Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
File: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft (raw, json)
Hash identifier: I1p54pHMNX7Fui0zepaKpMeBNR7z4uaiVR+aTJBSqes=
Subject key identifier: 28:B8:23:AD:DF:6D:96:0C:16:17:0B:BB:FF:CE:78:FB:9A:5F:FA:14
Authority key identifier: AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
Certificate issuer: /CN=af59d35331c9efe33c9530769325ae8ef550ffda
Certificate serial: 019CAD9084A174E535AD7DCF6DA9900CEA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
Manifest number: 167C
Signing time: Mon 02 Mar 2026 08:00:55 +0000
Manifest this update: Mon 02 Mar 2026 08:00:55 +0000
Manifest next update: Tue 03 Mar 2026 08:00:55 +0000
Files and hashes: 1: 0ykmxKOOl5dHUUQwXHBEx0WT__8.roa (hash: JpgTwOTaW0S87I0vPC5sLuBOPNryUr/2k4talsuIf+k=)
2: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl (hash: achfYmgsJ10959FKtBi1mvurguIL2FZC5EmXxp7KAp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:84:a1:74:e5:35:ad:7d:cf:6d:a9:90:0c:ea:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af59d35331c9efe33c9530769325ae8ef550ffda
Validity
Not Before: Mar 2 08:00:55 2026 GMT
Not After : Mar 3 08:00:55 2026 GMT
Subject: CN=28b823addf6d960c16170bbbffce78fb9a5ffa14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:a7:07:e3:6e:13:d5:ac:d3:0a:0c:82:8d:
05:e4:75:ca:a1:8e:10:16:ea:e7:6e:8c:fc:a5:d4:
7f:e8:93:e9:16:7f:81:7f:74:59:42:d9:51:20:c7:
d1:41:b4:55:bc:a8:b7:a0:0b:12:a6:49:30:78:45:
85:ce:19:e1:27:89:63:c3:e2:9a:88:46:3f:cc:d0:
d4:a5:aa:c4:7c:ab:14:19:c0:88:d2:b8:0a:f5:42:
a3:c6:4d:b8:13:82:c7:7a:30:d1:e3:c6:25:27:19:
bd:91:75:60:21:8c:53:38:85:56:1b:5c:6c:9a:cc:
97:c3:e9:40:c4:58:03:54:ae:dc:68:06:61:8b:a0:
b7:06:1a:85:05:51:5a:ba:7a:ef:65:1e:e7:63:8e:
a6:12:62:2c:d3:53:d0:fe:8b:18:2b:99:f1:ec:96:
1f:d1:e2:25:86:d6:4f:d5:57:03:96:b2:f9:68:9b:
6f:fd:b7:30:cd:f8:79:58:5d:36:91:c3:91:fa:37:
3a:e3:53:b3:45:59:aa:c9:b5:75:4c:f7:14:c7:0f:
89:51:59:18:2f:dc:26:b1:1b:b0:bc:5a:a7:74:d7:
1e:7d:34:51:db:57:d9:c9:f6:9e:1d:f5:49:0e:6e:
2c:bc:d6:88:21:12:ae:3a:b8:df:42:e8:bf:97:7e:
72:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B8:23:AD:DF:6D:96:0C:16:17:0B:BB:FF:CE:78:FB:9A:5F:FA:14
X509v3 Authority Key Identifier:
keyid:AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c7:c3:61:2e:a6:29:39:a7:bb:f9:ff:a8:b3:19:d2:fd:7c:
c3:2f:07:8d:ad:40:f5:20:03:b0:97:91:a8:f2:f9:f1:8d:ff:
27:51:30:0f:0d:4c:3e:73:28:3e:6a:d4:29:2e:69:95:45:0c:
7b:53:d6:a3:75:d6:5c:87:8f:af:f1:4e:45:67:52:48:f8:57:
cc:7b:48:99:d4:c1:25:9c:5e:52:e1:7b:8f:8f:95:6e:9c:1a:
12:0c:5e:fc:34:b1:81:5b:b9:53:80:fa:c0:07:f4:87:7b:76:
c5:e7:bf:67:4b:43:6b:e6:71:05:f2:15:8a:7e:81:72:e1:ba:
1e:3c:04:78:a8:24:fe:59:16:a1:d9:2d:73:e8:94:72:d4:c7:
41:47:6e:11:0d:04:b0:90:af:25:60:94:55:39:d0:ce:ac:ba:
d6:09:63:ae:a4:2b:2a:12:39:bb:d7:0f:f7:95:9b:ac:9e:31:
81:14:9e:61:d7:b6:30:83:3d:79:72:2f:12:98:1f:6d:e1:22:
f6:7a:12:a9:9f:57:79:d8:f1:bf:ff:26:f9:8e:eb:1b:b1:c5:
00:9b:55:39:50:11:cf:b8:49:f1:90:a0:e4:28:11:bc:3e:53:
73:14:ff:91:68:8a:e8:db:df:a0:c7:63:8c:f6:84:a4:ed:6e:
4b:2c:73:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:41 2026 by rpki-client