Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
File: f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft (raw, json)
Hash identifier: 3KI99ceUPONK21RVvKUd6gSGvZcKUrAI5GE7MCKI+vQ=
Subject key identifier: BF:EF:3E:1B:56:3C:95:BC:19:F8:11:E9:72:B8:07:4D:5E:83:21:88
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial: 019CAFECE8E0837636CA47697564599C97D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
Manifest number: 184F
Signing time: Mon 02 Mar 2026 19:01:04 +0000
Manifest this update: Mon 02 Mar 2026 19:01:04 +0000
Manifest next update: Tue 03 Mar 2026 19:01:04 +0000
Files and hashes: 1: 1-JpO8q1qatRpRIjMok1nlLPPJtY.roa (hash: lxSDrjSJfDdxFsFnnvYvxdk4e0Y7x830KJAg7m4hvFQ=)
2: 3kbw1gEBJPgdXB0IaWihDI9SnkY.roa (hash: wc+w33BWiYv9rEBwRELoelpcxbBZ5Kq+Pp0M0nU7gkg=)
3: AkISYLOC_fnGrIUjLvM1LtDRQ5k.roa (hash: SsHVMDv4qWTRMiOyQPgpmacaVt+8MOyUS0XN6APKH7k=)
4: f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl (hash: T2iEvfHJ40uRsAaBKtQiX3siw5gfTtp6hO0B2L1/ly4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:e8:e0:83:76:36:ca:47:69:75:64:59:9c:97:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Validity
Not Before: Mar 2 19:01:04 2026 GMT
Not After : Mar 3 19:01:04 2026 GMT
Subject: CN=bfef3e1b563c95bc19f811e972b8074d5e832188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:38:5a:ac:4d:3f:c9:f7:d3:2f:5d:58:36:
fb:fa:c6:14:ca:5e:e5:b0:62:37:b4:ca:82:01:1a:
81:fe:6c:a6:9d:ca:10:0b:59:c8:7f:90:51:de:aa:
43:98:a6:d2:7b:e1:06:3e:ee:b3:09:1d:d0:17:04:
c1:dd:93:30:73:cb:75:c3:9a:21:e4:2e:f9:00:0a:
8a:97:48:68:b9:14:b8:0d:b7:f8:33:43:43:0f:61:
70:2d:7d:85:b4:6b:1b:cb:e0:b2:06:1b:84:ec:73:
4e:bd:9b:7e:6c:a6:58:cb:9d:68:50:fa:2b:bc:95:
db:fa:33:06:5e:f4:a8:1e:09:16:61:7c:d1:23:4d:
5d:6c:cd:b6:17:27:70:46:1a:50:e6:a8:42:99:c7:
9c:f2:25:c6:cd:39:cd:1a:eb:48:28:38:d4:ef:68:
58:77:ed:f0:cb:21:eb:79:e3:14:83:d6:c1:a7:27:
fa:00:c8:c0:5b:ed:54:1c:5b:4d:0b:c8:f8:68:d8:
51:7b:2e:bc:ec:3f:7f:02:6f:12:54:e6:61:03:fe:
20:d3:ba:a3:c6:7e:ca:02:46:c8:f6:14:d9:dd:80:
51:86:f1:fb:44:07:16:03:84:11:82:db:06:d6:e7:
91:50:9d:69:3d:db:bf:18:a5:9e:a3:09:cd:c0:cf:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EF:3E:1B:56:3C:95:BC:19:F8:11:E9:72:B8:07:4D:5E:83:21:88
X509v3 Authority Key Identifier:
keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f9:6e:f9:37:65:8a:fc:c5:f5:e2:fe:00:71:21:c2:00:fc:
38:dd:d7:96:19:69:2b:cc:48:d0:40:8a:60:81:ca:e4:58:81:
66:91:4c:ad:40:b9:44:3c:9d:22:49:4c:a8:ba:bd:c8:79:21:
0e:b2:68:f6:bd:1d:e9:81:f1:4c:dd:0f:9e:db:37:da:1c:b8:
52:1f:a8:e3:72:00:21:9c:8d:c2:d9:de:fa:ed:ee:07:2d:cc:
c4:07:ba:db:ef:75:f2:24:6a:c9:1a:64:9d:34:4e:19:95:3d:
fa:bd:80:ea:94:38:a0:84:65:7f:eb:b6:84:c1:b3:34:e4:ea:
4c:bb:70:42:78:d9:fe:3a:a5:46:ce:89:72:e4:69:18:c2:36:
4e:13:6c:a7:04:2e:fb:bc:2c:dc:f6:26:97:36:6e:f7:9d:42:
e2:ad:94:0d:6d:d1:2c:a6:0d:26:cd:27:78:d0:e3:90:82:c5:
7f:55:36:86:4f:89:0e:87:9d:b6:5e:69:b9:69:b8:8b:bf:09:
be:8b:01:ca:01:98:3a:df:f5:cb:6e:9a:cf:5a:65:8b:f7:07:
2b:24:d9:fc:a1:46:38:08:96:64:3c:60:e2:bc:b7:8c:51:ef:
c1:44:a1:e6:32:3e:16:1f:2a:2c:fd:38:fc:be:a4:c0:2a:44:
5d:27:75:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:08:39 2026 by rpki-client