Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
File: r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft (raw, json)
Hash identifier: t7IR/8TVhIhhQ52UiADdXvggV0DzXSODft8qP0qFNUo=
Subject key identifier: C3:F8:93:60:A5:87:04:8A:82:99:40:82:A1:B3:64:8B:40:38:BB:99
Authority key identifier: AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
Certificate issuer: /CN=af934ec694af68134b7514c10dcd13857b459e38
Certificate serial: 019DCE63368BC676353909AB0700E6A9A3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
Manifest number: 12DA
Signing time: Mon 27 Apr 2026 10:01:41 +0000
Manifest this update: Mon 27 Apr 2026 10:01:41 +0000
Manifest next update: Tue 28 Apr 2026 10:01:41 +0000
Files and hashes: 1: G7zbH0s176fZtCse-15mMTljv8o.roa (hash: bng6dC4LjgT90wt4Nd1UlCg1rSNDjhq1PyJI9ymWjxk=)
2: r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl (hash: SEQexL2DSZwuUiYZ2tJrJmFdeJoWXfXDYKmGQefcWlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:36:8b:c6:76:35:39:09:ab:07:00:e6:a9:a3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af934ec694af68134b7514c10dcd13857b459e38
Validity
Not Before: Apr 27 10:01:41 2026 GMT
Not After : Apr 28 10:01:41 2026 GMT
Subject: CN=c3f89360a587048a82994082a1b3648b4038bb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:bf:60:47:2c:8e:c2:5f:2b:f7:be:50:83:
ab:d7:a4:c3:e2:17:b6:18:d3:5b:c9:96:d0:ef:51:
4e:9b:35:67:70:66:22:1c:18:68:4f:02:9f:d9:ad:
46:32:a3:a8:9b:e9:fe:29:04:85:df:19:89:9d:ac:
b4:b1:7a:b8:d8:e4:cd:3b:8f:4d:50:b2:45:ca:a4:
41:16:8e:4d:c2:f4:57:58:32:e5:ac:ff:eb:bf:d9:
05:c6:d5:e2:a2:f7:15:26:1b:48:94:72:cd:d0:94:
36:60:cd:49:fa:85:d8:5b:6b:48:aa:5b:0c:9b:25:
86:3a:f3:75:65:3f:fc:95:fa:f2:b1:3a:1f:01:28:
4e:14:a1:15:46:ac:e3:6b:f1:ab:d4:97:2c:13:1e:
e0:a3:38:9f:5e:cd:61:9f:f3:e1:55:ce:46:12:35:
c4:b9:13:87:3c:6c:74:c3:26:fa:f4:69:5f:bc:90:
ca:8c:f5:1e:a0:c7:ad:65:ee:82:47:97:83:85:c3:
7b:0c:a0:9d:9a:19:36:f1:eb:a2:f0:b0:f3:bd:7f:
bb:78:ff:c6:d5:13:e8:4a:10:1b:0e:fa:36:41:77:
4f:fb:35:8b:e5:2a:ae:96:05:82:07:c7:9e:3e:36:
9c:78:58:4e:43:a8:4f:65:77:0e:e2:36:f6:3d:79:
ae:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F8:93:60:A5:87:04:8A:82:99:40:82:A1:B3:64:8B:40:38:BB:99
X509v3 Authority Key Identifier:
keyid:AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:58:a8:b9:92:85:e8:2b:1a:04:02:2b:97:a0:36:72:22:b2:
15:87:ed:0e:b8:b3:e5:0f:c2:f6:a0:52:8e:71:70:07:12:98:
4a:d1:74:29:9e:9d:60:ba:ea:d4:1e:01:98:ec:73:f7:7b:a3:
18:9f:f0:ae:20:82:db:59:12:e1:b8:77:c6:14:e8:2f:d4:05:
35:d8:f0:7b:93:9f:ce:b7:a9:de:31:ee:4f:b0:c1:5b:b6:34:
84:4e:d6:39:12:91:30:a4:0d:d1:78:aa:f5:00:89:38:2b:a5:
b5:5f:e2:90:dc:97:65:97:4e:e2:68:8a:b2:3a:4f:19:15:e1:
5e:d8:b6:84:bf:3f:e4:ec:58:48:4b:65:f9:30:a4:aa:e6:8c:
66:08:d8:7e:6c:31:4e:99:b8:40:f0:7f:ee:c3:66:0c:1a:e9:
fc:fc:f4:80:ce:6c:da:72:54:90:9d:6f:97:47:6b:78:a3:05:
8b:9f:76:60:2f:ba:d1:10:50:26:f8:45:50:49:fc:56:59:d1:
1a:33:91:fe:c6:a5:64:80:c6:5d:8c:5f:11:a6:a7:1a:1d:6b:
cd:97:b9:9d:2e:aa:5b:ca:dc:27:5c:97:5e:31:ef:e0:92:64:
0a:cc:b5:51:10:8c:28:a2:8f:4e:ab:19:53:8b:00:34:eb:f4:
ad:17:4b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:34:38 2026 by rpki-client