Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
File: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft (raw, json)
Hash identifier: z+uVUaPBdL82090o6ns7k8522BYkGWeoiUaqEy5ahEc=
Subject key identifier: D8:59:5A:33:2D:9A:A4:3F:A4:08:6F:30:AE:D3:84:A2:4B:C6:8C:B6
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial: 019D9AABF81864F288EBEEBB46CB71DBB4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
Manifest number: 164D
Signing time: Fri 17 Apr 2026 09:00:54 +0000
Manifest this update: Fri 17 Apr 2026 09:00:54 +0000
Manifest next update: Sat 18 Apr 2026 09:00:54 +0000
Files and hashes: 1: ErNXrycTzph6JSf18PtwwsQoz2w.roa (hash: JFPJWJTX9AS74O2qvrW7DFe57VW6uqTN8mG7Rp0yt+w=)
2: SZE5e1h7vVE1K8b37udvVnSNQcM.roa (hash: DCVuhDnUxaJKtTV6uLri/M27ey5GSqDohY5/pt5Ejsk=)
3: Z1IlhEZgiQwk8auaQbQKsQhfjGw.roa (hash: GuAHOBM9mGxQz1BFFSnguR68MvXbC1uYn6q2dEBSyQ0=)
4: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl (hash: FL2ebrWlsU5PAlGmUj//njLSyOJTwbhhaafOJmDFqOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:f8:18:64:f2:88:eb:ee:bb:46:cb:71:db:b4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Validity
Not Before: Apr 17 09:00:54 2026 GMT
Not After : Apr 18 09:00:54 2026 GMT
Subject: CN=d8595a332d9aa43fa4086f30aed384a24bc68cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:02:ed:84:e6:e3:e4:eb:75:1a:26:77:db:
b1:05:0e:43:a5:58:a7:9c:84:22:f1:86:5d:08:2c:
e1:1f:58:de:de:ee:b2:8d:0c:33:b0:ac:a0:d4:fd:
18:21:0f:49:5b:54:95:85:eb:4c:7d:dd:d1:ad:cd:
73:5f:1f:7b:53:d6:27:9e:95:ea:92:8e:43:91:24:
6d:19:3a:02:f2:b2:c1:37:bb:9a:ee:04:52:00:39:
42:81:9f:2d:d9:31:92:02:2e:ee:ed:12:53:f7:e5:
66:f5:15:94:ea:e9:b7:06:6d:34:37:ba:78:69:32:
95:ad:5e:e9:0d:3d:5e:be:93:f9:6d:8a:57:b4:89:
83:32:cd:6b:80:ea:28:9a:79:62:72:6f:73:01:e1:
e0:60:09:18:58:65:65:a0:cd:29:6f:44:9d:71:72:
75:bf:10:10:dc:20:7a:35:b5:e6:78:85:c7:8d:45:
81:c9:5a:ab:a2:a6:4a:ec:ca:1d:cb:36:dc:32:1f:
e0:bc:61:b7:b9:fe:c1:12:53:c9:c4:b5:80:f7:37:
c3:bb:76:5e:0d:62:82:d5:4d:bd:57:49:14:af:f6:
b0:72:bc:3a:e2:ed:d2:ed:66:57:c3:e4:42:15:02:
2e:46:43:c1:9b:61:51:f6:a9:ae:4a:4f:46:f8:85:
16:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:59:5A:33:2D:9A:A4:3F:A4:08:6F:30:AE:D3:84:A2:4B:C6:8C:B6
X509v3 Authority Key Identifier:
keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f9:bd:cb:80:71:e8:97:d7:ce:29:07:c4:92:e1:6c:ae:43:
71:97:06:58:99:72:e1:21:2b:20:09:96:7c:36:fe:81:6a:f7:
61:1f:a5:ce:66:3b:f0:88:8f:3f:7b:7c:77:d9:52:b4:5b:a9:
1a:b3:47:99:dd:10:39:f8:e6:2b:98:b1:57:6d:31:4c:03:cc:
a2:66:46:6e:16:92:81:f7:1f:11:55:86:87:1c:63:69:ae:a4:
a8:0e:b5:43:84:ae:11:aa:cb:80:74:dc:60:88:ad:7a:fa:e2:
57:39:6c:0f:71:9e:01:01:5b:11:23:06:d3:fc:a9:45:82:df:
72:58:e6:e2:3f:ac:56:66:57:3d:50:c4:3f:1d:02:62:1c:55:
a3:21:88:3e:3e:5a:ce:97:b7:22:47:1c:df:b1:ee:e6:59:b6:
ac:23:b7:c4:c3:e3:86:f3:23:c1:ff:68:12:73:1e:ae:4d:d0:
38:91:1d:be:75:62:88:e3:ac:eb:bd:88:e1:30:b1:38:ce:ea:
d8:60:33:25:86:2d:74:df:84:b0:2b:8a:12:17:4f:fc:c1:24:
20:3b:e7:27:13:f8:89:10:bd:5c:72:de:69:c1:8d:05:51:01:
1d:f6:29:e8:d4:31:e1:70:0f:54:cf:30:8c:24:cf:f3:22:a4:
31:8b:d6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:24:25 2026 by rpki-client