Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
File: No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json)
Hash identifier: HfdSiTc0//DSu85/53LkpsN8gZO5b5yt2u+ecqbKmPg=
Subject key identifier: 6E:05:4F:EE:C3:7D:91:59:81:48:0B:85:A1:D4:46:D3:BB:01:E3:0C
Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
Certificate issuer: /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Certificate serial: 019D3909CEC05A4BADA1DF7F59F8F518522C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 10:00:37 +0000
Manifest this update: Sun 29 Mar 2026 10:00:37 +0000
Manifest next update: Mon 30 Mar 2026 10:00:37 +0000
Files and hashes: 1: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: R1nhU5RhF5anWAZPQJ+WTRCNJAgf4fqfyNJ/cdD4RdQ=)
2: oDdOV619IIidVtQMM95kbm0cDIM.roa (hash: 2Y37aAuGl7F6czPU7t6gdZkIffZAHGFmwGBIrR4PFQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ce:c0:5a:4b:ad:a1:df:7f:59:f8:f5:18:52:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Validity
Not Before: Mar 29 10:00:37 2026 GMT
Not After : Mar 30 10:00:37 2026 GMT
Subject: CN=6e054feec37d915981480b85a1d446d3bb01e30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:40:7e:52:79:69:2c:e3:d3:75:52:26:77:fc:
d6:86:a4:b8:3b:3e:32:f4:36:68:3a:b4:81:03:5f:
40:56:cc:6e:d4:70:84:9b:0f:e5:0f:07:47:00:45:
e7:92:3e:2e:5e:d9:b0:5b:1d:d1:a3:9d:88:74:5b:
f3:02:18:6b:c0:6b:cf:d8:46:9f:d3:56:00:3f:ad:
0d:38:46:ce:e9:04:42:13:17:56:83:6e:1d:60:88:
45:c8:e1:53:ac:8e:b6:be:ee:7a:1a:d8:1d:b3:e0:
00:1a:4e:81:07:6a:65:73:69:84:95:f2:77:41:2e:
41:5d:c1:77:74:0b:70:9b:b2:69:60:9c:85:89:92:
78:bb:db:07:0a:ed:16:3f:09:d2:0e:42:0d:14:aa:
aa:aa:e3:23:c8:87:ee:ec:f6:3d:a1:a7:e1:fe:52:
13:be:1f:3d:27:e3:c3:a4:84:51:6c:50:9b:f0:be:
b5:c1:84:e9:16:1f:ee:db:5e:45:2e:4f:46:c3:1a:
96:b5:7f:62:d3:79:92:77:34:38:cd:4b:71:e7:11:
33:2f:a4:1f:74:5c:6e:e2:f5:c5:d9:02:88:bd:15:
3a:11:53:a3:ce:a1:67:49:ce:b0:7a:d2:c1:b6:4f:
2a:8c:d5:88:1b:01:1f:18:65:9a:29:d8:77:38:51:
86:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:05:4F:EE:C3:7D:91:59:81:48:0B:85:A1:D4:46:D3:BB:01:E3:0C
X509v3 Authority Key Identifier:
keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b9:c0:95:e6:21:85:ff:4c:d0:e3:9b:fd:bf:b0:c7:21:3c:
f4:e7:9b:7a:ec:cb:fa:9e:5a:0f:e7:d8:ca:c4:75:f2:4b:75:
d4:3d:7c:af:d0:27:d7:fa:58:bf:58:e8:a3:b9:c4:6c:14:a6:
5a:1f:4a:13:1d:3c:4b:56:63:2c:ce:08:34:2e:2b:a4:46:4f:
2c:47:3f:e3:b9:14:db:80:93:cd:ab:05:75:38:bd:a0:a8:a0:
fe:ab:70:d4:fb:88:b9:9c:3b:39:c8:92:cd:df:30:fa:1f:5c:
64:1e:c3:68:8b:bd:d3:21:8a:1e:48:29:d1:db:81:13:c2:b9:
10:67:d1:eb:e8:3d:87:1e:8a:c5:c3:17:b2:87:82:6a:c1:b5:
d8:30:e0:cd:39:53:e6:f7:04:eb:66:fc:0f:78:2f:1d:ce:00:
69:c8:d9:aa:dd:53:fe:ad:93:79:18:cc:0f:5e:08:75:51:39:
e7:fd:e8:af:07:be:e8:e8:09:a0:42:19:f5:c7:44:26:dd:62:
be:14:22:43:02:33:c7:b2:fc:53:f9:75:7b:7e:d0:a6:4f:4b:
c4:88:08:4d:63:fe:8a:1d:37:6f:80:04:65:f1:ae:ae:9d:03:
71:6d:ed:cc:9a:2e:5a:05:76:f8:0b:e1:d3:09:45:ec:d6:05:
c6:0c:51:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:34 2026 by rpki-client