Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
File: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft (raw, json)
Hash identifier: crf3z5VD2gHz6t+kXo4ZJZVb/1lQiAiKWyivJhsBKXs=
Subject key identifier: 7E:0B:6B:DE:9C:8E:7C:C6:B5:45:B7:84:2E:DD:9E:21:DC:32:88:92
Authority key identifier: AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
Certificate issuer: /CN=af59d35331c9efe33c9530769325ae8ef550ffda
Certificate serial: 019D389C63D432A7BC117E312E952AC5C685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
Manifest number: 16C4
Signing time: Sun 29 Mar 2026 08:01:06 +0000
Manifest this update: Sun 29 Mar 2026 08:01:06 +0000
Manifest next update: Mon 30 Mar 2026 08:01:06 +0000
Files and hashes: 1: 0ykmxKOOl5dHUUQwXHBEx0WT__8.roa (hash: JpgTwOTaW0S87I0vPC5sLuBOPNryUr/2k4talsuIf+k=)
2: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl (hash: OA7vXtMhbYvMFIqtTP+xhw6sdhWr1fiCafK80H9RzcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:63:d4:32:a7:bc:11:7e:31:2e:95:2a:c5:c6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af59d35331c9efe33c9530769325ae8ef550ffda
Validity
Not Before: Mar 29 08:01:06 2026 GMT
Not After : Mar 30 08:01:06 2026 GMT
Subject: CN=7e0b6bde9c8e7cc6b545b7842edd9e21dc328892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:c7:c1:c4:9e:ec:f9:e8:a5:36:c0:2f:91:
ff:0f:d7:9a:38:fb:b1:4c:2b:ff:15:2d:b3:fa:cf:
a9:9b:df:8d:64:30:a7:68:5f:bb:09:5e:07:5a:a0:
95:13:f3:03:b8:c2:84:31:7d:14:ac:f0:0f:0a:1f:
f8:24:65:d8:3f:70:3a:65:d5:be:7f:a1:8b:48:6b:
eb:28:80:66:1a:5d:57:b0:74:1b:4a:7e:dc:7b:1d:
8f:fb:bb:49:77:04:48:3b:81:cc:e3:70:ca:49:5a:
0a:0f:43:1c:47:3d:16:01:85:f5:ec:22:e9:f3:23:
9f:d4:ab:b6:bc:7e:f1:7d:72:6b:81:9b:4a:a7:ec:
63:7e:7a:c1:c1:fc:bb:8b:6e:f0:1b:01:c1:22:14:
ed:55:17:68:24:19:9e:4a:18:05:b4:fe:f7:73:05:
3f:40:fa:be:3a:b1:e2:fd:24:9f:c7:08:00:e7:b0:
1c:6f:ab:43:37:ac:b3:45:83:fc:a7:7f:cb:c4:be:
af:2d:fe:16:49:7a:f4:d3:34:a6:6e:24:14:5b:36:
5a:bb:78:a9:a1:4d:ed:0b:31:7c:4d:26:bf:ee:54:
f0:9c:ca:f7:96:d7:2b:68:ca:82:e0:7c:c6:7b:dd:
17:be:be:d7:8d:a6:50:9d:20:28:fe:4a:57:ad:64:
e6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0B:6B:DE:9C:8E:7C:C6:B5:45:B7:84:2E:DD:9E:21:DC:32:88:92
X509v3 Authority Key Identifier:
keyid:AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:98:ca:8b:9a:72:2d:8e:b7:b2:84:e1:12:0b:9e:7a:58:02:
4a:46:27:2f:aa:b3:b1:bc:06:9f:5a:4c:3f:24:b5:6d:fd:43:
46:b7:e3:4f:61:b3:42:34:67:a5:aa:bf:ea:4a:43:2d:88:5c:
c6:9f:d0:0b:cf:b9:e5:ff:49:e6:5c:5a:fe:a9:c5:d2:36:b5:
0f:eb:ad:04:23:89:42:01:18:fb:e8:01:ef:76:e3:13:2a:eb:
39:e3:ae:fd:96:2a:0b:a7:bd:98:f9:1c:a2:29:91:d0:19:7b:
47:1b:1e:12:c9:40:d3:70:d0:9f:65:ae:86:1e:6a:dc:b2:6c:
a3:8f:81:6b:6e:d4:9f:28:7b:8c:72:e2:e9:4b:20:8c:12:5b:
dc:ab:1a:52:e5:73:f4:9c:a6:30:76:3a:95:71:77:eb:31:57:
c6:6c:19:82:91:57:12:50:f0:29:de:17:c8:a6:64:2d:8c:f5:
48:7e:e1:d1:98:ac:24:a8:d5:49:ab:bf:d9:22:91:b5:17:28:
ac:e7:e1:64:d7:83:8a:9f:0e:d2:02:e9:a5:05:3b:8b:79:6a:
f8:49:5a:29:aa:9c:a8:31:6c:8a:06:f1:88:18:ba:b3:0f:c4:
63:31:06:8c:47:59:a3:d9:82:d4:2c:25:64:7f:5a:99:9f:7e:
63:f6:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:30 2026 by rpki-client