Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json)
Hash identifier: KV64qw/00bWfcSUYAKxWRkNJaRS3PSGKgP0TgYIX8A0=
Subject key identifier: 2A:DE:54:7E:5A:2E:67:A0:08:D2:95:56:C8:EF:75:FD:60:BC:03:62
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 019D37530B375D838A29D3647B4544A1B2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 02:01:22 +0000
Manifest this update: Sun 29 Mar 2026 02:01:22 +0000
Manifest next update: Mon 30 Mar 2026 02:01:22 +0000
Files and hashes: 1: WBZ4Ns1KlqrebDqaMN4GOQg5rUw.roa (hash: yOstMXBtzsYtaixKzlv1YIAu5cES+ZEO3HPCVKprX3s=)
2: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: ipz2QL6IbBKfphY2/Ry7k4YP97+i9WIFiEXf75DGauc=)
3: y_vc6s_Py2qwffoPUemYyQ3C93I.roa (hash: jTDTDDTAp7a9jlbajKDV/IreUhiB7BfxphmCimNa3V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:0b:37:5d:83:8a:29:d3:64:7b:45:44:a1:b2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: Mar 29 02:01:22 2026 GMT
Not After : Mar 30 02:01:22 2026 GMT
Subject: CN=2ade547e5a2e67a008d29556c8ef75fd60bc0362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:7e:5d:2c:a9:41:28:39:ca:86:3a:1f:da:
f8:c2:2b:54:be:84:58:79:e0:33:63:7f:cc:03:0b:
c1:6f:bd:61:2d:e6:c6:47:7b:fd:f0:ee:0b:22:3c:
8a:72:d9:4f:16:1b:29:48:6a:bf:ee:a8:e0:48:21:
65:4e:51:14:00:38:15:6d:35:0a:8c:c8:f9:09:76:
1c:e1:e5:e2:ce:8d:64:f9:fc:15:ad:f8:79:fd:ce:
bd:3c:a2:95:54:c3:3a:53:3d:71:dd:82:e4:30:38:
96:8f:dc:5e:02:aa:f1:90:c8:cd:8e:79:b2:aa:a7:
85:aa:ad:44:c7:d7:1f:5b:15:36:9e:43:83:07:3d:
ae:71:a8:b9:98:57:5f:3c:cf:4f:3d:1e:34:01:97:
e6:64:cb:69:20:3a:43:c8:49:22:32:a0:e2:7f:63:
14:9e:1d:17:7d:45:2d:39:26:2e:25:66:d3:03:91:
08:56:29:3e:48:27:af:12:96:e2:30:63:b6:a2:d2:
20:f7:30:0f:64:48:83:fb:0d:02:84:8b:1c:25:93:
0d:91:f2:f2:ba:c3:fb:ea:ed:75:7e:e6:75:c4:9f:
2d:86:5f:ac:97:15:f1:5a:c7:f8:2e:d2:c1:48:46:
f8:4f:7e:07:e3:8b:2a:2a:94:27:9c:35:a1:a7:8c:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DE:54:7E:5A:2E:67:A0:08:D2:95:56:C8:EF:75:FD:60:BC:03:62
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:91:26:27:2f:8e:a0:de:39:fd:c1:ca:a4:bc:f7:0d:d0:0f:
7b:83:b8:37:05:13:d9:61:99:f7:cb:43:8c:50:7c:87:6a:ea:
42:80:42:04:85:7e:67:5c:95:f4:fd:76:38:11:b0:6d:c5:30:
ab:ca:ab:fe:24:42:3b:57:0b:af:ee:87:44:bf:fd:82:1f:df:
de:ce:e3:a8:4a:bd:f1:be:f6:eb:c2:cd:9c:74:1c:2f:63:75:
99:37:a3:0d:bd:a4:37:3c:93:80:81:0d:a2:a7:71:0d:20:a2:
2b:0c:eb:72:95:c4:c9:12:c1:43:ad:63:27:11:91:8a:c7:4a:
82:65:88:b5:2a:2c:ba:21:1b:70:35:ed:35:c1:ca:73:c3:15:
ad:00:45:46:06:c7:70:61:96:f3:93:45:48:65:13:35:df:46:
f3:f2:16:f6:41:0a:d2:13:28:0c:d3:b9:c4:e1:1c:36:d9:4f:
6f:69:49:d7:8d:4a:98:00:25:4a:42:bb:c9:d1:7a:1f:56:54:
f3:f5:ea:26:cc:d6:76:80:e2:84:a0:11:9c:2e:61:a8:ed:70:
46:a8:57:14:16:b4:a5:01:5e:d4:b1:5d:47:7b:70:f3:97:2c:
33:22:8c:13:10:da:21:73:5b:f5:f4:b8:b4:0b:52:1f:65:48:
67:52:0f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:22 2026 by rpki-client