Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
File: f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft (raw, json)
Hash identifier: fI6sjA76FjxKDZJ+loktwX0yEolEKYyffreXPAk0wJQ=
Subject key identifier: 89:21:95:39:A7:1B:5F:97:24:E9:D0:4E:9D:78:CD:0D:43:8A:B9:5C
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial: 019CADFEB5BBA3EC18AAE9F45DBFE63D1E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
Manifest number: 184E
Signing time: Mon 02 Mar 2026 10:01:16 +0000
Manifest this update: Mon 02 Mar 2026 10:01:16 +0000
Manifest next update: Tue 03 Mar 2026 10:01:16 +0000
Files and hashes: 1: 1-JpO8q1qatRpRIjMok1nlLPPJtY.roa (hash: lxSDrjSJfDdxFsFnnvYvxdk4e0Y7x830KJAg7m4hvFQ=)
2: 3kbw1gEBJPgdXB0IaWihDI9SnkY.roa (hash: wc+w33BWiYv9rEBwRELoelpcxbBZ5Kq+Pp0M0nU7gkg=)
3: AkISYLOC_fnGrIUjLvM1LtDRQ5k.roa (hash: SsHVMDv4qWTRMiOyQPgpmacaVt+8MOyUS0XN6APKH7k=)
4: f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl (hash: HkCU4tLRsXVADavj4H8vfpvz4siQuAL7I9vMo0SaauY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:b5:bb:a3:ec:18:aa:e9:f4:5d:bf:e6:3d:1e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Validity
Not Before: Mar 2 10:01:16 2026 GMT
Not After : Mar 3 10:01:16 2026 GMT
Subject: CN=89219539a71b5f9724e9d04e9d78cd0d438ab95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:58:22:49:a2:0c:d2:68:c6:8d:f6:f0:f3:
c4:5c:5a:f5:e2:bc:85:50:97:12:4b:d7:e5:61:77:
9b:ee:d9:b0:e1:2d:96:38:63:0b:83:67:c7:6c:9d:
8d:d2:a9:0b:66:33:88:50:85:fd:98:b2:ae:f4:22:
94:7b:21:a9:aa:e4:ae:6e:b4:4f:2e:56:f8:c2:3d:
89:3f:3b:c3:94:16:46:99:9a:c4:cf:d4:e8:7d:63:
07:73:1e:58:92:21:cb:fd:ed:a2:2a:87:2e:9b:c5:
52:9e:bc:f1:6a:c4:33:b0:30:69:c3:7a:41:20:11:
0b:55:3f:91:02:3c:c2:3a:96:26:61:b3:92:a8:6c:
13:ba:f6:89:9e:5f:a1:9e:46:42:fe:c0:51:6e:e3:
2e:22:91:ac:9d:16:5c:33:1f:66:bd:58:0e:15:1e:
b3:16:88:69:bc:a1:dd:3b:a7:a4:51:d5:96:ec:21:
c1:cf:c3:a9:8c:d5:be:d1:f5:6a:92:b0:86:ed:6c:
c4:12:92:62:c5:2b:43:88:f8:82:15:89:85:98:2b:
83:9a:86:08:ec:d5:b1:b7:19:06:cc:21:f8:32:c3:
74:72:83:f1:3e:c9:6c:44:34:4a:5f:99:db:d3:2c:
44:1f:2d:a9:ba:ff:04:e8:f9:f3:98:95:c5:4f:dd:
c2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:21:95:39:A7:1B:5F:97:24:E9:D0:4E:9D:78:CD:0D:43:8A:B9:5C
X509v3 Authority Key Identifier:
keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bd:45:eb:2a:5c:1a:99:ac:7a:db:9e:9d:17:cf:55:14:c2:
7a:85:c2:ad:b7:23:fd:db:f6:c9:ef:ff:14:48:d4:fa:a8:41:
fa:78:69:e6:45:bb:43:0c:c8:86:be:31:ee:f8:ae:f2:d8:bd:
01:c1:c2:62:b9:01:bc:09:11:d3:0b:93:a1:5a:16:05:3a:ff:
38:83:66:88:09:ab:c2:81:3c:fa:80:14:b9:d4:74:34:4f:a9:
88:ed:f4:4a:2c:61:db:f9:07:2a:5e:c9:9a:48:29:34:21:62:
94:94:98:4d:df:30:45:40:e6:a9:82:71:03:ca:f8:bf:93:85:
9e:9e:08:99:38:ce:c2:5a:e0:64:b3:e9:8a:4e:c6:0b:6f:43:
80:bb:5d:e7:30:52:e0:0b:2b:59:71:38:d3:84:bd:01:4b:02:
39:f9:4a:ed:1a:d8:9f:ca:7f:0f:64:3c:9d:92:1d:8a:e2:c6:
32:00:05:2b:64:00:19:a0:36:07:99:3f:20:49:95:e6:a2:da:
09:e6:60:fc:eb:1d:ee:fc:34:d4:68:df:77:07:55:f6:16:fd:
a3:01:f1:c3:b2:f5:48:ac:48:67:91:0e:9b:1f:c3:91:90:62:
8f:fa:97:bb:8c:81:80:a2:34:03:92:f9:ad:14:55:43:aa:c6:
a1:99:7b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:21 2026 by rpki-client