Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: eGapkGcOBn9eP/acaxUfKN00OVwuE7Yesi1LAiz6yCc=
Subject key identifier: 21:53:EB:D5:ED:CD:B4:15:F4:C0:F6:5C:F3:CC:C1:0C:01:13:3F:1C
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 019D37533CEFC7C810FA3D2E4156C4CABC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 02:01:35 +0000
Manifest this update: Sun 29 Mar 2026 02:01:35 +0000
Manifest next update: Mon 30 Mar 2026 02:01:35 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: Kt4yaquRB8U+yfFNgsY7X5ivdsKhzDgGYxwJD8W3GrA=)
2: tlqqKuREfvSDchQZG18OHn9THi0.roa (hash: Wl7Ev0O/+N6l1ewgModoKbWom1OB+k9jR2molK76grA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:3c:ef:c7:c8:10:fa:3d:2e:41:56:c4:ca:bc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Mar 29 02:01:35 2026 GMT
Not After : Mar 30 02:01:35 2026 GMT
Subject: CN=2153ebd5edcdb415f4c0f65cf3ccc10c01133f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:74:68:c9:29:63:d2:fb:7d:e7:cf:6c:18:
3d:1a:eb:94:1f:51:4c:e5:d4:be:80:d9:a2:d8:c4:
4b:7f:53:3b:d8:6b:ff:07:36:5b:9e:20:35:45:9d:
fc:d9:2c:93:d6:63:50:6e:06:de:b2:6b:4a:27:9b:
c1:d4:54:20:a7:23:05:58:d0:65:ee:78:fa:b2:1d:
88:f9:74:65:f2:15:d7:b6:7b:1a:c0:30:38:67:4d:
c3:96:6b:0b:e5:2f:b4:f2:74:4e:b2:0b:78:73:d2:
ec:24:bd:45:ce:d7:bf:ff:a5:2f:84:ed:5c:3b:8d:
2d:b1:f8:a9:24:e4:be:ed:b4:86:75:1d:32:fb:f7:
77:03:f6:80:ae:c5:67:83:c3:02:8b:ce:1f:9b:bd:
0e:a6:17:bd:28:2e:37:8f:8d:65:36:9e:0c:b7:cf:
94:07:19:4e:77:c8:55:cf:91:e6:23:a4:e7:5f:18:
35:ff:7b:b1:16:62:3c:14:86:da:3e:e9:de:57:d0:
c5:1a:b5:54:ed:03:83:50:e5:90:d7:e5:70:6d:9b:
2e:81:84:9e:3a:b2:f6:59:e4:1a:d1:51:31:aa:2d:
40:2b:85:bd:2b:02:01:8c:b3:cc:c3:16:fc:46:3e:
c4:2e:3f:e1:9d:2a:21:73:66:c7:a7:a6:8b:de:3a:
a4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:53:EB:D5:ED:CD:B4:15:F4:C0:F6:5C:F3:CC:C1:0C:01:13:3F:1C
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e4:93:2e:ae:b5:c0:6a:ca:7e:42:39:4d:24:cc:92:63:5c:
9c:a6:1d:2a:f8:f1:fc:df:e5:1f:59:47:6f:dc:5c:1f:e7:3a:
da:b8:40:a8:2a:19:a5:d9:52:97:8d:36:24:d5:4c:0e:92:6d:
c5:15:a9:7a:c8:63:d8:90:24:a4:f4:39:ba:25:7c:1a:17:2b:
9a:6e:8f:34:ff:ab:c5:76:67:23:4a:6e:35:c1:f0:21:86:1e:
5e:76:26:42:3e:8c:a7:77:38:e4:25:7a:b3:b2:04:92:f9:a6:
ed:9f:e3:b6:0c:c0:4b:63:a5:ff:ea:b9:5d:9a:19:ea:56:3f:
9e:12:0f:9e:14:6f:02:19:7e:df:6a:33:9d:e7:5a:48:18:4a:
d5:71:55:cd:1b:48:a5:bd:55:18:0a:c2:23:e4:c9:9b:4c:72:
ed:98:73:d8:d5:0a:5a:ad:e5:4d:2b:b0:87:05:4b:59:37:65:
59:bc:a0:af:66:67:a2:18:be:ef:36:11:73:e6:af:3d:7b:49:
45:76:bf:96:98:28:6e:83:44:69:05:bb:f3:73:10:62:c0:cf:
78:2a:5b:c8:90:58:c7:f3:48:86:16:c7:b3:3c:c1:fb:af:32:
20:ab:ef:0b:ff:70:5b:53:5d:b6:f0:10:97:29:eb:89:9e:e8:
93:24:0f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:57 2026 by rpki-client