Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
File: d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft (raw, json)
Hash identifier: En+vm6IbIL7y157JTRX0ZIP8vbMiIQ068ey1d7uepeI=
Subject key identifier: F4:64:98:AD:C5:88:D0:9F:3F:83:ED:1F:21:62:4D:D7:4F:63:54:E2
Authority key identifier: 77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
Certificate issuer: /CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Certificate serial: 019D38D36E63C81F94204AAD0C35A6234DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:01:13 +0000
Manifest this update: Sun 29 Mar 2026 09:01:13 +0000
Manifest next update: Mon 30 Mar 2026 09:01:13 +0000
Files and hashes: 1: GdUUpV1tSpa6dExv6OdPOPN3bMo.roa (hash: JEBXOLiUs8+kGojQx9pRr2R8TcsHWxkp8T4KQDmx6n8=)
2: d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl (hash: PMoPKeH84cBXACkU3Z/OMCKek7QweLZzVLpekQlKpKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6e:63:c8:1f:94:20:4a:ad:0c:35:a6:23:4d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Validity
Not Before: Mar 29 09:01:13 2026 GMT
Not After : Mar 30 09:01:13 2026 GMT
Subject: CN=f46498adc588d09f3f83ed1f21624dd74f6354e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:99:16:65:fe:06:9d:d4:69:87:bc:f6:3a:
9d:cc:fc:59:d1:f7:2e:2c:77:3d:c9:83:31:e1:2b:
65:97:69:bc:fa:ea:30:25:20:92:25:9c:73:f2:1a:
01:51:94:4a:08:9c:bb:27:70:fa:9f:0d:a4:09:46:
64:6c:7a:0c:2d:f5:08:31:1a:f2:7e:af:1e:5b:f7:
0e:de:e5:e8:87:c4:22:a2:b6:9e:6a:69:e0:74:0b:
2b:c1:ee:f6:d9:50:97:f7:a6:7f:d9:99:9f:12:15:
39:4e:06:ca:81:db:b7:8e:d4:b5:43:8c:f2:98:4b:
98:80:5e:1e:82:20:55:ac:67:ec:2b:a8:5d:50:f7:
18:80:94:cf:dd:93:c5:94:55:07:12:15:47:5f:07:
5b:f0:c2:7e:3b:b3:a5:db:4e:e1:82:15:5e:b5:56:
cc:84:63:11:97:b6:65:46:d0:43:a7:65:98:ab:d1:
3f:87:b2:15:b3:a1:99:06:5f:8a:a2:8e:3f:b4:93:
ed:78:da:7e:a0:46:1b:b9:27:10:b9:ae:38:9c:25:
ea:0d:de:e1:d9:3a:d5:b0:c6:96:9a:22:13:af:23:
d8:5d:b1:c3:b9:87:38:b6:7e:f5:42:6b:cf:46:a4:
a1:6d:dc:e8:07:05:08:5d:fa:96:8b:83:75:34:dd:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:64:98:AD:C5:88:D0:9F:3F:83:ED:1F:21:62:4D:D7:4F:63:54:E2
X509v3 Authority Key Identifier:
keyid:77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2c:ee:93:da:b3:d8:c5:d2:14:1b:4a:0d:55:4c:37:2e:31:
13:28:f3:d3:a0:e3:47:31:f8:4b:e3:01:22:23:1d:e8:af:ce:
24:14:7d:ad:f2:4d:1b:26:19:ab:73:20:0a:cd:d8:8b:ab:12:
72:53:4a:f2:c2:6c:fd:d7:2f:03:37:d3:53:34:47:f5:bb:47:
7e:c6:14:f0:d7:b1:83:6c:70:25:a0:a2:49:97:88:67:5f:18:
e2:ce:e2:84:dc:25:bb:f6:70:79:f8:06:1f:9a:00:38:4c:ad:
54:cf:54:10:5b:ba:2e:dc:ac:17:0e:18:d2:85:1d:0c:82:57:
e3:97:8a:25:18:cb:f8:a6:a7:75:dd:76:12:76:e1:bb:94:be:
ff:24:65:a6:cb:8a:70:00:42:b6:5d:29:08:69:a2:b5:0b:05:
a9:40:4d:de:dd:a7:ad:c7:87:fa:ad:4b:fa:85:07:9f:d6:a3:
91:8d:45:c8:58:93:48:2a:b7:31:89:aa:9e:4e:83:57:5e:a8:
49:1e:dc:70:a6:4d:84:5d:09:7d:bb:90:0e:11:f3:a4:3f:8b:
0d:7e:9e:4b:0f:42:72:10:6c:cf:f0:d4:32:bf:db:0a:5e:1d:
cd:06:ff:26:00:0e:cd:6c:bf:d0:78:63:5a:fe:6e:f3:34:2a:
72:92:07:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:26 2026 by rpki-client