
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
File: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft (raw, json)
Hash identifier: za56Wx/tTWindKbpzmb+ELFEGK/hJifrTfKUWA9uzeM=
Subject key identifier: 3B:3F:71:10:04:75:0C:A7:71:38:7E:59:C9:CB:C0:8D:80:5C:A6:08
Authority key identifier: AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
Certificate issuer: /CN=af59d35331c9efe33c9530769325ae8ef550ffda
Certificate serial: 019D9B19DC73913B90DA6F5C80F2325D5B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
Manifest number: 16F7
Signing time: Fri 17 Apr 2026 11:00:56 +0000
Manifest this update: Fri 17 Apr 2026 11:00:56 +0000
Manifest next update: Sat 18 Apr 2026 11:00:56 +0000
Files and hashes: 1: 0ykmxKOOl5dHUUQwXHBEx0WT__8.roa (hash: JpgTwOTaW0S87I0vPC5sLuBOPNryUr/2k4talsuIf+k=)
2: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl (hash: ybk/iUSdaFbBrwcaO/6US8LDnezhHpkNoMS5+cKWecI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:dc:73:91:3b:90:da:6f:5c:80:f2:32:5d:5b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af59d35331c9efe33c9530769325ae8ef550ffda
Validity
Not Before: Apr 17 11:00:56 2026 GMT
Not After : Apr 18 11:00:56 2026 GMT
Subject: CN=3b3f711004750ca771387e59c9cbc08d805ca608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0b:c0:e3:09:6f:1c:e1:55:1b:3b:45:76:63:
36:81:5a:3b:d5:b7:7a:75:5f:d9:0d:ab:4f:08:38:
9f:e4:38:f3:e2:67:06:18:b5:d0:bc:9e:d7:e0:f8:
38:03:e6:e1:3f:cd:b5:2a:2d:11:b5:e6:9c:48:76:
ab:f3:5a:e5:a4:24:6e:79:7f:71:20:61:f0:a7:cb:
f2:2b:fb:63:66:26:e6:c7:b9:6e:27:e1:18:bf:7e:
72:a4:af:37:77:45:36:04:0a:9d:1f:07:9b:8b:d4:
3d:9e:ce:03:4a:96:ec:2b:9b:56:3a:a8:f4:52:84:
cf:df:6b:60:a9:9c:ca:70:db:2b:6c:a9:94:0c:25:
f5:d5:02:29:e8:69:4a:25:60:04:a8:e7:b5:04:82:
2a:f6:b0:c2:d2:3c:b9:4c:d8:68:0d:cb:60:4e:b0:
f3:62:e1:28:2d:0d:e1:66:46:2c:18:5c:3b:b2:a5:
9c:17:54:f5:49:e4:22:9a:e6:9e:e2:28:63:51:62:
82:6c:a9:34:8e:9a:d8:bd:93:c7:30:5f:42:e7:5e:
08:bd:ec:1b:82:11:20:e1:28:42:54:a0:7c:f7:4a:
e0:da:bb:d7:c2:c6:f4:d9:95:62:1f:9c:6d:7c:0c:
8d:44:1c:7b:c4:0c:2a:6e:78:d4:fa:30:14:41:7e:
61:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3F:71:10:04:75:0C:A7:71:38:7E:59:C9:CB:C0:8D:80:5C:A6:08
X509v3 Authority Key Identifier:
keyid:AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0a:1c:3a:0e:15:87:14:43:b9:4e:5b:4f:6b:d2:e3:23:ad:
64:50:ae:81:5a:56:eb:0f:ca:27:03:d6:ca:28:c1:a4:29:45:
c6:e9:e5:16:71:43:55:55:ce:19:fb:01:ed:da:49:3e:12:33:
b8:4b:65:74:cb:f8:25:42:89:69:a2:c6:a8:cb:9f:0d:65:e9:
e0:6c:d3:de:3e:97:68:67:7c:1d:8b:cb:71:79:68:c4:ad:d5:
46:5d:7e:da:d7:be:ce:ca:9d:1a:ee:e4:df:b5:30:69:60:44:
c9:60:65:56:66:94:04:fa:25:42:a2:7b:0b:55:0c:7c:be:8c:
1e:bf:17:aa:5b:9a:85:f5:c1:c8:02:05:6d:1e:68:48:0b:34:
63:e0:9a:77:24:30:79:65:72:82:17:27:24:88:fc:7d:88:4d:
fa:80:8a:18:be:e1:87:4a:6c:75:5e:17:c2:b5:cb:27:cc:e9:
49:db:f8:80:ae:1d:43:03:8d:56:40:7d:cf:74:9d:34:34:0f:
33:e0:a1:b3:87:17:9b:b2:24:5f:a0:0f:26:74:4c:2e:23:82:
9d:0c:b4:45:96:f5:d8:c9:d5:97:42:25:02:6a:98:2b:73:73:
4f:7c:43:ca:21:c7:56:f4:db:2d:62:0c:c9:e3:aa:f7:51:97:
03:a7:b9:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGdxzkTuQ2m9cgPIyXVs8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNTlkMzUzMzFjOWVmZTMzYzk1MzA3NjkzMjVhZThlZjU1
MGZmZGEwHhcNMjYwNDE3MTEwMDU2WhcNMjYwNDE4MTEwMDU2WjAzMTEwLwYDVQQD
EygzYjNmNzExMDA0NzUwY2E3NzEzODdlNTljOWNiYzA4ZDgwNWNhNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwvA4wlvHOFVGztFdmM2gVo71bd6
dV/ZDatPCDif5Djz4mcGGLXQvJ7X4Pg4A+bhP821Ki0RteacSHar81rlpCRueX9x
IGHwp8vyK/tjZibmx7luJ+EYv35ypK83d0U2BAqdHwebi9Q9ns4DSpbsK5tWOqj0
UoTP32tgqZzKcNsrbKmUDCX11QIp6GlKJWAEqOe1BIIq9rDC0jy5TNhoDctgTrDz
YuEoLQ3hZkYsGFw7sqWcF1T1SeQimuae4ihjUWKCbKk0jprYvZPHMF9C514Ivewb
ghEg4ShCVKB890rg2rvXwsb02ZViH5xtfAyNRBx7xAwqbnjU+jAUQX5hcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs/cRAEdQyncTh+WcnLwI2AXKYIMB8GA1UdIwQY
MBaAFK9Z01Mxye/jPJUwdpMlro71UP/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjFuVFV6SEo3LU04bFRCMmt5V3VqdlZRXzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNGU2MDEtZjMxYS00MWJiLTkzZmUt
YTU5ZTZlOWFiY2M4LzEvcjFuVFV6SEo3LU04bFRCMmt5V3VqdlZRXzlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8xNGU2MDEtZjMxYS00MWJiLTkzZmUtYTU5ZTZlOWFiY2M4
LzEvcjFuVFV6SEo3LU04bFRCMmt5V3VqdlZRXzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwocOg4V
hxRDuU5bT2vS4yOtZFCugVpW6w/KJwPWyijBpClFxunlFnFDVVXOGfsB7dpJPhIz
uEtldMv4JUKJaaLGqMufDWXp4GzT3j6XaGd8HYvLcXloxK3VRl1+2te+zsqdGu7k
37UwaWBEyWBlVmaUBPolQqJ7C1UMfL6MHr8XqluahfXByAIFbR5oSAs0Y+CadyQw
eWVyghcnJIj8fYhN+oCKGL7hh0psdV4XwrXLJ8zpSdv4gK4dQwONVkB9z3SdNDQP
M+Chs4cXm7IkX6APJnRMLiOCnQy0RZb12MnVl0IlAmqYK3NzT3xDyiHHVvTbLWIM
yeOq91GXA6e5MQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:48:16 2026 by rpki-client