Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
File: dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json)
Hash identifier: 2goeUsmr/wPDFldiCZE9hXJCRXGwfD1rSFY2CLDyGUo=
Subject key identifier: 2A:97:76:06:9C:19:3B:9C:4D:2B:54:5B:37:47:7E:CC:2D:70:9F:41
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Certificate issuer: /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial: 019D38659D2A9DAC325DB1889383AA2D0A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:16 +0000
Manifest this update: Sun 29 Mar 2026 07:01:16 +0000
Manifest next update: Mon 30 Mar 2026 07:01:16 +0000
Files and hashes: 1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: PfdklxNQ7HvUf3Rw7rPDEwyD+yvK2W6ZsIpLXKw+XO0=)
2: jeUCTnllWBc2YjwSNbaBtlWcww4.roa (hash: A3urkixwNeWZh9C+aMoLes8n2HeLxR2S7cO9Wh2QMPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9d:2a:9d:ac:32:5d:b1:88:93:83:aa:2d:0a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Validity
Not Before: Mar 29 07:01:16 2026 GMT
Not After : Mar 30 07:01:16 2026 GMT
Subject: CN=2a9776069c193b9c4d2b545b37477ecc2d709f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:46:bf:4e:10:8c:88:3b:90:2b:21:33:65:
2e:38:97:27:69:d4:48:71:f3:9f:e8:8b:0b:00:9e:
9e:c2:af:7c:e0:ba:48:23:1e:bb:f8:c7:5b:58:a3:
21:97:66:62:30:4d:97:4b:4c:2a:29:d5:84:75:c8:
2e:6f:21:53:b3:d3:4c:f7:88:8e:d2:fd:87:bb:e6:
f5:07:51:11:f7:5e:ae:89:76:41:ab:67:2f:26:2a:
84:e7:bc:6c:e0:0f:fa:69:50:cc:e4:9f:54:ca:0b:
63:04:90:9d:86:00:d2:4b:1f:8c:eb:04:3b:16:d0:
6e:99:eb:dc:87:c4:c4:09:b3:08:d9:6c:9b:3b:dd:
7f:c4:77:79:43:ae:8c:b4:1b:be:8e:59:87:64:db:
00:ab:c2:b0:94:e2:85:15:66:93:8c:69:2f:3a:8d:
f6:58:9c:cd:f9:23:36:85:b9:bf:cb:64:16:ed:06:
1f:74:e3:98:86:2f:a1:de:b4:7c:e2:1e:1f:7a:d6:
2e:d6:cd:ec:1c:6c:12:af:cd:f3:62:44:5d:24:78:
83:41:85:8f:b1:24:8f:94:cc:99:32:cf:e5:17:40:
7a:15:4f:3e:4c:36:80:0d:5a:27:77:c1:b9:e3:92:
cf:18:51:32:f2:ad:20:6b:fd:10:43:e4:d7:b0:5f:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:97:76:06:9C:19:3B:9C:4D:2B:54:5B:37:47:7E:CC:2D:70:9F:41
X509v3 Authority Key Identifier:
keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f5:3e:6f:11:ed:0e:0f:6d:f7:1f:b9:bf:6d:5b:78:e7:63:
7e:98:cd:42:99:7a:1b:33:a3:1b:b6:52:03:48:69:fc:b4:3a:
de:e8:9f:08:38:90:e6:e1:c2:43:b5:dc:a1:b9:ff:0c:32:58:
6c:74:76:11:00:3a:e9:67:0d:53:5a:4b:66:63:77:81:72:a4:
b2:64:a9:ce:39:9b:52:51:00:22:85:27:2a:bf:fb:07:cb:4d:
22:f1:3a:14:ce:02:14:62:72:7a:a2:e4:b2:25:87:9a:bd:09:
3f:03:7c:ae:da:c8:5b:58:d7:bc:2e:c0:f4:fa:95:9f:da:aa:
d1:bf:7a:6f:99:74:5e:e2:02:fe:38:69:65:37:df:2e:c4:ee:
e5:4a:93:2c:37:0f:53:40:d6:ef:86:0b:7d:a3:51:92:38:1d:
15:3a:9b:b6:00:5e:32:e4:cd:23:7d:e7:50:d4:9c:b0:f5:ed:
e2:45:bd:40:b5:c3:48:54:c7:ee:9a:fe:f5:69:0c:81:06:ae:
cc:ca:37:a6:a5:7b:e7:8f:82:1f:32:e0:aa:a2:4f:a1:c0:4b:
1f:59:e9:10:07:e8:6f:12:f2:38:42:b3:eb:f2:d6:ca:26:ac:
6e:32:9b:55:81:be:58:c0:cd:b1:3c:63:ea:ca:38:5c:76:03:
a7:e0:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:50 2026 by rpki-client