Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
File: rY6Ff8AL4U7ZK554zDymm4rcJIU.mft (raw, json)
Hash identifier: Js1L3N5mQ6Zmk+8kOy9ZkdDMZ/sTLy9G4ZtOabMYPvQ=
Subject key identifier: CB:D0:30:07:0C:E6:7F:4F:39:B6:FB:58:11:04:CB:DC:AE:B6:64:62
Authority key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
Certificate issuer: /CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Certificate serial: 019D3A53DA550E64D8F0F8A7221FB6EFE26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 16:01:07 +0000
Manifest this update: Sun 29 Mar 2026 16:01:07 +0000
Manifest next update: Mon 30 Mar 2026 16:01:07 +0000
Files and hashes: 1: rY6Ff8AL4U7ZK554zDymm4rcJIU.crl (hash: iJeHvobFdbuTvwEVlGwoCa+cGsFHcBhAx5umejd3Ee0=)
2: z8ohAxVQDEBUpQ8RPkLaMBNHEug.roa (hash: pT90AwJRD9rVdUR8toxe1at3Xc13+2EF89ax44o0aWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:da:55:0e:64:d8:f0:f8:a7:22:1f:b6:ef:e2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Validity
Not Before: Mar 29 16:01:07 2026 GMT
Not After : Mar 30 16:01:07 2026 GMT
Subject: CN=cbd030070ce67f4f39b6fb581104cbdcaeb66462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:62:dd:5c:91:47:72:52:d3:31:70:9b:7c:07:
52:be:66:18:12:e0:91:06:6f:9a:73:0c:84:6b:eb:
63:86:a9:d6:7b:4b:6a:c7:c0:2a:c5:cf:57:79:1f:
c8:d4:3b:32:34:76:7c:82:5a:61:95:34:06:36:06:
8f:7c:b3:a3:8a:b7:9b:70:13:38:0c:c1:10:67:0e:
3a:96:cc:aa:3d:b1:62:5f:b9:3f:c7:a9:60:a1:72:
5a:e4:9b:4a:02:00:31:b2:00:52:15:ce:8b:9b:45:
71:64:b1:fe:e6:08:20:1d:9f:96:8f:9a:3f:56:69:
b3:62:65:9d:e2:97:33:59:52:0f:8f:ec:6e:e7:89:
02:f6:1b:17:62:bb:59:89:79:83:20:33:a3:7d:c2:
77:6c:38:1f:57:8d:85:64:2e:ed:7c:31:33:35:e4:
50:8d:fe:0d:aa:fc:61:ba:87:41:9d:1c:0d:76:10:
86:ef:a9:30:aa:4d:b6:45:2d:d4:c4:a1:52:18:ad:
ef:ce:e0:74:48:f4:44:f3:92:7c:e9:1b:c7:d3:a5:
26:dd:70:e4:e1:6f:0c:ef:d8:d8:06:f3:3c:9a:94:
34:eb:ec:5c:0d:db:ef:55:71:10:f9:a6:be:aa:52:
fa:70:3f:66:b7:28:cc:34:3f:3d:d1:89:cc:34:b5:
53:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D0:30:07:0C:E6:7F:4F:39:B6:FB:58:11:04:CB:DC:AE:B6:64:62
X509v3 Authority Key Identifier:
keyid:AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:64:8c:b5:ed:cf:0f:a8:cc:f6:a9:92:4c:0d:60:2f:eb:e4:
16:b7:ab:3d:ea:5b:21:5b:68:7b:b4:04:c8:b0:c3:35:b8:65:
46:97:b4:bf:03:f7:f5:96:b4:09:82:6c:7f:5e:46:69:c3:cf:
0b:95:cc:b7:e4:ae:39:30:ed:40:cd:69:be:da:6a:80:f9:08:
ad:53:c5:ac:4e:ed:de:ec:af:7e:70:1f:e7:54:18:37:51:5d:
d0:5c:75:57:88:42:82:47:29:79:26:23:dc:c8:ee:5f:3a:96:
ed:92:6d:81:d2:b6:8c:ca:a5:31:f3:91:70:04:79:b7:28:55:
b1:a7:6e:b0:34:68:ce:53:11:50:40:7b:99:4c:a3:78:99:44:
c1:2d:fb:93:f7:65:e8:4c:51:bd:08:ac:fb:48:e0:f3:2d:9c:
34:dc:48:1a:cb:90:79:67:60:51:1e:a8:d3:cc:ad:11:d1:00:
57:3e:b4:ad:1f:32:51:95:7a:88:dd:ee:dd:e1:58:db:90:fe:
1d:c4:2a:1d:1c:91:94:d1:81:0b:54:c5:e2:cc:3f:3e:30:1b:
1a:58:50:fe:2a:00:83:03:11:45:92:be:7a:8d:21:39:96:73:
ec:15:95:0e:1a:36:3d:21:e0:69:24:82:ff:2b:b6:5f:6a:a0:
cc:ab:aa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:54 2026 by rpki-client