Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
File: sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft (raw, json)
Hash identifier: dcdTidbN8nYOtcO9fm1dku25xWvKrThvJQg/1Nk+50Q=
Subject key identifier: F9:3D:9F:AA:89:AC:8C:BF:20:BC:A1:6B:3F:45:F1:6A:8D:FB:D6:36
Authority key identifier: B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E
Certificate issuer: /CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e
Certificate serial: 019D3A8A92913362058ECFC5FD109D2E711A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 17:00:53 +0000
Manifest this update: Sun 29 Mar 2026 17:00:53 +0000
Manifest next update: Mon 30 Mar 2026 17:00:53 +0000
Files and hashes: 1: sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl (hash: 96DDSTICNc00W226nCPcDkWKMCfrGes5IjQFy7NYxp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:92:91:33:62:05:8e:cf:c5:fd:10:9d:2e:71:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e
Validity
Not Before: Mar 29 17:00:53 2026 GMT
Not After : Mar 30 17:00:53 2026 GMT
Subject: CN=f93d9faa89ac8cbf20bca16b3f45f16a8dfbd636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:fa:54:a9:4e:c3:0b:96:3d:1d:22:a3:2d:
60:14:9f:f2:04:f1:a4:82:76:e9:91:9f:c7:f2:93:
08:2d:8c:c9:46:ae:40:44:93:71:65:22:8a:5f:6d:
8b:08:08:b4:c1:82:cb:4d:e7:c3:ce:01:2b:20:90:
e8:b8:6e:1e:37:38:32:57:bd:8c:61:42:d2:54:36:
b5:a6:03:84:ac:c1:a3:15:79:f2:dd:0c:5a:9d:23:
2b:fc:e3:8e:c7:67:c5:a4:38:77:09:92:8c:0a:1a:
fb:1e:21:7d:7e:e8:93:3e:e0:36:d0:ee:ca:7f:35:
5e:31:51:5c:f7:9f:01:5a:07:86:c5:2f:cd:5b:f7:
fd:91:b1:3e:72:d8:d4:dc:61:6c:c9:22:a1:a4:e8:
dc:0e:66:9f:96:ce:10:3e:a4:08:f6:a8:96:39:05:
17:39:c9:ea:4d:e4:ef:c7:4b:e3:7a:d2:65:d4:06:
d3:92:43:3e:63:eb:4d:7d:7f:ab:96:81:77:3d:60:
d6:8d:4e:74:45:81:fd:55:cf:23:b5:90:8e:a1:d9:
6b:59:db:25:e0:2d:60:dc:08:ab:d4:a4:1d:08:5e:
a3:e4:26:00:e1:44:9f:aa:20:b8:12:95:70:bd:7c:
73:41:c9:df:45:16:5b:3f:5f:56:07:6d:bb:30:f1:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3D:9F:AA:89:AC:8C:BF:20:BC:A1:6B:3F:45:F1:6A:8D:FB:D6:36
X509v3 Authority Key Identifier:
keyid:B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:48:2a:88:0d:61:fa:1f:23:29:6a:24:7e:e4:0b:91:49:96:
1d:7f:5c:b4:7e:18:09:0e:6e:ae:f1:e2:a6:cd:da:cb:1e:f5:
71:7c:69:3d:6c:7d:1e:af:21:92:d6:44:50:f2:94:a7:5c:f3:
6a:cb:ba:cb:b4:b1:70:db:52:50:37:84:b7:70:33:ea:2c:39:
c0:da:c2:b8:1d:a7:2f:e8:d8:16:f8:d9:e9:00:be:3e:25:75:
bc:61:5b:91:f6:aa:5d:47:23:29:52:ec:46:ab:a0:25:5b:43:
a4:6e:9e:68:f1:95:a4:b9:51:a8:cd:1c:71:e1:f7:bf:2c:d1:
67:cb:cd:0f:51:35:98:5b:7e:c0:93:00:d2:fb:71:b2:eb:0d:
90:98:62:b3:3e:5a:d7:28:bb:41:63:04:58:19:9c:ad:3e:81:
9f:89:e1:bc:16:b8:87:7b:a5:1e:74:56:32:a0:48:61:c1:75:
28:b0:2b:24:ea:bc:84:40:8b:e5:c8:c0:ad:8f:41:76:7c:84:
cf:67:e9:1b:c4:c9:49:3e:a9:c2:28:b1:15:d5:ba:26:0c:5e:
90:c9:82:62:b4:35:74:ff:86:e3:79:51:2e:e8:fa:ab:de:43:
dc:73:ca:36:83:ae:60:30:55:9a:51:8a:8c:0c:b3:c7:82:55:
c7:6e:1a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:38:00 2026 by rpki-client