Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
File: _ieWxamFRTLp7WONHDmlQcLYlSw.mft (raw, json)
Hash identifier: LwHrXvLg8T5L0MTnZRTBmcDWO6JL/oonO4/wdhKkhGc=
Subject key identifier: BC:85:24:C5:01:55:F4:B5:01:44:94:CE:33:41:06:90:7B:23:E9:DF
Authority key identifier: FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
Certificate issuer: /CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Certificate serial: 019D3752F732BD9864E82991F58A5738CA3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 02:01:17 +0000
Manifest this update: Sun 29 Mar 2026 02:01:17 +0000
Manifest next update: Mon 30 Mar 2026 02:01:17 +0000
Files and hashes: 1: 7GkwyhqrlyHfzlV-65vdln4ct9E.roa (hash: s/NkhsHZT4RkFY/uOZ3iGPCQESayKRGk801KSb+Zysk=)
2: _ieWxamFRTLp7WONHDmlQcLYlSw.crl (hash: 48pBRnkyF9h2sukMcW7V7S5LnOeCBTQ3Su72yt9an4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:f7:32:bd:98:64:e8:29:91:f5:8a:57:38:ca:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Validity
Not Before: Mar 29 02:01:17 2026 GMT
Not After : Mar 30 02:01:17 2026 GMT
Subject: CN=bc8524c50155f4b5014494ce334106907b23e9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:f2:f0:25:8a:5e:6e:bd:43:e9:d7:32:74:
de:fa:bc:fc:4c:ba:3b:8c:d8:43:1a:ab:bd:89:a9:
1c:63:74:9c:f1:78:21:5b:a4:69:0d:43:4c:d0:ed:
14:26:bf:30:1c:4b:96:10:66:59:61:95:1e:f5:41:
4e:e3:65:63:42:8b:01:e2:de:9f:e9:80:5b:c2:d4:
eb:e8:0f:5e:80:43:75:76:09:55:23:76:e5:56:3f:
f3:5f:b2:dd:b7:1a:12:e6:75:24:f3:3e:f2:f3:9c:
00:15:41:9e:b2:9b:5b:4f:c0:88:ac:7b:1d:4b:aa:
c5:9d:a8:95:41:4b:28:9f:a0:df:22:2b:f1:2b:ec:
8d:bf:8a:aa:6a:1b:69:f7:a6:09:ff:b0:65:aa:92:
4c:54:a3:61:ff:43:2f:67:89:1c:54:e6:bc:49:2b:
55:47:a1:20:0c:27:22:d0:59:81:5b:c3:db:2f:f0:
48:64:4d:1e:73:32:3d:45:74:c5:6f:24:95:d7:85:
90:85:e6:e2:87:38:47:88:b8:3f:24:82:5a:aa:07:
c4:55:4b:f3:cb:62:71:5a:cc:0e:69:93:41:1d:bb:
4c:5e:c5:cc:95:5c:a1:79:84:24:6d:90:ca:49:f1:
06:e2:1f:7e:e4:15:cc:e3:88:1c:bd:28:d9:b2:66:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:85:24:C5:01:55:F4:B5:01:44:94:CE:33:41:06:90:7B:23:E9:DF
X509v3 Authority Key Identifier:
keyid:FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d8:ad:78:af:ff:ec:14:97:26:2e:24:6c:82:e4:d2:38:e3:
c6:fc:9f:aa:40:e3:ce:59:21:73:62:ff:4e:22:b3:e1:c5:2c:
09:50:c9:cb:08:41:40:cf:fe:e3:aa:36:bf:f3:e4:c5:b7:cf:
5d:db:ba:5a:9d:f3:bd:2e:c5:ac:02:3a:d8:2b:94:fb:14:c0:
7d:7c:56:6e:e4:0c:46:f5:a9:8a:b7:53:93:2c:0f:98:70:f2:
3d:b9:e1:6d:6e:6e:45:e6:5f:4c:5b:65:6e:5a:6a:a8:a8:f4:
66:f0:68:fc:79:c1:8d:14:ee:8f:d1:90:77:20:f8:59:56:de:
35:37:d5:14:ef:c4:da:7a:14:c2:82:ca:3d:15:72:6a:51:0e:
b6:73:c5:a0:92:bd:02:7a:57:ab:cd:ed:85:c0:c1:10:2f:3c:
7f:f3:60:47:de:81:26:65:26:1e:3a:6f:85:ea:1f:89:27:44:
86:d2:44:7c:3c:f4:01:b2:cc:28:a0:bf:af:a9:1a:65:5f:97:
d5:b7:56:9c:20:98:32:51:ad:e6:24:98:89:44:97:0f:ad:5c:
a0:34:77:be:14:35:f3:18:0e:b0:95:59:a4:ac:4b:d5:c5:8d:
ca:00:9e:5a:f7:cb:a6:be:a3:4c:a2:c3:3c:34:c0:4e:fa:6d:
dc:ab:03:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:11 2026 by rpki-client