Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
File: r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft (raw, json)
Hash identifier: 7TEyBycp4d+o13mrfGhpIW2FCfLVUyIm1JJjPdOVt4w=
Subject key identifier: 61:2B:E3:4E:2D:B4:03:7D:B1:14:CA:F3:F7:A3:5C:CF:B2:2C:B6:46
Authority key identifier: AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
Certificate issuer: /CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Certificate serial: 019D39AEC6BE44C77D3B32FBDA821BC0BE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
Manifest number: 0CFC
Signing time: Sun 29 Mar 2026 13:00:48 +0000
Manifest this update: Sun 29 Mar 2026 13:00:48 +0000
Manifest next update: Mon 30 Mar 2026 13:00:48 +0000
Files and hashes: 1: niXIs67HnTRfFLGC1HZAY3uj8cU.roa (hash: wwuo2W8ON5QM/uq0sqdrnWPPJasVC2ONRBN1iw5lrCg=)
2: r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl (hash: WOmx/wu2/haVckAlv7aVOoMSOAre4MB+Eod0px2Aw0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:c6:be:44:c7:7d:3b:32:fb:da:82:1b:c0:be:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Validity
Not Before: Mar 29 13:00:48 2026 GMT
Not After : Mar 30 13:00:48 2026 GMT
Subject: CN=612be34e2db4037db114caf3f7a35ccfb22cb646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:52:65:f9:e6:b5:9e:a3:39:49:7f:0b:78:
53:f6:f0:6b:e9:ec:3f:84:27:ed:1b:14:2c:b6:29:
9b:bd:d2:29:bb:0c:fb:73:77:6d:74:f8:78:59:1e:
89:b1:c4:65:40:11:f6:0e:30:69:b9:90:00:fe:e4:
20:49:df:7d:e1:7a:3f:55:15:25:38:6b:e7:f5:16:
c4:5d:82:45:4f:7f:eb:75:ec:89:ab:fc:06:f0:9b:
6e:90:a3:32:b6:04:c7:46:d1:5f:54:72:53:f1:14:
59:8c:f7:1c:10:bc:a0:f5:bb:14:43:16:1a:fb:cc:
c0:93:a9:1c:1b:16:84:42:34:41:7c:9f:de:69:f6:
95:bc:20:de:86:30:f2:a1:1c:0d:b4:77:df:95:42:
40:67:3f:bd:c6:4a:85:0a:a3:53:86:f1:4a:05:80:
70:2d:c7:ff:f1:a8:3d:97:b4:6e:9f:55:c9:1d:11:
ce:49:d5:6e:69:69:50:7b:f4:29:3f:25:2e:ed:c0:
bb:88:d3:fc:4e:9a:04:46:05:b1:b6:9b:e7:a8:6d:
cf:ed:7f:e8:99:d3:2a:cb:bb:e3:d8:ac:ef:9a:cf:
f2:0b:6c:a2:35:fc:ac:4d:0f:a8:c4:1f:1f:fa:9b:
c4:b7:88:99:d8:6c:30:fc:8a:f7:89:f9:ae:5a:25:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2B:E3:4E:2D:B4:03:7D:B1:14:CA:F3:F7:A3:5C:CF:B2:2C:B6:46
X509v3 Authority Key Identifier:
keyid:AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c1:67:be:96:3f:04:9c:ed:ab:9f:53:1d:0e:83:ec:8c:de:
e1:3f:7a:ab:8b:3f:00:a0:7d:0c:77:e9:07:0b:df:94:87:88:
7a:b6:b4:4f:51:9a:51:0e:9b:79:67:50:3b:30:81:bf:9e:f7:
c8:ae:93:06:48:d5:d7:70:65:73:74:a2:c9:3e:36:6f:e8:12:
14:b8:0e:66:1b:48:c4:31:57:56:dc:f8:c2:e5:99:13:b1:55:
39:97:f3:ad:56:e9:1d:dc:31:5f:ad:94:0e:ad:e6:4b:10:31:
3f:04:81:d9:f5:e1:21:ef:60:7c:bc:01:3d:82:17:03:ae:61:
64:c3:4f:4e:af:52:63:50:14:5f:8a:30:83:30:70:dd:a1:f2:
86:41:2b:f0:e8:1c:0b:dc:82:6b:19:45:de:a0:80:7c:31:57:
64:f8:f4:c4:29:95:fd:f9:fa:e8:c8:2c:26:35:5f:d7:3c:b1:
39:d2:4f:a7:9f:1d:45:f4:39:16:6f:42:41:d5:c0:79:3c:ad:
a7:3d:a8:0c:41:ce:56:b6:06:fe:95:2e:b0:84:9e:9c:07:bb:
84:4e:c0:86:ce:91:a8:14:a6:d8:c0:ef:5b:f7:ec:b1:04:4d:
b1:9b:6e:80:fc:56:86:ae:32:b6:a4:fd:0f:e4:b9:06:13:ad:
b0:70:69:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rsa+RMd9OzL72oIbwL5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTMxMDI1MTFlNjYwMjYzZjhlZjZlNGMxZjlhYjMyMzkz
ODM5YjIwHhcNMjYwMzI5MTMwMDQ4WhcNMjYwMzMwMTMwMDQ4WjAzMTEwLwYDVQQD
Eyg2MTJiZTM0ZTJkYjQwMzdkYjExNGNhZjNmN2EzNWNjZmIyMmNiNjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwVSZfnmtZ6jOUl/C3hT9vBr6ew/
hCftGxQstimbvdIpuwz7c3dtdPh4WR6JscRlQBH2DjBpuZAA/uQgSd994Xo/VRUl
OGvn9RbEXYJFT3/rdeyJq/wG8JtukKMytgTHRtFfVHJT8RRZjPccELyg9bsUQxYa
+8zAk6kcGxaEQjRBfJ/eafaVvCDehjDyoRwNtHfflUJAZz+9xkqFCqNThvFKBYBw
Lcf/8ag9l7Run1XJHRHOSdVuaWlQe/QpPyUu7cC7iNP8TpoERgWxtpvnqG3P7X/o
mdMqy7vj2Kzvms/yC2yiNfysTQ+oxB8f+pvEt4iZ2Gww/Ir3ifmuWiWkCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEr404ttAN9sRTK8/ejXM+yLLZGMB8GA1UdIwQY
MBaAFK+TECUR5mAmP4725MH5qzI5ODmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kMTZlOTYtMDMxMy00YzliLTljMDkt
YTk1ZmUzMTAyNjQ1LzEvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kMTZlOTYtMDMxMy00YzliLTljMDktYTk1ZmUzMTAyNjQ1
LzEvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsFnvpY/
BJztq59THQ6D7Ize4T96q4s/AKB9DHfpBwvflIeIera0T1GaUQ6beWdQOzCBv573
yK6TBkjV13Blc3SiyT42b+gSFLgOZhtIxDFXVtz4wuWZE7FVOZfzrVbpHdwxX62U
Dq3mSxAxPwSB2fXhIe9gfLwBPYIXA65hZMNPTq9SY1AUX4owgzBw3aHyhkEr8Ogc
C9yCaxlF3qCAfDFXZPj0xCmV/fn66MgsJjVf1zyxOdJPp58dRfQ5Fm9CQdXAeTyt
pz2oDEHOVrYG/pUusISenAe7hE7Ahs6RqBSm2MDvW/fssQRNsZtugPxWhq4ytqT9
D+S5BhOtsHBpBw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:19 2026 by rpki-client