Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier: voRI9qKBD43NXVqI+mK+PNNL2TF4k8uoiYu8v2DIc1g=
Subject key identifier: C0:00:02:1D:1A:24:C5:C8:DB:42:55:32:49:DA:95:63:0E:2D:06:A3
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 019D37F7561E6A6F355F2F95F6FA7ECDA7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 05:00:49 +0000
Manifest this update: Sun 29 Mar 2026 05:00:49 +0000
Manifest next update: Mon 30 Mar 2026 05:00:49 +0000
Files and hashes: 1: ICjM29Ho5ilzx2CC9UyPCpBHk08.roa (hash: iDThEuTUmWf3SPJoG/mF6aomqM2YAji1cqVmI0Zj0pI=)
2: d6GlurZjrrwt2Mzk129b7bT_DCU.roa (hash: 2ZHYIA1Xr0+oHcfnaFr8fQOS6BVciW3KH+j7gwm8oEg=)
3: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: Kbfe6fnk41Hqqp9PLaywQTO6+5kEcAG3xw/xweeUwiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:56:1e:6a:6f:35:5f:2f:95:f6:fa:7e:cd:a7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Mar 29 05:00:49 2026 GMT
Not After : Mar 30 05:00:49 2026 GMT
Subject: CN=c000021d1a24c5c8db42553249da95630e2d06a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9a:e8:01:34:55:08:b9:62:83:c6:8b:84:8d:
a1:0c:da:29:21:4f:cf:f1:c1:10:46:15:ae:be:04:
21:2d:23:f7:6f:3c:94:75:e5:04:b9:55:ba:e6:95:
ae:2a:bd:4b:63:5b:4c:6b:0b:6c:91:c7:e0:e8:a9:
73:ce:7b:56:71:93:e8:e6:1e:b6:4f:56:67:3d:b3:
c4:22:38:5c:51:cb:34:79:d2:dd:b3:d1:b2:8e:aa:
0b:83:77:2b:ad:f6:4f:c5:2b:34:13:0a:9e:78:42:
64:a7:9b:00:f4:61:de:7f:71:78:7a:11:c1:31:33:
41:d6:6c:66:e1:be:a0:0d:86:38:a3:dd:bc:07:d7:
ca:ca:4e:ab:ed:28:5f:27:f8:0a:25:ea:a6:2a:60:
5c:18:01:ec:f9:d5:3b:43:9e:52:4e:71:08:c7:eb:
e8:8a:cb:50:26:8d:b9:77:88:d6:4c:2d:4f:a9:43:
48:fe:f4:67:67:9c:bb:bb:5f:57:3b:e2:28:9e:7e:
6a:73:50:1f:9e:60:41:96:ea:f0:c6:01:52:f3:6c:
5c:3e:4f:07:6e:26:90:bb:21:b1:a1:82:f9:61:dd:
75:7c:2a:cd:26:8d:9a:bc:b3:31:fa:65:5b:35:5f:
02:7c:b8:af:3c:73:1a:ec:0b:a3:2a:db:cf:d8:16:
44:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:00:02:1D:1A:24:C5:C8:DB:42:55:32:49:DA:95:63:0E:2D:06:A3
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8c:b4:59:12:f0:35:9e:2f:14:ff:e4:3c:b2:35:45:29:2b:
53:d6:d6:5f:af:7f:1c:21:76:fa:89:ee:aa:c8:db:89:b7:e5:
18:3d:3b:05:36:a9:f1:8e:75:87:9b:b9:9e:01:f6:36:a3:77:
13:76:53:73:fb:1b:6a:04:18:e5:3f:37:4a:36:25:fc:60:79:
c3:58:81:f2:2e:42:70:48:ae:7a:4a:7d:4d:86:fa:5a:d6:b3:
68:b1:f5:7d:84:f4:2b:22:6a:a6:de:e5:0a:5d:7c:5b:1d:5c:
4c:03:d1:f9:ef:3d:fe:23:16:47:45:ec:80:a2:4e:54:8c:9e:
df:54:fd:e0:db:7e:de:db:76:7d:fe:76:3d:d1:53:18:95:ed:
93:b1:a5:ba:cd:98:d5:f3:15:0a:15:f1:ec:ae:e2:11:39:6f:
17:29:aa:f8:f1:2b:29:b7:4e:a8:09:a0:fb:53:64:a0:cb:bb:
47:cb:5b:91:df:74:51:68:ed:3f:67:7d:84:10:9e:2c:22:70:
bc:7a:1e:d5:65:f2:f8:50:e1:fe:15:61:73:31:4a:f2:49:c8:
a0:ad:8a:37:c3:ed:6b:67:f3:38:c6:8e:f0:5b:4d:aa:70:eb:
a1:68:55:5b:51:24:31:ec:8a:c6:be:be:44:47:ba:26:67:01:
96:ed:a3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:55 2026 by rpki-client