Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File: r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier: ieoiEbINmqjlqHHpRt5IZ/t6P5egGPFrt+TQn19yUuU=
Subject key identifier: E3:41:C2:78:58:A8:0F:C2:7B:D3:B8:4E:2C:BE:6F:13:06:F2:0D:CA
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 019EFA941CDEA554480A979FA4ACA64AEACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number: 1171
Signing time: Wed 24 Jun 2026 17:01:11 +0000
Manifest this update: Wed 24 Jun 2026 17:01:11 +0000
Manifest next update: Thu 25 Jun 2026 17:01:11 +0000
Files and hashes: 1: 7QHZaPi6zF_9KFLPmbyoF3ju4Js.roa (hash: uGtlhWfGFyzTsoRAgtfyrZfPlPC+L8/+nC/qurbI1KA=)
2: _SO3ZcEL-NxbVo2zGUmXJKashh4.roa (hash: DQyiiOHyh7kvQrHckqHxzZTNIDfF/xOylq73UWhMnm0=)
3: lyuKP6xRaaH3-14haYmNo8uGHO4.roa (hash: ZW7gfgcc5WNCnRZKczxY87VtQK4F6adXJdrsgRc8psU=)
4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: bjsXUuW/P5qekGRt5C6T4OnUWimpZnUrex+UElR/GDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:94:1c:de:a5:54:48:0a:97:9f:a4:ac:a6:4a:ea:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Jun 24 17:01:11 2026 GMT
Not After : Jun 25 17:01:11 2026 GMT
Subject: CN=e341c27858a80fc27bd3b84e2cbe6f1306f20dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:fe:89:91:69:f6:25:f1:02:0d:24:f1:b9:
ce:e0:fd:b6:28:7b:9b:d8:23:7d:2a:cc:16:9f:5f:
1e:39:64:da:90:9d:98:c3:d9:16:47:e7:82:7f:1e:
c2:19:41:ba:bf:4e:f3:72:73:0f:0d:2c:3c:47:96:
c8:d8:99:71:3d:53:fe:ec:42:89:06:ca:b4:48:bf:
64:00:c0:e2:bb:35:19:18:dc:f0:15:d3:0d:b0:dc:
90:e2:57:85:63:4b:79:fb:56:4f:b3:73:92:cd:0a:
f5:d3:d1:dc:13:63:89:c8:7a:be:82:ce:ba:32:a6:
91:05:f4:39:a2:e7:bd:0b:e5:b1:18:57:08:3f:64:
83:43:79:a9:76:c7:7a:a4:0d:31:fa:eb:44:1b:41:
91:90:cd:da:5f:af:56:bd:b5:df:fb:a1:e0:ac:d0:
d1:b6:96:4e:d5:55:0d:ff:c4:47:7c:7e:2b:a6:f3:
43:b3:1e:18:54:0e:7c:19:91:94:6c:87:7f:95:73:
f9:b9:29:df:f7:69:e1:da:3d:f4:3b:db:1a:49:b3:
cd:94:ec:33:23:f0:ba:cb:d0:2d:96:a7:72:48:91:
1c:db:a3:79:b6:3a:dc:59:05:cb:6a:66:23:e5:f0:
43:ed:64:0b:55:46:37:46:2e:4f:88:7f:87:09:9f:
8a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:41:C2:78:58:A8:0F:C2:7B:D3:B8:4E:2C:BE:6F:13:06:F2:0D:CA
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ec:32:95:fa:c4:9f:46:f2:72:da:f6:0e:86:f7:87:0f:7c:
47:56:c9:39:f5:61:7f:e5:b1:e0:a9:ff:ce:9e:75:a2:c9:75:
db:27:c2:0c:54:87:74:12:a2:b0:0f:19:5b:29:06:52:33:f4:
43:7e:05:b7:19:7c:82:58:9f:6d:d0:2d:2f:5f:fa:97:80:12:
68:e4:67:b6:3e:67:c2:79:90:2c:ed:a9:5b:65:f8:af:33:48:
ed:31:5f:15:12:86:32:81:b7:c5:30:da:2a:d2:b6:9e:1d:f9:
d4:5d:f5:cb:cf:04:76:22:94:37:57:be:d8:13:87:06:74:c9:
89:8f:ac:91:b2:2c:e0:49:5a:32:58:df:7a:0a:d9:1f:b7:6c:
52:fa:6b:21:61:29:ea:61:ac:b1:2c:c2:a4:72:08:ac:54:38:
9d:99:42:f6:80:d4:e1:39:a8:46:97:64:59:43:ed:bb:a4:25:
9a:9f:c4:c7:65:b7:9c:7e:8c:2e:27:3d:3e:54:ae:1a:56:f1:
38:19:c5:b7:73:39:bf:bd:cf:30:4b:ed:58:09:7f:dd:b1:d6:
49:01:d0:1d:81:b8:20:59:41:23:82:5b:f8:3d:0b:0c:83:0a:
84:39:e1:a0:b5:83:07:84:35:63:a2:98:d1:7b:8c:be:85:c1:
2b:aa:d0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:22:42 2026 by rpki-client