Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier: 6OsbgYUTgI0ppMy10WkFAn7igBqplIHaBSda9vKraqw=
Subject key identifier: F3:A3:12:C6:F6:5E:4E:9B:D4:E4:48:9D:D2:94:D4:6C:87:54:6A:48
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 019EB7A0B1661E9D99F87D108C543F3E2153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number: 1961
Signing time: Thu 11 Jun 2026 17:00:22 +0000
Manifest this update: Thu 11 Jun 2026 17:00:22 +0000
Manifest next update: Fri 12 Jun 2026 17:00:22 +0000
Files and hashes: 1: 7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa (hash: rL2+XjzMdSu0K1H05+EkUEOgBJlzmxMsT4JTGcTaBGg=)
2: B6r7tlhytkHdJheo1dsqfbry4Og.roa (hash: kKHkZjflWwkN797C4PStA913gNP9MCPk6MZE/gB/7Ew=)
3: KDXG6Q4UesZZrscbvutRtXUjZ04.roa (hash: glnL5SMYp1iujQsRgxaeozZQtOiC0uKkyBB33wcXcDg=)
4: MIMB6hj-pbhZmAS4NaP7XqTgm34.roa (hash: o3IJJeBy3jpC50UkL8Zt+4vWy+FDSWr1Y6a3t5k0o+s=)
5: fVw_ICDNU6Bi8MAJYhmrvlrXmRs.roa (hash: c+yT9ByZZB/rH9Ty28IEJWoy1m6iGPvLwsGkGU/4scM=)
6: k0BFiQAl7Q4-lOH-wpVIf6F16RE.roa (hash: LWb7rK2buJgbYTwsimy6ORw0odV4aXlPrizohyk5THc=)
7: keDaDU-vCcS6klKiWWvwuQqa3NE.roa (hash: FwrW61c/rLAqQnYEyfpdGoA2bVf4TFLR0gcdIXQaNqA=)
8: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: HDla5+4XgnCV0L6IsgPppvPpxc8+eW/ZrKfDw/gvEvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:b1:66:1e:9d:99:f8:7d:10:8c:54:3f:3e:21:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Jun 11 17:00:22 2026 GMT
Not After : Jun 12 17:00:22 2026 GMT
Subject: CN=f3a312c6f65e4e9bd4e4489dd294d46c87546a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:85:86:a8:81:4e:7f:40:5f:e4:bf:32:af:8a:
35:28:22:24:a7:c5:ce:47:04:1c:71:e4:de:c4:b8:
b1:5f:70:52:21:b3:b1:1d:05:f8:e1:b0:f8:25:1f:
05:59:4e:6f:66:66:2e:f5:60:4a:c0:d5:be:ef:60:
22:66:4d:6a:cb:71:21:99:d8:3f:53:07:f4:09:24:
ba:6e:b4:b7:e1:2a:7d:ec:d8:56:7b:3c:f7:27:94:
f2:5c:c8:c4:5b:b5:8d:42:48:1d:36:80:f0:d3:04:
f0:ab:97:e5:49:e7:ef:d7:ec:a1:fe:14:84:1d:66:
19:2f:9e:9b:49:e0:7b:2b:71:a1:a3:24:20:11:5a:
cc:de:32:15:15:34:54:9f:63:8b:16:b1:2b:8b:b4:
8f:1b:d7:75:e0:50:69:49:d3:c4:37:41:e0:a8:43:
01:2f:fc:e6:b6:d6:62:8f:32:71:35:18:70:15:04:
a4:0f:2e:ba:9d:9b:2a:09:db:65:48:ba:87:d3:42:
f4:ee:a1:4a:e1:ed:0d:71:68:94:ab:79:d4:d8:87:
cf:5b:df:5a:d4:6c:59:cc:78:f3:8f:f0:fe:14:a8:
ab:90:0b:88:52:8f:47:59:cc:e1:6f:4a:1c:e1:13:
54:4a:24:0a:94:d3:a5:3b:7a:5c:ea:68:b9:e4:b0:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A3:12:C6:F6:5E:4E:9B:D4:E4:48:9D:D2:94:D4:6C:87:54:6A:48
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:68:23:25:a5:8f:c3:79:13:ba:9b:c7:26:f7:48:9e:8c:d6:
d4:6f:78:e3:1b:48:4f:54:65:9f:1c:5e:5b:ea:99:74:a7:f4:
ac:45:4e:5b:a2:0e:09:a0:97:e1:9a:53:e5:07:bf:29:3c:0c:
3b:66:b7:1f:b0:45:4d:0f:36:ef:4c:52:72:50:48:0f:2b:b2:
c8:04:02:c8:9b:21:e2:cf:50:5b:33:02:e5:bb:5b:35:50:ec:
d8:30:e8:3f:2d:b1:09:dd:e1:b3:05:80:ad:31:97:a0:99:56:
d8:e6:02:d1:83:a2:f1:22:48:ee:55:00:77:3d:ff:9c:4a:b8:
6e:9c:bd:bb:5b:8b:c3:eb:42:5c:e6:c4:41:8d:1e:73:92:d0:
48:c1:1b:92:61:e5:0a:88:1a:d6:0a:db:26:3d:b1:90:01:96:
14:1a:8b:3a:de:5c:0c:22:6a:05:10:73:0b:d6:bd:48:c9:6f:
38:c7:d1:7f:7f:ad:47:1e:f3:6f:be:a9:9f:ca:13:f4:98:19:
23:16:a9:f2:fc:68:0a:39:7a:4e:fc:99:5d:b8:00:8d:1f:08:
a6:b4:cd:7b:11:11:ab:7c:7f:05:1b:51:87:b4:30:43:52:0e:
95:bf:a0:f7:f7:09:c4:f8:d7:cc:62:08:bd:e1:a4:46:74:46:
db:47:16:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:01:13 2026 by rpki-client