Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: t0bRtk9Wz0CFWMMZMHPDSMoAeLrfBIT8WaEiMoXWbyQ=
Subject key identifier: DF:32:57:31:68:57:F1:C7:83:9B:51:36:6B:06:32:55:1F:9F:B6:32
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 019D37F6FE84F5A08AC955298EB8A175438D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 05:00:27 +0000
Manifest this update: Sun 29 Mar 2026 05:00:27 +0000
Manifest next update: Mon 30 Mar 2026 05:00:27 +0000
Files and hashes: 1: 8NckC_oseoG1c4-4ea0CrcpBLdM.asa (hash: 8hX5tr+7WeyJg0xyopH30d0iH2Eoc2imGEvt1yJnVGo=)
2: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: B52VgN7FiDmoB/HRHITtL8O+Xoli4prN8xDLGrZOhV8=)
3: hxaq6eiJQ6KIeDkuFuKpk9DlMmM.roa (hash: xzNRvq9UxlokWK6wW9763CTDxuLBGl6gUz0jxPwvuI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:fe:84:f5:a0:8a:c9:55:29:8e:b8:a1:75:43:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Mar 29 05:00:27 2026 GMT
Not After : Mar 30 05:00:27 2026 GMT
Subject: CN=df3257316857f1c7839b51366b0632551f9fb632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f7:6c:eb:c7:13:3d:a2:af:eb:81:4e:9f:af:
69:9d:cc:9c:9d:84:b8:9a:ee:38:a2:4e:6b:98:12:
7b:4f:73:dd:55:89:45:9a:df:68:05:df:1a:a8:7b:
a1:7d:77:1d:50:9c:4d:d1:8d:74:d5:07:0f:d7:06:
2e:54:b2:06:63:34:fc:17:70:ef:78:47:ab:32:b7:
f1:93:77:45:38:10:71:e4:6c:f9:6b:f7:09:12:e7:
fb:37:ff:84:41:3f:78:23:91:b3:03:20:ff:08:25:
5d:da:39:e4:b6:83:33:7d:13:50:8c:ca:ed:bb:1d:
e5:3b:3d:5d:99:6a:7a:98:95:a8:38:19:1f:9c:9f:
7d:a9:0c:b4:bb:a0:4a:f1:4d:d5:f3:8d:54:a7:1d:
6e:bd:e4:9c:2a:38:09:01:c3:55:1f:dd:0a:07:9e:
ea:d4:29:2f:93:0a:c1:3c:a4:2d:f8:dc:7f:d4:12:
26:a3:48:33:d0:25:d5:78:9a:c9:b9:c1:e6:d0:9e:
8d:24:63:2d:ba:54:ea:63:b7:1b:28:03:38:18:0b:
82:01:98:4f:eb:b8:ab:8a:26:c7:93:fe:72:6d:9b:
c2:13:4d:fe:cf:bb:ea:dd:14:e2:67:9d:4d:73:4e:
54:78:05:71:5d:ee:9a:d5:f5:f0:34:d8:80:ac:e5:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:32:57:31:68:57:F1:C7:83:9B:51:36:6B:06:32:55:1F:9F:B6:32
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b1:7c:af:3c:d2:67:74:80:9c:be:00:c2:e9:e0:5b:40:7b:
a3:ac:d9:ae:3d:92:59:a9:93:dc:cc:a3:6e:20:92:00:c2:b0:
03:93:b6:d1:cb:43:41:c5:bf:85:38:f2:42:37:5e:02:42:51:
46:a8:4d:f6:9f:60:0b:b2:fb:d6:55:a2:36:7a:e8:02:66:07:
e4:3f:c6:ce:3f:ee:0f:bb:7c:b7:a1:ca:ec:fc:44:f5:ff:0b:
29:f1:46:14:0b:a7:ea:d3:5f:a7:9a:b5:08:9c:75:bc:f8:3e:
cd:db:08:6f:e1:46:54:88:40:38:eb:58:15:23:69:78:80:65:
e7:47:cd:60:33:7b:aa:62:87:01:68:37:02:4b:22:b3:5d:1c:
87:08:a1:c4:e0:d5:a8:36:39:cf:83:4a:ed:1c:3c:e5:01:8c:
3c:2d:3d:52:e1:4c:66:f8:f8:88:ba:04:5a:a9:b7:26:8a:1b:
0a:78:31:c6:72:de:4a:2a:b0:af:62:10:6e:be:09:69:6d:df:
af:fd:a7:20:ff:50:e2:be:bd:0f:06:57:7e:02:f8:d5:f0:76:
a7:68:46:34:7d:d7:cf:89:d1:74:1b:15:93:9c:e3:53:ff:a6:
12:dd:79:23:45:47:21:94:d5:4a:91:ad:43:f2:c6:ab:5f:c8:
4c:4e:da:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:43 2026 by rpki-client