Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File: r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier: BO7fQq/PDUPuU/TEFfBN5MbTOQGERIOpmpRlPLR4fRo=
Subject key identifier: B6:7C:48:1F:A0:A3:E2:6B:E4:81:1C:C8:50:70:11:DB:B6:1D:F0:20
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 019DEC3672DABA1FDDDD5685B0882ED5379B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number: 10E5
Signing time: Sun 03 May 2026 05:01:24 +0000
Manifest this update: Sun 03 May 2026 05:01:24 +0000
Manifest next update: Mon 04 May 2026 05:01:24 +0000
Files and hashes: 1: 7QHZaPi6zF_9KFLPmbyoF3ju4Js.roa (hash: uGtlhWfGFyzTsoRAgtfyrZfPlPC+L8/+nC/qurbI1KA=)
2: _SO3ZcEL-NxbVo2zGUmXJKashh4.roa (hash: DQyiiOHyh7kvQrHckqHxzZTNIDfF/xOylq73UWhMnm0=)
3: lyuKP6xRaaH3-14haYmNo8uGHO4.roa (hash: ZW7gfgcc5WNCnRZKczxY87VtQK4F6adXJdrsgRc8psU=)
4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: HUe9sKzUWRLg8TZ9f+J5X8k/QQMO9vRppAi0pNXx9kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:36:72:da:ba:1f:dd:dd:56:85:b0:88:2e:d5:37:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: May 3 05:01:24 2026 GMT
Not After : May 4 05:01:24 2026 GMT
Subject: CN=b67c481fa0a3e26be4811cc8507011dbb61df020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:78:2b:1f:26:a5:1d:db:0c:ef:6e:86:86:
36:d2:48:27:e5:f3:c0:cb:fa:cf:e5:75:99:59:36:
32:5c:51:c6:3e:72:8b:aa:b3:c5:0b:d2:af:9d:b1:
7b:9f:76:db:6c:48:7d:e0:40:fa:5b:07:6c:f6:24:
b4:81:46:d5:39:32:33:b0:ca:d2:a1:35:7f:cd:cc:
f2:38:8c:11:32:ef:b6:15:99:a0:c9:27:b5:9e:f1:
1f:fa:94:99:43:0b:71:5b:f3:a8:79:a8:34:00:79:
94:67:f5:79:08:ab:d4:03:66:f3:92:ae:d1:5c:58:
13:88:37:63:5f:f1:5a:ab:b6:cd:ac:18:5a:c0:c7:
df:17:2f:34:44:e8:5d:4f:2b:96:ca:3a:11:77:13:
68:6b:8e:bd:62:da:70:2b:40:be:bd:16:ee:c7:83:
bc:f9:8a:46:87:6e:4b:35:73:43:f0:aa:f4:e1:7f:
58:97:a9:42:b9:63:aa:7e:19:06:a1:89:35:fc:87:
73:2e:b7:0b:2c:19:7b:f0:12:7c:4f:0c:22:6a:6f:
b6:21:a0:c5:7f:6b:9b:15:25:95:65:ba:f8:a7:12:
50:e6:cc:c9:09:26:af:27:a1:59:f2:91:64:0c:70:
a4:fc:4b:a9:c6:7d:d8:3b:df:9a:7e:4b:78:63:62:
c4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7C:48:1F:A0:A3:E2:6B:E4:81:1C:C8:50:70:11:DB:B6:1D:F0:20
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:05:49:b3:15:84:78:9a:49:fc:11:e6:55:e5:42:58:9e:65:
31:8b:6a:a3:77:2d:f9:e8:2b:1a:57:87:5d:55:7a:06:f2:ed:
8f:43:fa:87:74:a6:95:f6:3a:88:cb:e1:c4:be:bb:a1:b7:0b:
c6:7a:5e:fe:07:ea:12:1a:b5:af:1d:7d:fd:6f:0a:b9:e6:22:
1c:2a:b1:27:53:50:d0:e5:91:bc:31:19:b2:ca:45:b8:43:0d:
13:54:ba:4b:01:72:b5:2d:98:a6:79:34:1b:bc:0c:0f:38:e1:
39:ad:38:e8:e0:d8:04:18:42:27:45:b7:33:48:db:4b:d2:82:
b0:7c:e1:7c:8c:1c:a0:7a:57:6f:28:9c:52:73:0d:67:23:c1:
9e:72:c7:56:bb:1b:6c:11:1e:ad:1a:42:49:32:c4:3e:4c:6b:
34:36:cf:f7:27:54:e8:40:ff:a0:39:6c:c2:38:cc:40:4b:3a:
ef:f4:3a:8e:3a:25:89:21:e4:b3:95:27:5b:22:65:7d:e9:3a:
e7:c6:48:ed:76:af:df:16:1b:2c:ac:3a:0b:98:53:f4:b2:d6:
2a:58:eb:20:60:5f:b8:a8:c3:a0:77:eb:cc:b1:ec:94:d6:5b:
fb:e7:04:ff:c3:be:18:6d:60:82:51:c5:58:9c:78:d9:c4:00:
d6:74:1a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:16:22 2026 by rpki-client