Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
File: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft (raw, json)
Hash identifier: Xt5dUocpQx1/5/o3HnfOW9NiDpcHRxFvEcvuHvSAgvg=
Subject key identifier: 95:49:A2:19:6A:F6:48:31:0B:73:75:A2:F3:D6:03:EC:17:73:43:F3
Authority key identifier: F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
Certificate issuer: /CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Certificate serial: 019D386551C11C6F752B05217F190BC86A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:00:57 +0000
Manifest this update: Sun 29 Mar 2026 07:00:57 +0000
Manifest next update: Mon 30 Mar 2026 07:00:57 +0000
Files and hashes: 1: 5zhW36lGyfogiaElUfbWbhXt_NE.roa (hash: +j+wJnENL0rL/JlQ6DSpZDDPY7E8b83UH4Sgu3v056w=)
2: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl (hash: LoqfyIv2xxIqqWSq2VVg2vilSzSw26gI/vlXQaZ0zfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:51:c1:1c:6f:75:2b:05:21:7f:19:0b:c8:6a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Validity
Not Before: Mar 29 07:00:57 2026 GMT
Not After : Mar 30 07:00:57 2026 GMT
Subject: CN=9549a2196af648310b7375a2f3d603ec177343f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:b4:26:da:13:77:c2:ff:68:c0:23:eb:a4:
50:f3:97:a9:af:15:65:39:32:5d:1e:2e:ed:e7:3a:
c4:1e:22:4d:22:b1:82:b0:fe:1e:12:4e:3e:e0:97:
f5:05:bd:45:c7:87:98:2c:24:66:b7:ce:8c:aa:a1:
f6:11:7d:7a:34:7d:18:5b:d3:6b:9b:d0:db:48:a7:
c7:52:a8:ce:14:73:33:cf:7d:5b:37:da:43:89:ba:
4e:c2:68:d2:f9:56:d4:1a:d7:40:43:27:5b:d5:71:
fd:2a:41:b2:5c:f4:f0:dc:68:5d:56:cd:02:06:42:
70:aa:76:08:1f:3f:ca:1a:57:b2:94:0b:76:ec:53:
4d:68:50:5f:2e:0b:98:e5:c5:da:5e:b0:b8:7c:5d:
ec:0b:79:b0:cf:fd:29:84:f0:ec:8e:4b:08:b7:2b:
d9:46:15:22:d0:8a:9b:7d:e9:39:0e:6d:c5:22:cc:
78:3c:8e:6a:b3:b2:f1:48:70:32:ac:9e:b3:3c:b5:
ea:89:51:95:56:13:3b:3c:9a:ea:b3:a7:93:c9:c2:
9d:68:73:66:29:eb:97:f5:49:d5:b7:99:2d:15:0c:
95:cd:f5:af:d2:8f:df:5f:5e:78:53:d7:d7:a9:b9:
5d:f3:cf:8b:d1:36:13:aa:96:10:72:ad:94:78:fd:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:49:A2:19:6A:F6:48:31:0B:73:75:A2:F3:D6:03:EC:17:73:43:F3
X509v3 Authority Key Identifier:
keyid:F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a1:b5:15:fb:18:9c:6c:5f:bc:70:1d:83:42:ae:05:56:48:
6e:54:8c:61:3f:2a:82:96:1d:7e:59:6f:a3:b9:c6:c9:21:64:
d6:a0:f1:19:1b:90:c2:77:73:8d:d1:a1:3e:94:7a:13:bf:9b:
ed:4b:17:2f:01:b6:0f:68:a5:f5:fe:73:15:48:4d:4f:9f:cc:
1a:13:8b:88:6f:7f:d5:08:ea:01:9f:6a:ba:18:23:7b:b6:9a:
37:37:5a:f9:67:d3:9e:46:a4:c7:39:37:13:3c:f1:5f:ee:1a:
6e:c6:de:ca:7b:eb:37:1c:ae:e0:3f:2b:1c:02:c3:75:ac:c4:
0f:99:c5:70:0e:fb:c8:88:49:be:75:08:40:50:3c:20:f8:5c:
9b:74:04:d0:45:17:5f:68:34:4a:ab:bb:ef:d1:e5:9c:69:0a:
d8:67:3e:16:e1:56:5a:8e:70:e6:92:e4:56:32:dd:6c:4b:e7:
7d:f7:ef:81:72:e8:f7:dd:b4:6e:76:d9:aa:2e:cb:fa:c3:af:
a6:6b:12:1e:ba:43:db:03:20:85:88:2c:a8:9f:a0:5c:a8:eb:
33:cf:cb:f4:10:74:d0:8f:79:98:3f:a6:bc:5c:61:b4:11:27:
d6:1f:8b:08:90:f4:f8:81:fe:f0:f7:96:40:42:31:f6:61:0b:
33:66:54:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:38 2026 by rpki-client