Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
File: rAmEUBCEpHIgxczPVHi4l8KCLH8.mft (raw, json)
Hash identifier: CuxQkDkGKNRIxISh5RyXmaO1q4dymc7yo6lKzBAFcI4=
Subject key identifier: 14:61:0F:8E:51:4A:9E:92:37:C5:F3:44:CE:0B:87:73:F6:2A:23:5E
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Certificate issuer: /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial: 019D38D37520DB5FB1A89FE8AA67C328F9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:01:15 +0000
Manifest this update: Sun 29 Mar 2026 09:01:15 +0000
Manifest next update: Mon 30 Mar 2026 09:01:15 +0000
Files and hashes: 1: IgFQrerKfVP7wy44zfUDO_Ryu40.roa (hash: d+QkU0y4pn6BlJ50YCAOplUfwVp1JgVys4D+BWQE0Ss=)
2: eIsRP9-R0B5y8Q9SMASC2fuIFUo.roa (hash: Sf1KzRutRQ8Om6lChpX9qp6C7pNo5SKRUwiV8EG2Y1Y=)
3: rAmEUBCEpHIgxczPVHi4l8KCLH8.crl (hash: ZIuIvFSRQrNikMNhbONReUT9nESWT2nEGeqGVhp7Vic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:75:20:db:5f:b1:a8:9f:e8:aa:67:c3:28:f9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
Validity
Not Before: Mar 29 09:01:15 2026 GMT
Not After : Mar 30 09:01:15 2026 GMT
Subject: CN=14610f8e514a9e9237c5f344ce0b8773f62a235e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:75:60:ec:f0:d8:b1:9e:8a:2f:97:e2:e5:34:
9f:dc:2e:03:22:fd:38:26:85:8a:15:84:c4:41:74:
ee:bc:cd:ce:1d:58:69:41:62:31:5d:67:63:76:64:
ab:a5:61:be:8c:a8:0e:5e:e4:fb:e6:27:db:6b:83:
24:e6:d1:57:ec:98:59:c4:8d:56:60:1a:e0:72:7d:
76:f4:1d:a6:95:d2:9d:e6:f0:1e:60:dd:70:12:41:
65:4b:38:79:d3:ee:dd:0c:7e:e2:75:f1:ae:6b:10:
ba:da:38:59:19:c8:47:3c:d3:cb:fe:3b:b8:cd:4d:
4a:06:1b:77:51:e0:ea:09:7a:bc:4f:ce:c5:e5:3a:
e2:43:63:00:f5:b7:cb:46:69:86:07:0a:13:5e:cc:
82:8a:ad:d0:f9:fd:86:78:0e:8e:c8:9d:5c:c5:c0:
61:e8:00:7d:e6:0e:de:23:2f:38:4c:eb:1e:b2:6b:
2e:2d:bb:19:6f:a8:9a:86:41:8e:de:67:5a:2b:7a:
2d:82:4d:44:36:d6:90:ec:c6:6d:a9:f5:07:2b:ab:
94:2e:a7:3a:fd:7d:d2:b9:b1:31:03:67:52:56:1b:
39:87:58:d6:64:1f:a2:78:31:67:b5:05:99:89:eb:
05:c3:72:4d:3f:4d:9a:3b:4a:ad:9c:65:0e:dc:c3:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:61:0F:8E:51:4A:9E:92:37:C5:F3:44:CE:0B:87:73:F6:2A:23:5E
X509v3 Authority Key Identifier:
keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:74:18:c6:c8:e9:e6:a0:ef:4a:c5:4a:b9:91:6d:0c:49:4c:
9b:3e:80:60:62:e0:ca:5b:e9:6c:95:db:ac:ed:ec:61:97:09:
7b:66:db:b9:13:a4:fa:6d:46:e9:84:36:ca:5a:da:9d:34:6c:
94:d7:a0:51:99:2f:6c:8f:b0:ef:e5:53:8c:ca:e5:8e:1d:17:
9a:ef:77:08:96:c1:f3:9c:29:89:e1:52:69:0c:91:1f:6c:55:
68:43:7b:fb:cc:9e:c0:3f:75:0e:af:41:f9:03:3f:c0:fd:0f:
85:a9:df:7f:00:d4:33:61:cb:c1:89:03:cb:7b:7c:a3:46:12:
d9:8b:e9:6e:8f:cb:30:bc:e6:46:2d:91:e9:df:35:75:77:8a:
28:34:18:2b:eb:ec:f2:8f:65:3a:3c:b6:1a:2a:87:ca:73:92:
da:b5:6c:73:02:5f:89:ed:31:16:99:4e:2d:89:78:65:fd:b3:
11:01:79:5f:74:40:77:60:3b:6b:05:01:bf:3b:97:3c:ea:33:
2c:57:c8:00:87:03:f6:1a:c7:7c:54:79:0b:92:4e:60:1b:a4:
b8:e8:e7:86:0e:71:44:29:fd:64:02:a9:bd:b7:d3:36:ce:40:
c6:56:e0:30:ca:8d:a1:e9:d5:12:0d:66:ae:91:01:31:96:4e:
bb:1c:c4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:39 2026 by rpki-client