Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier: 1tfW02ld5Ni1lppNcxoDSJ059Z2myOQOcaFzeUDChJc=
Subject key identifier: 95:05:4A:4B:FB:BB:93:FF:A2:96:6F:1E:AA:45:0D:D0:41:1F:8C:3E
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 01A1769589979FCDEEC2F2E3A36AFFCA2577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number: 1ACE
Signing time: Mon 26 Oct 2026 05:01:13 +0000
Manifest this update: Mon 26 Oct 2026 05:01:13 +0000
Manifest next update: Tue 27 Oct 2026 05:01:13 +0000
Files and hashes: 1: 7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa (hash: rL2+XjzMdSu0K1H05+EkUEOgBJlzmxMsT4JTGcTaBGg=)
2: MIMB6hj-pbhZmAS4NaP7XqTgm34.roa (hash: o3IJJeBy3jpC50UkL8Zt+4vWy+FDSWr1Y6a3t5k0o+s=)
3: cLhMOaHsTiCbjcGDDECKr1VTwQY.roa (hash: Iqsn8kMpNh5UcFT7O/wgulPUF+XCyAq288IMTgURFHM=)
4: fVw_ICDNU6Bi8MAJYhmrvlrXmRs.roa (hash: c+yT9ByZZB/rH9Ty28IEJWoy1m6iGPvLwsGkGU/4scM=)
5: k0BFiQAl7Q4-lOH-wpVIf6F16RE.roa (hash: LWb7rK2buJgbYTwsimy6ORw0odV4aXlPrizohyk5THc=)
6: keDaDU-vCcS6klKiWWvwuQqa3NE.roa (hash: FwrW61c/rLAqQnYEyfpdGoA2bVf4TFLR0gcdIXQaNqA=)
7: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: 5BBn5wXnjyYP+S3MHXr5circnQYWOp3w5v/tdLn2fFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:95:89:97:9f:cd:ee:c2:f2:e3:a3:6a:ff:ca:25:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Oct 26 05:01:13 2026 GMT
Not After : Oct 27 05:01:13 2026 GMT
Subject: CN=95054a4bfbbb93ffa2966f1eaa450dd0411f8c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:c5:82:7c:d4:c0:f3:7e:88:cf:d6:7f:01:
37:3c:c9:8d:df:5f:5c:59:c4:7d:fc:d4:10:de:f8:
50:88:5a:56:81:56:26:5d:24:db:16:ab:f2:58:9a:
99:25:e3:bb:10:1c:19:cf:14:eb:93:7e:6b:c7:7e:
b4:d8:09:2e:7c:dc:7d:48:97:ec:f7:a4:32:74:b4:
c7:b0:8d:f2:b5:95:b4:28:1d:0d:25:a4:7b:ec:6e:
44:43:c3:8d:94:f3:9b:bf:64:e4:ed:8e:a1:a4:59:
4f:bd:7b:cd:cc:28:04:d1:57:66:52:bb:6b:c4:e5:
26:a6:79:ab:24:57:65:e1:a7:5b:5e:ad:a6:f3:95:
c7:dd:b2:19:72:8f:80:91:3f:e8:33:72:c5:d4:a0:
66:a1:d6:1e:28:6c:47:3f:8e:69:41:8e:9e:1a:ef:
93:f4:a7:d5:71:94:52:04:3e:95:9d:11:2d:38:1d:
d6:f8:ac:5b:8f:87:49:d7:d3:04:07:50:66:09:3d:
bc:1b:d3:49:21:a2:7a:65:33:01:5d:5e:cd:77:98:
d1:4e:ae:30:c1:db:49:23:ef:dc:f4:44:54:12:d8:
5b:bb:7d:e1:01:19:00:2c:0d:12:ff:9d:f0:a2:60:
72:96:f9:3a:7d:01:fe:3b:af:e0:09:95:61:7e:04:
32:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:05:4A:4B:FB:BB:93:FF:A2:96:6F:1E:AA:45:0D:D0:41:1F:8C:3E
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d6:99:5e:8f:f7:4f:9a:a1:97:ca:23:40:ad:92:f5:8f:af:
dd:77:be:5f:7e:38:57:ac:a3:8a:ab:70:d6:a5:74:39:e3:94:
07:3c:fd:62:86:42:16:83:d2:d2:15:6c:76:ff:50:2d:24:e7:
44:f1:cc:f5:6b:f4:1d:9a:36:ac:41:8a:d4:d8:20:ab:a6:48:
25:c7:b5:a1:93:b9:6f:8e:9c:92:79:81:53:b4:f0:9a:d8:24:
16:4a:27:97:03:60:21:9c:c0:cd:56:7d:97:a7:52:a4:93:8a:
d9:50:3e:1e:af:f7:3e:a9:5d:3d:41:3c:bb:8c:20:0e:1d:37:
98:d6:e3:02:45:ad:cd:2f:d3:6a:c4:95:1e:a5:bf:09:58:41:
06:a8:fa:bf:05:b2:d4:d1:ee:ec:cf:23:79:c5:98:2d:d7:af:
6a:da:f2:d4:83:8a:3a:3d:46:55:82:d2:d8:2b:c4:a1:d5:0a:
97:05:3e:00:0a:9c:24:bd:40:81:a3:7f:4f:36:e9:42:0e:df:
28:e1:52:0f:88:05:0a:41:c7:55:dc:a4:67:c4:e3:6b:00:c1:
80:5a:e8:d4:da:72:98:c2:78:95:5b:51:ed:d9:96:5a:03:2c:
75:ec:51:e5:74:c0:ca:53:58:9c:0c:35:d3:dc:75:61:64:2b:
70:85:73:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:21:31 2026 by rpki-client