Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: 34Z5Rr4iI79IXErpDdkfCYlACKNSX6/AuX+UCrZohEQ=
Subject key identifier: D9:9F:81:76:0B:AF:9E:95:B8:BB:9D:79:1F:F0:60:B8:00:EE:0B:36
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 019D3941A6D8DBFD68BDA419C2EC51376377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 11:01:36 +0000
Manifest this update: Sun 29 Mar 2026 11:01:36 +0000
Manifest next update: Mon 30 Mar 2026 11:01:36 +0000
Files and hashes: 1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: zLe0Xqhii019Ndf9e8mGu87ri75Ng/batPkmNOdPhZI=)
2: WPaT0Y7RS5CA12LK1l6IVoc8b5w.roa (hash: RbeOiouCG0/fdoKUcqWun90nLWJeLto+KTqvRhLoP/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a6:d8:db:fd:68:bd:a4:19:c2:ec:51:37:63:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Mar 29 11:01:36 2026 GMT
Not After : Mar 30 11:01:36 2026 GMT
Subject: CN=d99f81760baf9e95b8bb9d791ff060b800ee0b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:15:d6:36:47:4e:32:54:2e:82:80:c2:f5:
9f:11:41:a0:28:ab:7e:ed:6d:ff:4f:0c:d1:95:9e:
26:48:f5:f3:23:db:0f:ae:b6:21:bf:8a:53:f4:65:
da:ba:eb:de:d2:1f:91:ca:39:fc:ae:0d:6b:f0:d8:
76:eb:20:c3:ea:40:91:76:be:f9:b3:ae:28:31:b1:
80:8e:50:22:9e:87:e5:41:37:6b:d6:d3:a1:fc:17:
02:87:d4:bd:c9:6f:89:72:17:78:9a:b9:1b:04:83:
c3:1a:00:67:91:b6:1a:87:1f:cb:97:a9:e2:a6:ff:
c5:39:19:21:63:28:f8:fe:22:87:b7:53:3c:7f:18:
44:7e:2a:d3:1a:06:dc:d8:6c:c5:06:ed:ca:e1:22:
66:95:de:f5:ef:fd:84:e5:ba:17:18:22:b1:41:db:
dd:66:9d:34:9e:f0:74:94:7b:80:5c:77:c8:27:6d:
fa:64:7c:6b:33:31:82:6a:2d:d2:93:5a:da:f1:ae:
3c:4e:4d:15:68:cd:63:be:fa:93:43:19:52:46:a0:
06:41:13:ef:ca:79:36:83:21:73:f4:7d:11:f5:1c:
e2:72:a4:84:35:58:5e:bc:16:72:06:b7:90:7c:c6:
37:24:34:55:08:37:87:15:a1:d9:fe:20:02:df:93:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9F:81:76:0B:AF:9E:95:B8:BB:9D:79:1F:F0:60:B8:00:EE:0B:36
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4c:c9:6a:73:c4:32:95:07:20:50:cd:07:17:d6:7c:6a:e1:
91:2e:39:32:4b:69:70:df:96:a9:98:d3:85:57:11:ed:de:2b:
4f:2e:53:a6:86:66:23:5a:ba:52:88:a9:85:fb:2f:e4:ed:55:
24:0c:19:e8:7d:c3:8b:f0:3e:d3:fd:a5:e1:e5:42:56:29:45:
cf:3a:ee:df:cc:f5:95:6c:0e:5f:84:dc:e0:16:cf:39:4f:d5:
37:ce:5d:cd:e5:e1:4e:c7:72:3c:64:a0:e1:69:7e:03:bd:15:
1d:aa:02:86:5e:c6:d2:a6:fc:ce:59:68:fd:25:40:3d:2a:2d:
38:96:13:90:05:da:6b:90:96:34:c1:be:14:37:b8:45:da:0c:
83:5c:46:7c:26:9f:e2:7d:10:7b:a7:ad:13:19:bd:10:80:62:
c4:42:4a:9d:7d:b6:18:2b:92:86:f4:a4:32:2e:41:b7:ec:8a:
06:cd:d4:c6:6a:6f:27:0c:06:16:bc:d4:6c:b4:d7:21:2e:25:
79:45:2d:2d:6f:e8:3e:83:10:9d:1d:b8:22:da:f3:4e:54:18:
f5:92:cd:29:1d:6c:5b:5d:c6:d0:2e:22:18:bf:ee:be:e4:4b:
34:09:4e:99:d0:d2:07:01:64:a9:07:81:69:c3:7c:4c:f5:cc:
16:cd:34:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:09 2026 by rpki-client