Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier: CrmC8k/LTK0/qyoKQtpZ6eB4WXHN5R2x5uUe8XKwxZo=
Subject key identifier: A4:1C:4A:E4:9C:37:08:C5:1A:70:68:B4:B0:86:AB:97:F9:16:22:A6
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 019CE4486D2C1145A2565B6E8A7796762A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number: 186F
Signing time: Thu 12 Mar 2026 23:01:17 +0000
Manifest this update: Thu 12 Mar 2026 23:01:17 +0000
Manifest next update: Fri 13 Mar 2026 23:01:17 +0000
Files and hashes: 1: 7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa (hash: rL2+XjzMdSu0K1H05+EkUEOgBJlzmxMsT4JTGcTaBGg=)
2: B6r7tlhytkHdJheo1dsqfbry4Og.roa (hash: kKHkZjflWwkN797C4PStA913gNP9MCPk6MZE/gB/7Ew=)
3: KDXG6Q4UesZZrscbvutRtXUjZ04.roa (hash: glnL5SMYp1iujQsRgxaeozZQtOiC0uKkyBB33wcXcDg=)
4: MIMB6hj-pbhZmAS4NaP7XqTgm34.roa (hash: o3IJJeBy3jpC50UkL8Zt+4vWy+FDSWr1Y6a3t5k0o+s=)
5: fVw_ICDNU6Bi8MAJYhmrvlrXmRs.roa (hash: c+yT9ByZZB/rH9Ty28IEJWoy1m6iGPvLwsGkGU/4scM=)
6: k0BFiQAl7Q4-lOH-wpVIf6F16RE.roa (hash: LWb7rK2buJgbYTwsimy6ORw0odV4aXlPrizohyk5THc=)
7: keDaDU-vCcS6klKiWWvwuQqa3NE.roa (hash: FwrW61c/rLAqQnYEyfpdGoA2bVf4TFLR0gcdIXQaNqA=)
8: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: 2H+/nAz713A638qUv6SaxVbNWw5A7vfwCFg+Pr/VIXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:6d:2c:11:45:a2:56:5b:6e:8a:77:96:76:2a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Mar 12 23:01:17 2026 GMT
Not After : Mar 13 23:01:17 2026 GMT
Subject: CN=a41c4ae49c3708c51a7068b4b086ab97f91622a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:74:e2:1d:83:56:f1:19:99:67:ef:59:1c:ac:
ca:24:2c:12:ce:08:be:10:0f:73:c1:d6:c2:f4:61:
ff:53:e1:37:8f:4b:81:98:27:70:ed:7a:31:43:61:
02:92:94:17:29:e3:ae:41:b7:d9:6a:7b:26:2d:9e:
5b:a9:c3:0e:61:7f:49:85:eb:a8:16:45:60:ab:8c:
86:df:ee:56:52:89:63:77:0c:5b:3f:a3:f6:50:39:
6d:a7:83:b7:c1:c0:63:3d:18:0f:ef:73:34:5b:81:
17:1d:c0:94:f6:79:82:be:c3:62:1d:34:6c:0d:55:
27:45:37:f1:3f:a1:9c:84:d8:9a:9d:ca:a9:1b:41:
fd:82:50:34:b4:e4:fd:8d:5b:a5:1e:4d:bd:da:21:
d6:0d:c6:5f:fd:a8:59:2c:15:95:c2:e6:4e:12:69:
fb:a2:68:b3:cd:ff:8a:8d:5b:d1:70:63:d3:99:cf:
16:c3:e2:48:b7:09:9b:06:87:e7:23:fa:e5:28:3b:
95:5b:73:04:73:27:7d:2c:05:aa:8a:fc:33:7a:99:
b1:94:a6:a2:52:ca:4c:24:8c:9b:fb:e4:63:2f:8a:
db:97:f8:a3:34:2b:82:6b:ec:f3:d0:1e:f5:99:76:
9a:2f:af:df:cc:c7:b7:1d:0e:e6:94:ab:8c:16:9a:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1C:4A:E4:9C:37:08:C5:1A:70:68:B4:B0:86:AB:97:F9:16:22:A6
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:45:23:3d:4d:a8:f8:32:4f:47:ff:d6:c3:07:3b:cc:7d:cd:
78:c7:87:11:48:fa:c3:a0:75:e1:f3:64:08:0b:ec:2a:2a:e0:
bd:2f:19:c1:f2:7a:e9:d5:87:6c:97:02:d3:a6:2f:2c:67:9f:
b8:c3:64:ec:cd:53:22:5c:d7:ac:c2:2c:3f:bf:f5:90:e2:01:
27:16:85:c1:9b:34:97:b2:29:da:29:10:11:c8:c6:90:19:3b:
a2:e6:fa:5e:47:11:d6:bd:ee:a0:6d:3f:87:43:0a:0e:7b:4b:
3c:14:c4:46:48:93:1a:36:95:ed:37:da:a6:62:46:c7:9c:83:
2d:88:71:66:b7:fd:0b:d5:60:0e:ba:a5:ee:41:38:60:a9:c4:
10:3f:ed:11:40:c0:52:94:62:0e:d2:ec:ea:cf:4b:c6:62:40:
e1:23:10:2a:ed:10:dc:5a:18:58:20:8b:69:3e:e3:51:21:15:
2a:e8:b5:37:c4:04:89:87:f5:56:08:f3:58:1a:2b:33:d2:73:
06:e4:7f:0f:13:51:6e:ee:50:d1:fe:f3:dd:ca:6c:3a:b0:77:
08:cb:3a:4a:b8:41:25:be:58:18:46:b6:25:8b:c4:0e:11:68:
dc:06:52:da:50:77:8b:12:7e:41:1d:94:20:06:c4:e9:ee:be:
3c:1c:54:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:30:29 2026 by rpki-client