59:fb:e2:70:c6:dd:
d3:2a:f7:c5:71:a8:c5:86:05:5b:20:eb:a4:4d:f1:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9F:02:45:48:BD:82:E0:01:C3:1A:E4:8D:0F:B7:E3:0B:97:FC:5A
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d4:f6:98:3f:cc:87:53:a8:9d:33:34:b7:09:9e:8e:05:37:
9d:2b:2c:58:8e:0f:b0:b3:c2:88:c6:16:f6:1e:f8:3e:5f:dc:
bd:b4:89:95:14:a8:9f:7c:54:42:1f:69:bf:00:2a:2f:b5:04:
25:6e:f4:8f:d5:c2:e1:d0:24:c0:45:f4:78:0c:6e:75:f9:4a:
2f:38:23:c5:62:7f:8e:1c:84:ec:fd:ac:b8:cb:08:42:df:d4:
a1:58:41:da:64:b0:97:27:da:38:43:20:2d:53:d2:4b:f2:6a:
06:cc:87:18:25:d1:47:ab:f0:79:85:f6:1c:e6:f0:c6:01:b9:
16:72:ca:b9:08:63:49:66:af:ca:ac:71:91:79:9f:19:54:bb:
f4:1b:b0:71:e4:91:21:75:56:46:ee:e9:fa:46:10:61:61:69:
95:18:a2:dd:af:3a:b4:64:4a:88:3a:c0:a6:6c:70:e5:fe:63:
79:03:64:e4:56:da:9d:f4:5b:19:9f:51:cd:de:fe:da:79:c4:
aa:ee:e3:a6:ba:43:f6:2e:12:41:28:8a:8c:e2:ab:76:1f:f7:
3b:e2:a0:b8:85:e6:bf:e9:94:8f:cf:af:94:d1:4c:52:fc:77:
0e:38:39:34:bb:16:5a:71:e8:05:aa:78:0d:c1:49:9f:42:36:
55:9b:67:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:49 2026 by rpki-client