Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
File: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft (raw, json)
Hash identifier: pWdFMpgK0Jd+NglkCdlllrozGk3zYRmvFf7R52RzzDA=
Subject key identifier: F8:4E:7C:9C:F3:5D:B7:9A:CC:41:09:B9:E8:6D:1B:ED:C5:DA:59:52
Authority key identifier: AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
Certificate issuer: /CN=af59d35331c9efe33c9530769325ae8ef550ffda
Certificate serial: 019D273AD541AAFB0003DA61B7BD97E2AD76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
Manifest number: 16BB
Signing time: Wed 25 Mar 2026 23:01:00 +0000
Manifest this update: Wed 25 Mar 2026 23:01:00 +0000
Manifest next update: Thu 26 Mar 2026 23:01:00 +0000
Files and hashes: 1: 0ykmxKOOl5dHUUQwXHBEx0WT__8.roa (hash: JpgTwOTaW0S87I0vPC5sLuBOPNryUr/2k4talsuIf+k=)
2: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl (hash: 29LwuIemtL3uzxZ5UzdIURGSIWNNwc3BuDlBTIr+G24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d5:41:aa:fb:00:03:da:61:b7:bd:97:e2:ad:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af59d35331c9efe33c9530769325ae8ef550ffda
Validity
Not Before: Mar 25 23:01:00 2026 GMT
Not After : Mar 26 23:01:00 2026 GMT
Subject: CN=f84e7c9cf35db79acc4109b9e86d1bedc5da5952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a1:cb:50:8d:03:36:4e:c6:68:00:46:b8:c7:
4d:23:93:bf:72:a3:86:e6:c6:5c:98:95:21:2a:77:
72:8b:21:d5:32:0f:90:9d:26:ca:fd:4d:32:f1:86:
ca:50:34:14:2a:4e:25:84:5b:7a:27:92:0b:d9:d4:
1d:95:4f:e2:36:f0:06:15:54:4e:74:8c:3c:56:8f:
8c:cf:3c:86:ac:f4:8a:cc:ea:ab:57:78:ca:ce:11:
2c:1c:ec:84:d5:1d:8e:fe:b5:20:05:af:ad:10:2c:
fb:1b:a6:c4:df:ca:cf:1a:6a:ab:d2:11:5e:98:b8:
f8:62:1c:97:84:6c:7a:db:e0:89:1c:ce:66:84:f4:
6f:92:49:48:42:57:41:51:fd:3a:9f:92:c7:fe:8f:
3a:7b:9f:fa:2d:54:8c:ae:6f:cd:4f:37:9d:ae:f8:
18:89:96:c0:38:b4:91:08:bf:f3:44:55:28:3a:7b:
15:f1:d6:e4:0a:21:03:a9:6e:86:9c:14:50:c5:c8:
21:df:00:6a:ba:7d:28:ef:ee:c3:1f:a2:50:aa:6c:
de:61:13:7c:0e:f5:bc:52:9e:8f:88:d4:96:64:e8:
3b:a4:a4:bb:6a:6b:3e:e0:9a:f2:cd:d9:1c:6c:f8:
b1:f9:8b:cf:67:d5:c3:1f:a3:86:45:c9:c3:50:79:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4E:7C:9C:F3:5D:B7:9A:CC:41:09:B9:E8:6D:1B:ED:C5:DA:59:52
X509v3 Authority Key Identifier:
keyid:AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a8:fd:6d:90:c7:de:96:a5:84:e6:6a:f5:91:8f:1b:bb:c9:
b7:b0:77:cf:a6:d9:d8:d8:0e:5e:71:1b:81:bd:77:24:b3:f7:
25:e8:18:5f:8d:b7:74:b5:cc:0b:14:41:09:4d:57:54:f6:61:
f8:05:74:34:5d:7a:54:e2:7f:f9:e1:72:87:04:da:44:20:6a:
e5:e4:7c:ca:ed:59:67:35:59:69:fd:fe:3d:95:1f:82:f4:e3:
a4:ce:8b:93:f4:c1:f3:17:3d:6b:4b:33:72:02:5a:5c:f6:fb:
86:83:45:b7:7a:3f:d8:ff:a8:cc:d6:33:6c:80:c4:05:68:70:
29:81:69:5a:37:59:f6:38:2b:2d:8f:35:c3:df:93:db:8e:62:
36:ae:0f:c0:51:6f:30:71:36:2e:d7:48:03:db:d1:2d:2d:02:
79:78:c4:8a:93:14:62:86:7c:8c:43:50:00:96:c8:04:bb:5c:
86:39:fa:e3:96:3b:6d:15:91:72:04:16:21:19:6a:49:fb:0f:
30:98:11:12:5c:f6:19:5a:d5:5d:b5:8f:02:8f:b1:21:c5:a5:
b7:da:a1:13:b9:06:69:0f:23:56:14:09:f1:a9:f5:5e:c0:8a:
13:a5:56:97:c4:e5:bd:c8:4c:e1:a1:d8:23:5a:4b:3e:0f:a4:
a1:3d:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:47 2026 by rpki-client