Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
File: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft (raw, json)
Hash identifier: i/OuQ9MDAc1xgDtSxiNwlhhZsuJYbpGfT+oUgBf3LPo=
Subject key identifier: 1A:7D:CB:E9:39:D0:15:95:B6:E5:F2:44:D9:67:FF:1E:EC:4D:6B:F4
Authority key identifier: 77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
Certificate issuer: /CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Certificate serial: 019D382E962EA9E20E918A58DA87243226FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:01:10 +0000
Manifest this update: Sun 29 Mar 2026 06:01:10 +0000
Manifest next update: Mon 30 Mar 2026 06:01:10 +0000
Files and hashes: 1: cjO-JSKeIeKfhSr8BfkC9JUrsaw.roa (hash: FDKs6XQEKS17A+eX40GCtBIucy/T4VULlaGZ/uQb+zQ=)
2: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl (hash: mSN/jTIFp6yyX8WwPCI1+F7hFKKUvefAUmX5S+Cf85s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:96:2e:a9:e2:0e:91:8a:58:da:87:24:32:26:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Validity
Not Before: Mar 29 06:01:10 2026 GMT
Not After : Mar 30 06:01:10 2026 GMT
Subject: CN=1a7dcbe939d01595b6e5f244d967ff1eec4d6bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b7:b1:26:bc:ea:5d:d3:d6:26:e2:cf:fd:89:
c7:5e:ba:31:4f:7a:ec:b5:66:2b:72:8e:55:37:bc:
b5:9b:20:3b:bf:e3:7e:d2:c2:c8:a3:26:3a:de:9e:
6a:99:ca:ee:27:10:30:66:53:ca:29:ed:bf:e3:f9:
cc:c5:15:e9:b5:75:e7:2e:21:42:4f:9f:26:22:9d:
1b:29:a7:5e:9d:57:3a:d3:74:13:a8:c6:46:e9:26:
a7:2f:d8:74:a6:f0:a4:e2:c6:93:e4:7a:a9:29:65:
44:c1:9a:d1:3a:05:99:d6:cb:48:24:7f:45:86:01:
e5:80:3d:8b:15:42:6c:97:d9:93:4c:63:e7:d7:6b:
c6:77:97:fb:54:96:b4:7d:0f:a0:74:7a:65:06:80:
1f:99:42:6c:a1:3f:41:16:82:18:c2:56:52:fd:2e:
ac:14:16:59:69:f1:44:10:a0:2e:62:3e:90:7b:60:
19:d4:ca:3d:f0:71:2b:25:ac:08:d6:de:4c:98:0d:
eb:5e:f3:2c:b8:e0:d2:ec:66:d2:b3:45:03:6f:2f:
f2:fb:b3:f0:42:fd:5a:c5:6c:8a:49:5c:45:05:d8:
f2:7c:5f:51:be:ce:ea:55:cd:f3:87:1b:a8:55:eb:
7a:a5:3c:73:a5:7d:dd:67:bf:ad:9c:a5:ca:30:03:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7D:CB:E9:39:D0:15:95:B6:E5:F2:44:D9:67:FF:1E:EC:4D:6B:F4
X509v3 Authority Key Identifier:
keyid:77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e9:c8:7b:5e:8c:0d:c2:59:3a:5f:3c:c8:d9:1c:3e:22:b9:
fe:0b:be:9f:84:ea:44:ae:da:6e:f1:3a:7f:d7:87:6b:23:fd:
9d:1d:b6:ac:cb:97:54:da:28:ed:49:06:10:73:8c:45:66:c1:
e8:f6:36:e2:28:59:0d:bb:19:68:46:63:d5:c7:21:b9:f9:b0:
f4:96:47:5f:39:20:a6:38:08:06:10:c3:fe:11:7c:12:82:52:
e1:1e:78:68:85:f4:d2:77:fa:86:52:a8:48:a3:36:d4:38:45:
09:2d:cd:18:31:6e:84:e9:49:58:4b:a3:d4:9f:17:4e:27:82:
07:8f:54:ed:90:78:24:8b:09:b4:68:ac:76:bf:69:af:50:d7:
ef:ac:ee:ce:f5:db:b8:ae:91:b6:43:bd:bb:64:96:c0:07:40:
55:15:e5:0f:8b:5c:ef:b9:bb:f3:e2:37:ac:0c:3e:b2:3a:94:
f3:a1:f9:5d:ae:b4:11:cd:8b:ab:3c:28:af:ae:8c:2d:7e:36:
1b:c7:04:3f:bc:9e:09:94:98:62:09:21:87:24:d5:38:d3:cd:
3f:b6:a6:65:ce:05:49:1f:ed:7a:4b:ae:f8:96:cf:79:cf:0f:
13:17:b2:a7:46:01:3b:ea:38:d1:c4:06:88:e3:8d:82:01:9d:
d6:f9:6c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:13 2026 by rpki-client