Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
File: r5VJF2-WbToiFBAHkJfIfw4dILE.mft (raw, json)
Hash identifier: m1yXvtLBySRCUVD2nM5BU4L/PkNQe2vVbkARJQqd8kc=
Subject key identifier: 82:01:C8:67:F2:34:65:7F:3C:C9:08:E9:43:B5:A5:BC:41:01:BD:3D
Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1
Certificate serial: 019D37BFFCCEE407647E32DF044BA60CBC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
Manifest number: 0FF1
Signing time: Sun 29 Mar 2026 04:00:22 +0000
Manifest this update: Sun 29 Mar 2026 04:00:22 +0000
Manifest next update: Mon 30 Mar 2026 04:00:22 +0000
Files and hashes: 1: LOQz_syfMI8JZau8ZzzM3cSE-EU.roa (hash: jcxzi0LJJRE166oSQjl3Ya4HtG61eYjSPoLWrIadH1U=)
2: r5VJF2-WbToiFBAHkJfIfw4dILE.crl (hash: EiGVh8isYQyJmvU4XNoZbN850rHJ9m5TGorR6pxacCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:fc:ce:e4:07:64:7e:32:df:04:4b:a6:0c:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1
Validity
Not Before: Mar 29 04:00:22 2026 GMT
Not After : Mar 30 04:00:22 2026 GMT
Subject: CN=8201c867f234657f3cc908e943b5a5bc4101bd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:94:0c:d4:a0:11:5b:04:99:1b:7a:0c:31:
e1:97:45:f2:6a:0d:c8:72:e0:35:59:79:fb:e3:ce:
bb:7d:27:75:ba:88:13:44:5a:ac:65:ac:83:b9:ee:
3d:6f:6f:9a:b7:3a:13:59:78:41:2b:a9:9f:1a:98:
bd:23:6f:5c:78:35:42:e2:24:ec:63:2f:b7:39:1f:
cd:80:aa:85:b1:5b:53:48:56:8d:9e:ce:a3:c5:32:
02:fd:f1:7b:5a:45:6f:43:c0:fe:c6:a5:22:83:13:
60:04:e7:7e:86:6c:10:4f:83:f4:ce:74:1a:6f:07:
84:ea:3c:b4:4e:57:b2:91:88:99:83:99:0d:9a:14:
5e:ee:8e:99:f8:32:13:9d:78:e1:97:b3:3e:7b:76:
ae:5e:ca:9d:05:23:48:59:67:93:ca:f2:39:18:77:
51:ee:75:16:11:1d:9e:57:d5:d1:1d:52:b7:f0:c4:
a2:76:8c:37:92:58:ff:05:9f:fc:20:6d:01:8b:e4:
2d:60:9e:56:04:48:0e:73:7e:ed:ca:2b:a1:94:1c:
d5:80:52:f8:ea:24:fb:d2:9d:ba:d5:53:ac:7f:65:
75:fb:1b:4b:74:3f:18:35:c4:79:14:41:1e:e3:d6:
15:4f:dc:b9:a6:b1:a3:f4:37:cd:a5:98:fd:2b:be:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:01:C8:67:F2:34:65:7F:3C:C9:08:E9:43:B5:A5:BC:41:01:BD:3D
X509v3 Authority Key Identifier:
keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:45:15:e5:c3:f7:c9:76:6d:60:f3:3f:95:7d:92:48:b9:45:
97:79:40:06:89:fd:b7:21:56:26:1a:25:8b:53:4f:56:87:8b:
82:30:9c:e4:2e:18:35:f0:26:6e:58:c0:41:0d:dd:9f:80:c4:
ea:51:5c:b2:fc:5d:53:44:15:86:ef:91:b8:73:7d:ff:11:08:
89:ac:70:ec:26:65:eb:0d:1d:6b:f1:c8:97:7a:bf:5d:5b:08:
be:66:7e:87:e5:c7:0b:06:3e:07:79:01:fc:39:f3:f3:a3:f9:
55:83:e0:21:2e:2c:44:c7:13:6e:9c:b4:67:44:43:1a:d2:4e:
98:6b:51:20:a9:42:29:30:71:8f:28:67:f5:ce:40:0a:25:e4:
ab:1a:ba:b9:57:c4:88:99:ec:39:37:c9:e5:4f:04:4d:1f:d1:
a3:68:9c:8c:68:03:e4:f8:a5:b1:b0:2a:19:19:83:9d:61:f4:
60:a2:04:86:33:0c:f7:ae:af:08:82:57:e7:36:61:ba:38:b7:
53:b6:25:cc:f7:60:43:cb:dc:be:2e:50:b9:3d:29:5e:4c:93:
7f:3c:ab:1d:6d:f1:46:80:cd:a1:49:15:f7:bc:8d:70:49:a9:
01:f0:10:62:17:80:f5:99:1f:a4:18:16:e0:ae:7d:e8:8c:33:
af:e3:ab:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:06 2026 by rpki-client