Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
File: CAdgG8REIsjSOjzXK_6hu_KgVjo.mft (raw, json)
Hash identifier: qQS1ZnF60pd0XmC7zUEuyfGiDyBW7AmyoMKAuHHrDhw=
Subject key identifier: 28:C4:37:2D:D2:FC:80:64:44:09:BB:94:AE:FD:00:85:E5:77:81:93
Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
Certificate issuer: /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Certificate serial: 019D37C076739B1B2A0A4B747D46DEDB3803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:53 +0000
Manifest this update: Sun 29 Mar 2026 04:00:53 +0000
Manifest next update: Mon 30 Mar 2026 04:00:53 +0000
Files and hashes: 1: CAdgG8REIsjSOjzXK_6hu_KgVjo.crl (hash: z8H29fT4apr0z50QSUBX0FM7/lnBU+xCabMiyFlTf98=)
2: H1YvmuStYDNqAB61c-rWu6eqTD4.roa (hash: 9PGCd+QuRbx4/mSkh35qhoqedPe+bLxdrUELkN0aarc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:76:73:9b:1b:2a:0a:4b:74:7d:46:de:db:38:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Validity
Not Before: Mar 29 04:00:53 2026 GMT
Not After : Mar 30 04:00:53 2026 GMT
Subject: CN=28c4372dd2fc80644409bb94aefd0085e5778193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:87:33:ac:69:15:79:74:b5:df:2a:95:b0:
fa:7a:60:8a:f6:d9:44:b9:c4:05:1f:95:e2:5c:ac:
99:e7:1f:b7:9a:0e:3f:7c:3b:54:8e:7a:81:b8:e1:
9d:9c:fa:cd:f8:9f:2c:7d:58:28:0c:9a:35:5b:3a:
26:62:95:7d:c4:6c:c6:b3:b3:8e:33:cc:48:df:8f:
7c:54:53:74:c4:a8:de:3f:62:65:b8:91:9d:d7:b1:
a2:2a:6c:57:15:39:48:de:f9:b6:73:62:34:bf:9c:
37:7e:6c:bc:13:fb:05:3f:93:7a:d4:37:79:91:aa:
0d:c5:b7:b3:97:1b:72:3e:0b:00:2d:36:f4:83:f6:
f5:5f:b7:c3:0d:33:7b:dd:33:ca:a6:0e:56:30:3d:
b8:bf:72:0e:48:a2:0f:5c:a2:96:e4:14:85:fc:44:
2b:3c:b5:9e:c9:e0:1a:e0:70:ae:31:0b:b5:7e:85:
06:f0:4c:38:fd:8c:ee:5d:75:bc:9b:58:b4:4b:ea:
21:81:d6:2f:27:76:f2:3b:dc:aa:8d:33:2f:de:96:
da:9f:8e:01:f3:d0:7b:5f:fb:12:23:b4:ea:ed:b3:
48:15:e8:db:e2:ba:20:68:61:31:19:cd:00:bb:ff:
bf:09:f7:fd:6c:43:b4:1c:8e:2c:ad:4a:ea:4a:9f:
cb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C4:37:2D:D2:FC:80:64:44:09:BB:94:AE:FD:00:85:E5:77:81:93
X509v3 Authority Key Identifier:
keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4b:b2:ba:98:89:87:cd:a8:cc:e6:2d:a4:55:22:b4:e1:7e:
ef:e0:e3:b2:06:2f:20:41:50:2c:37:6d:b2:b5:5a:07:84:0b:
7b:54:d7:27:d5:93:58:18:dd:e9:73:98:f7:7a:43:f7:6c:a4:
7e:fd:4b:1c:fe:ec:ce:96:98:bd:ac:16:7a:cf:ee:71:bc:43:
dd:14:15:0d:b6:1f:95:51:b4:ce:43:b2:8a:e4:f9:3b:31:4a:
6a:0f:e4:e9:d6:de:b8:f0:d7:94:08:00:98:21:1d:62:c1:b8:
9f:0e:4b:07:2b:d4:8a:bf:79:cc:ad:d4:36:2c:5b:17:2b:0a:
49:07:83:08:fc:15:2a:9d:cb:42:ef:db:85:95:2c:9d:c5:26:
6f:f9:92:c7:e2:40:f5:78:7a:76:2b:1a:a9:3b:d3:5c:b7:80:
d6:23:86:d9:e4:b6:f6:fe:85:67:45:2d:fc:5c:65:26:a7:9d:
73:18:de:27:35:30:53:a0:6e:10:87:6e:d8:de:ae:b6:95:42:
f8:bd:00:96:6b:74:fe:20:95:f3:8c:a9:0d:7d:c2:1d:36:e3:
c3:7e:a3:ce:9e:5b:94:a6:a6:e6:dc:5c:ef:d0:76:c9:22:e7:
b3:89:51:44:6a:f1:2f:79:2c:61:f6:81:b7:50:37:b2:62:35:
ab:b8:65:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:02 2026 by rpki-client