Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
File: RRi4nH3OK17cBVgVFs_BnXoxdOg.mft (raw, json)
Hash identifier: dxnuO1lkHAsz8L0HXvpUnErH3oQaj8iYTdYd1p0Gd4M=
Subject key identifier: 5D:76:3E:0F:09:11:7C:54:79:65:8C:CF:CB:1F:BC:E2:AE:9E:F4:16
Authority key identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
Certificate issuer: /CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Certificate serial: 019CADC81394A92E68919921B9AECC498BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
Manifest number: 166C
Signing time: Mon 02 Mar 2026 09:01:36 +0000
Manifest this update: Mon 02 Mar 2026 09:01:36 +0000
Manifest next update: Tue 03 Mar 2026 09:01:36 +0000
Files and hashes: 1: KNGzhIaCKCO7BqVAGRH0hS28bSE.roa (hash: p/4zAAWK0QGA2GZKTcppMHA4sXwzCSeZJaQW4PAVpBk=)
2: RRi4nH3OK17cBVgVFs_BnXoxdOg.crl (hash: 6SMcEVoCXdOs6pa9w/6AE3zto9Bj3fMXeJZoGlvHzqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:13:94:a9:2e:68:91:99:21:b9:ae:cc:49:8b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Validity
Not Before: Mar 2 09:01:36 2026 GMT
Not After : Mar 3 09:01:36 2026 GMT
Subject: CN=5d763e0f09117c5479658ccfcb1fbce2ae9ef416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:a4:cc:a8:68:4a:57:90:b2:d1:3b:af:6c:
e3:b6:42:76:11:cc:92:a1:56:3d:70:43:2a:f9:26:
fe:2e:89:32:f2:ba:14:ec:80:7c:95:90:16:1d:f3:
fd:c2:68:97:d1:62:8c:a8:31:cd:2f:7d:83:7d:f1:
1c:28:b3:05:c0:a7:1a:1a:fa:89:eb:0c:ee:f6:0d:
ad:55:0f:f6:3d:c9:35:ef:8e:02:8a:04:7d:cd:b7:
b4:7c:f9:9b:8f:b1:f8:c7:68:0a:01:b7:15:10:d6:
ef:d3:d8:4f:0b:fd:4b:27:f4:c5:9e:38:1e:02:e0:
a6:43:18:b5:05:13:78:f2:01:6d:a3:5d:1c:41:97:
ec:ec:66:3f:ee:71:d1:06:b4:40:6e:7e:71:e5:76:
7a:fe:e8:37:00:bd:c7:ce:16:41:f6:9f:45:d0:95:
a8:6b:ff:49:cb:bc:19:31:ef:a0:87:5f:b4:3b:f1:
16:1d:41:a2:15:88:69:21:88:71:93:36:54:51:41:
58:b9:0e:ef:27:63:5f:01:5b:30:81:52:79:95:b3:
8d:d8:f9:1b:42:85:b0:bc:53:07:ee:9e:97:e5:80:
8c:64:69:b0:ce:76:91:5f:43:39:45:f0:1d:8a:7e:
0b:e4:2c:c6:10:5c:43:fa:1d:fe:95:17:a8:e2:f8:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:76:3E:0F:09:11:7C:54:79:65:8C:CF:CB:1F:BC:E2:AE:9E:F4:16
X509v3 Authority Key Identifier:
keyid:45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bd:24:28:f8:8a:1a:87:e0:ba:ef:66:a8:b4:14:1b:b0:a1:
d1:e2:63:a3:a8:7a:d6:e2:43:5d:85:b0:c7:d8:0e:f6:c7:61:
a9:e7:cd:2a:d1:32:1b:4e:11:f3:d9:58:0e:bc:27:9d:1e:a9:
4a:b8:96:d7:2c:87:d8:21:8e:96:48:69:b4:41:95:06:0b:e3:
c4:7b:5d:bb:78:eb:07:d0:cd:50:bb:32:ad:c9:44:ee:53:30:
fb:f9:99:10:0b:f8:36:8b:8c:0b:46:a8:46:48:17:f2:73:43:
9f:b0:35:01:65:46:7d:d1:d7:17:fa:8f:24:7b:c2:70:b1:d4:
3c:4e:0a:d8:fa:88:25:b7:cf:c5:f9:34:62:9f:ce:0a:43:fe:
c0:94:7f:7d:5e:58:e2:84:d6:4c:8d:91:6d:6d:02:58:1d:f2:
22:a4:2f:f1:aa:24:69:ac:5b:59:89:06:e7:b3:41:15:81:c5:
6e:a0:d8:2a:4b:27:50:68:4e:2b:d6:d2:e4:09:bc:b9:40:18:
87:e8:27:52:ce:11:5e:4b:c1:fe:ff:ef:ab:3b:09:c0:48:27:
50:2f:bb:65:81:1d:8e:59:62:cd:6e:47:13:1b:2f:20:48:53:
62:04:07:a0:aa:68:e4:dc:7d:91:1a:b9:be:a3:73:ae:ca:7e:
45:18:40:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:18 2026 by rpki-client