Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier: ghPK8N3cDU08229vgsUx6ZFLBjYHxmk6NIHfKTwP2YA=
Subject key identifier: C1:70:09:2F:51:63:70:1C:14:0E:C2:D6:05:60:0F:41:35:DB:6E:9D
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 019DCC072642FBB92575CC8F2F3CB8E086BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number: 18E7
Signing time: Sun 26 Apr 2026 23:01:53 +0000
Manifest this update: Sun 26 Apr 2026 23:01:53 +0000
Manifest next update: Mon 27 Apr 2026 23:01:53 +0000
Files and hashes: 1: 7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa (hash: rL2+XjzMdSu0K1H05+EkUEOgBJlzmxMsT4JTGcTaBGg=)
2: B6r7tlhytkHdJheo1dsqfbry4Og.roa (hash: kKHkZjflWwkN797C4PStA913gNP9MCPk6MZE/gB/7Ew=)
3: KDXG6Q4UesZZrscbvutRtXUjZ04.roa (hash: glnL5SMYp1iujQsRgxaeozZQtOiC0uKkyBB33wcXcDg=)
4: MIMB6hj-pbhZmAS4NaP7XqTgm34.roa (hash: o3IJJeBy3jpC50UkL8Zt+4vWy+FDSWr1Y6a3t5k0o+s=)
5: fVw_ICDNU6Bi8MAJYhmrvlrXmRs.roa (hash: c+yT9ByZZB/rH9Ty28IEJWoy1m6iGPvLwsGkGU/4scM=)
6: k0BFiQAl7Q4-lOH-wpVIf6F16RE.roa (hash: LWb7rK2buJgbYTwsimy6ORw0odV4aXlPrizohyk5THc=)
7: keDaDU-vCcS6klKiWWvwuQqa3NE.roa (hash: FwrW61c/rLAqQnYEyfpdGoA2bVf4TFLR0gcdIXQaNqA=)
8: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: jxhmLPof3nkbj4g9ZeSGMZjaKucjnJIaR2xUaG2Cy7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:07:26:42:fb:b9:25:75:cc:8f:2f:3c:b8:e0:86:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Apr 26 23:01:53 2026 GMT
Not After : Apr 27 23:01:53 2026 GMT
Subject: CN=c170092f5163701c140ec2d605600f4135db6e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:00:37:82:89:15:b9:05:49:40:e8:31:9b:
06:db:5f:17:39:03:66:15:35:6f:83:4c:15:ce:01:
e7:5c:68:6a:ad:2f:52:d0:bd:fe:58:85:a8:0a:13:
dd:4b:b4:c6:d2:50:60:93:e2:91:93:9a:2b:49:20:
cc:74:51:b2:ef:08:3c:f2:c4:a8:fc:03:0d:46:7b:
d3:47:8a:47:ac:3b:a8:0c:52:d3:dd:6c:5d:c0:67:
e9:fc:c2:a4:51:8a:55:3f:77:27:ec:da:cc:59:75:
c5:2a:8d:27:8b:6e:31:24:0b:d2:02:f3:52:c2:48:
29:d8:a3:4b:d8:19:c1:dc:51:41:0f:1a:6f:e6:2c:
a5:d9:4b:36:d7:89:9c:5b:f5:a8:cc:d0:96:78:2c:
2b:92:87:45:1a:64:6b:2f:e3:87:b0:b1:aa:c1:c2:
e7:56:7a:ba:82:54:0d:ef:f9:e2:cc:c8:ab:fb:0e:
2d:50:fa:1b:2e:d4:f5:fa:40:ac:a4:fc:7f:90:bd:
35:43:c1:f4:29:e3:03:64:3c:e7:e7:e0:39:db:e9:
e9:f4:2d:83:2c:62:17:ff:f8:a4:cb:00:50:84:80:
65:ff:c2:35:c1:d3:57:fa:48:2f:6b:9b:26:19:b3:
da:05:00:ee:a8:2e:1b:c5:59:f2:05:00:9b:c8:a6:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:70:09:2F:51:63:70:1C:14:0E:C2:D6:05:60:0F:41:35:DB:6E:9D
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:81:79:1b:9d:3b:f7:3c:a0:56:ae:3b:17:51:4a:09:5b:72:
b8:e3:ba:ed:ef:70:9a:20:0e:33:65:94:3e:56:9a:13:57:4b:
f3:20:18:29:fb:93:a2:6e:c2:cd:48:1a:ee:f8:4b:69:f0:9d:
47:51:7a:04:42:35:34:06:a7:3a:1b:53:04:61:f6:32:c2:a4:
7c:fd:31:91:e3:6b:82:ca:16:8f:d8:66:8b:a7:ab:12:cc:35:
6d:30:9d:d1:96:9c:0a:19:db:8c:e4:4d:e9:92:20:94:e9:0c:
62:1c:14:b7:81:fb:bb:65:42:8e:88:41:74:70:72:8c:0b:f5:
4d:bc:d3:1d:0e:45:88:91:80:79:fc:6a:d2:c5:9d:63:dd:ec:
fb:82:f9:35:11:dc:33:1a:ca:f6:79:73:e6:a1:9a:ac:48:56:
49:5d:c2:15:e1:4e:e4:13:b6:fb:50:64:af:3b:72:71:18:28:
c1:57:60:a9:3c:28:ae:03:b0:30:d4:60:97:e6:be:7b:0c:5b:
bf:91:74:e0:90:f5:50:bc:21:0f:cd:f3:78:34:3c:57:da:b7:
0a:85:7a:d6:9a:01:db:5a:6a:ca:7e:f2:b0:d2:af:a0:f3:f7:
6d:4f:aa:3f:c3:4d:d0:09:6b:37:c3:7d:b0:c0:7a:5e:0d:96:
04:16:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:11:23 2026 by rpki-client