Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier: Ih9XvJkx4pHCAqNQaaZMfL+55hSKtIYgfVaumOvfCs4=
Subject key identifier: CE:BC:FB:A6:47:3A:57:F4:A6:C7:4A:8E:F0:4D:64:77:41:9C:BC:E2
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 019EB5B2E3CE38B973FE7B7706D1C5B303F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number: 1960
Signing time: Thu 11 Jun 2026 08:01:00 +0000
Manifest this update: Thu 11 Jun 2026 08:01:00 +0000
Manifest next update: Fri 12 Jun 2026 08:01:00 +0000
Files and hashes: 1: 7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa (hash: rL2+XjzMdSu0K1H05+EkUEOgBJlzmxMsT4JTGcTaBGg=)
2: B6r7tlhytkHdJheo1dsqfbry4Og.roa (hash: kKHkZjflWwkN797C4PStA913gNP9MCPk6MZE/gB/7Ew=)
3: KDXG6Q4UesZZrscbvutRtXUjZ04.roa (hash: glnL5SMYp1iujQsRgxaeozZQtOiC0uKkyBB33wcXcDg=)
4: MIMB6hj-pbhZmAS4NaP7XqTgm34.roa (hash: o3IJJeBy3jpC50UkL8Zt+4vWy+FDSWr1Y6a3t5k0o+s=)
5: fVw_ICDNU6Bi8MAJYhmrvlrXmRs.roa (hash: c+yT9ByZZB/rH9Ty28IEJWoy1m6iGPvLwsGkGU/4scM=)
6: k0BFiQAl7Q4-lOH-wpVIf6F16RE.roa (hash: LWb7rK2buJgbYTwsimy6ORw0odV4aXlPrizohyk5THc=)
7: keDaDU-vCcS6klKiWWvwuQqa3NE.roa (hash: FwrW61c/rLAqQnYEyfpdGoA2bVf4TFLR0gcdIXQaNqA=)
8: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: iigtwYx0NjsjpImCVL1dl5PY70Z6yWZpe5K0RzTZ8S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b2:e3:ce:38:b9:73:fe:7b:77:06:d1:c5:b3:03:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Jun 11 08:01:00 2026 GMT
Not After : Jun 12 08:01:00 2026 GMT
Subject: CN=cebcfba6473a57f4a6c74a8ef04d6477419cbce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:2a:50:68:6b:27:ed:c5:ea:eb:0b:d0:c0:
8d:5b:ee:72:be:6d:b6:10:b9:a3:61:ce:c8:f0:03:
3c:44:84:38:32:6b:db:1f:54:68:aa:c0:3b:ba:da:
57:49:09:a1:3f:20:3a:af:56:60:a6:a6:d2:0a:93:
3a:43:45:81:43:d3:30:02:19:c2:4f:83:0d:c3:63:
d2:3e:df:3e:4c:0b:48:6f:fc:50:c3:27:b4:3c:dd:
89:b7:aa:5a:d0:f2:de:f2:fe:9f:5e:ec:73:ed:9a:
46:ae:d7:f7:e0:f1:26:5b:2a:cf:4f:61:fc:10:19:
d1:9b:cf:8c:4a:87:7b:df:5a:c5:d6:c7:b8:c5:af:
27:dd:1d:f7:ec:dd:c2:e0:d0:0b:2d:71:5f:a4:e7:
cc:9e:6d:e6:16:c8:ac:4f:3b:8b:a5:33:37:cd:63:
27:35:3b:f1:d9:d1:d4:4e:36:9a:68:bd:91:62:89:
9b:ab:3f:30:a6:09:cb:28:09:f2:84:8d:0b:bf:ab:
7a:2f:7d:43:ca:8a:4f:a6:ca:dd:75:65:36:00:71:
74:2b:8d:62:be:17:64:c8:ff:b0:b4:27:4a:fe:7e:
f8:a0:39:94:04:9b:00:fc:c9:07:b5:19:e4:f9:b8:
c6:5c:26:19:5e:56:f3:44:d3:b6:c9:3c:f8:28:93:
bf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BC:FB:A6:47:3A:57:F4:A6:C7:4A:8E:F0:4D:64:77:41:9C:BC:E2
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:54:81:33:e6:fb:de:91:c1:de:8f:8c:1d:ea:73:55:15:e0:
7c:51:23:bb:60:f5:f0:0e:18:06:87:36:dd:90:e2:61:a4:d6:
5b:20:19:4e:92:20:4c:d3:e8:0a:e4:9b:60:50:24:d6:85:55:
d4:84:3b:ce:ad:40:6d:b7:60:a2:19:90:f8:ff:dd:97:0c:4c:
2e:61:eb:52:d6:b0:b7:46:dd:dc:97:0c:0c:3a:bc:f9:06:16:
a6:72:93:32:12:3d:28:18:b8:5f:20:50:ee:c8:94:99:00:60:
f8:de:5e:22:80:65:63:ae:6d:ac:38:e7:68:e6:b7:d1:69:4d:
a0:46:18:87:96:b2:a8:84:f6:ed:b4:c6:70:df:54:20:90:15:
ef:0a:6d:ac:17:dc:4e:d4:90:9e:d9:72:0d:d4:8a:71:33:53:
35:e1:c9:ef:74:69:04:2e:22:6e:1d:97:68:d1:6a:6e:39:7b:
bd:d9:51:5d:ff:e5:97:6e:e7:1e:cd:3a:6e:5f:69:6d:0e:34:
07:a5:65:5d:c5:58:da:a6:96:57:d5:01:8e:98:17:89:a0:48:
3d:d6:bc:5c:da:e7:19:bf:1e:f0:8f:c2:d2:a1:2c:a2:e4:f5:
a4:77:a6:55:61:68:53:4e:00:b5:bd:3f:3b:ef:5c:3e:92:7c:
52:8b:9c:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ61suPOOLlz/nt3BtHFswP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTM4NTAzZDcyOTMxNjI2ZGNiOGQxZTk0NmIyYWUwNmE3
M2QwMmUwHhcNMjYwNjExMDgwMTAwWhcNMjYwNjEyMDgwMTAwWjAzMTEwLwYDVQQD
EyhjZWJjZmJhNjQ3M2E1N2Y0YTZjNzRhOGVmMDRkNjQ3NzQxOWNiY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumAqUGhrJ+3F6usL0MCNW+5yvm22
ELmjYc7I8AM8RIQ4MmvbH1RoqsA7utpXSQmhPyA6r1ZgpqbSCpM6Q0WBQ9MwAhnC
T4MNw2PSPt8+TAtIb/xQwye0PN2Jt6pa0PLe8v6fXuxz7ZpGrtf34PEmWyrPT2H8
EBnRm8+MSod731rF1se4xa8n3R337N3C4NALLXFfpOfMnm3mFsisTzuLpTM3zWMn
NTvx2dHUTjaaaL2RYombqz8wpgnLKAnyhI0Lv6t6L31DyopPpsrddWU2AHF0K41i
vhdkyP+wtCdK/n74oDmUBJsA/MkHtRnk+bjGXCYZXlbzRNO2yTz4KJO/0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM68+6ZHOlf0psdKjvBNZHdBnLziMB8GA1UdIwQY
MBaAFK+ThQPXKTFibcuNHpRrKuBqc9AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYt
M2I4YjBkMWE1OWE5LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYtM2I4YjBkMWE1OWE5
LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVSBM+b7
3pHB3o+MHepzVRXgfFEju2D18A4YBoc23ZDiYaTWWyAZTpIgTNPoCuSbYFAk1oVV
1IQ7zq1AbbdgohmQ+P/dlwxMLmHrUtawt0bd3JcMDDq8+QYWpnKTMhI9KBi4XyBQ
7siUmQBg+N5eIoBlY65trDjnaOa30WlNoEYYh5ayqIT27bTGcN9UIJAV7wptrBfc
TtSQntlyDdSKcTNTNeHJ73RpBC4ibh2XaNFqbjl7vdlRXf/ll27nHs06bl9pbQ40
B6VlXcVY2qaWV9UBjpgXiaBIPda8XNrnGb8e8I/C0qEsouT1pHemVWFoU04Atb0/
O+9cPpJ8Uoucuw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:46 2026 by rpki-client