Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
File: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft (raw, json)
Hash identifier: ESDD3FIFep2QUhkv40bzfm+it5N4WVgY7JeIbGbtdnk=
Subject key identifier: A8:AB:8A:FC:3D:FB:8F:1D:4E:5D:53:6F:0C:A3:E4:E7:3D:99:15:98
Authority key identifier: AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
Certificate issuer: /CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Certificate serial: 01A0B5AD2827C2C489C2BB8695B56DA3FB5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
Manifest number: 073B
Signing time: Fri 18 Sep 2026 18:00:19 +0000
Manifest this update: Fri 18 Sep 2026 18:00:19 +0000
Manifest next update: Sat 19 Sep 2026 18:00:19 +0000
Files and hashes: 1: SW0jIvk1wvk_Jl_m70Mc6YZkuCg.roa (hash: xgcppBoYJknCSghed+wm1HRzdAorIWKU+WyvltEZlPQ=)
2: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl (hash: Dikq4CtcmoWLX+wuoPXVTwDqvAMqMMmfs3oTPnvGEac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:ad:28:27:c2:c4:89:c2:bb:86:95:b5:6d:a3:fb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Validity
Not Before: Sep 18 18:00:19 2026 GMT
Not After : Sep 19 18:00:19 2026 GMT
Subject: CN=a8ab8afc3dfb8f1d4e5d536f0ca3e4e73d991598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9b:06:35:2c:f1:9d:af:0b:01:47:dc:df:9d:
a6:ba:e0:30:5b:61:c4:16:83:b7:b7:0a:7a:a6:c4:
94:a4:05:8c:2d:f9:1b:16:a0:bc:04:7c:34:d1:a5:
66:c6:9e:9d:fb:03:11:90:53:20:7f:31:35:6e:c1:
51:6d:2c:1d:37:84:fe:65:63:ae:7d:de:b8:b5:f7:
3b:69:dc:09:d0:1d:a4:37:e8:d2:5c:84:cc:4b:17:
3d:a9:76:a3:1e:8e:3b:3c:cd:38:4f:ff:dc:65:09:
34:0f:96:41:aa:18:11:d4:c4:80:a3:4b:a3:21:27:
9a:c6:fc:00:68:5b:5d:28:b5:ce:09:98:9e:e9:29:
4e:14:62:d7:cb:c1:c6:11:98:ea:f5:c7:5e:bb:d0:
50:1e:25:d9:a5:b4:69:d8:22:4e:9b:ce:d4:4e:56:
98:71:73:62:d6:b2:89:96:e4:c8:68:d0:88:4b:cd:
85:d5:ac:7f:14:2b:d2:ac:fc:7a:93:26:71:95:c0:
c4:18:66:37:f5:10:64:5e:e7:a0:f4:b5:52:de:9e:
9e:e1:00:e4:96:6f:21:c4:e3:ea:25:ee:7f:7d:d8:
eb:b7:4f:bb:e5:84:9f:0e:4f:19:0b:06:a9:a2:08:
72:e0:aa:5c:e0:f6:c2:c9:ab:34:c1:31:c6:ee:cc:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AB:8A:FC:3D:FB:8F:1D:4E:5D:53:6F:0C:A3:E4:E7:3D:99:15:98
X509v3 Authority Key Identifier:
keyid:AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3f:6b:98:1d:01:0a:29:bc:62:49:88:dd:da:88:7c:2d:85:
fc:12:17:f7:2a:3f:b4:43:c3:d4:08:c0:4e:9c:7b:db:5f:99:
81:be:58:a0:ef:b9:de:c6:31:97:c8:90:71:1d:fa:2d:7a:96:
9a:fc:ad:f5:37:cb:d7:65:61:3e:1c:9f:0b:09:69:9f:f0:34:
3f:a5:95:f6:5b:f0:63:07:89:ef:5f:db:ce:fe:86:c7:64:35:
40:56:c0:90:8e:69:b4:f1:eb:1d:c8:49:ca:19:5e:b6:09:48:
0b:45:0a:72:05:00:f0:2c:21:13:84:6d:bb:23:d7:bd:cd:98:
51:72:bd:07:48:cb:b3:e6:e0:be:b7:d6:fd:46:94:cf:9d:a8:
19:8d:73:d6:64:c2:af:01:e5:f2:34:4a:34:bc:b8:bf:6e:b2:
51:ac:39:2d:10:e2:2f:bc:e2:59:a4:f5:d1:04:2b:3e:40:0b:
cf:5b:1b:5f:89:52:4f:00:e2:9e:49:40:18:59:96:0a:0a:79:
25:cc:20:9f:f6:9c:4f:f8:1b:ad:3e:3f:f0:96:04:1d:23:f1:
70:55:77:b6:b5:a7:a4:93:3a:25:5a:ff:4f:64:b6:de:11:15:
44:1a:9d:fb:f7:6f:52:ad:ce:72:8c:81:10:ae:48:fa:cd:ba:
25:e5:94:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:33:24 2026 by rpki-client