Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
File: fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft (raw, json)
Hash identifier: LfA2v7HYOGVIN3E7xkEycYDpJ3JWeY+rdoXQoDSkM1A=
Subject key identifier: 12:CA:67:18:9D:5A:12:00:4B:B1:DB:44:C5:28:47:F6:CE:DA:75:C9
Authority key identifier: 7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
Certificate issuer: /CN=7c3846589a3b395b3758773da3d9f13334c72038
Certificate serial: 019D3940907568BD02D381895090F79D5A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 11:00:25 +0000
Manifest this update: Sun 29 Mar 2026 11:00:25 +0000
Manifest next update: Mon 30 Mar 2026 11:00:25 +0000
Files and hashes: 1: fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl (hash: HCAeAtplgbNCKLWYhK1wXD5aDwJoF4fNBN1kSBA7zQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:90:75:68:bd:02:d3:81:89:50:90:f7:9d:5a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3846589a3b395b3758773da3d9f13334c72038
Validity
Not Before: Mar 29 11:00:25 2026 GMT
Not After : Mar 30 11:00:25 2026 GMT
Subject: CN=12ca67189d5a12004bb1db44c52847f6ceda75c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:55:f1:07:97:79:17:a3:6d:8f:a1:f8:7d:
f9:29:28:7c:c9:45:e8:87:77:57:64:c3:95:0d:ca:
31:9c:68:2c:73:8c:40:02:46:d9:80:63:bc:cf:d6:
b6:7e:eb:a7:5d:45:3d:10:3a:95:e2:4f:8b:fd:2a:
f7:c2:08:ef:8f:ca:b0:97:19:f4:6c:69:f9:a1:27:
9b:74:da:e6:f0:4b:c9:68:42:0e:f0:46:55:8e:bb:
6f:31:aa:11:9f:bb:10:b0:d4:b4:ce:27:8d:20:63:
e7:6c:56:05:63:60:77:0d:05:13:cd:14:50:9b:2d:
eb:f2:7a:a7:1b:1f:6b:86:1b:2d:62:73:42:d3:dd:
3d:65:a5:64:a9:bd:e9:f4:55:f6:ac:ea:47:97:de:
a6:9b:d4:99:12:9b:c1:9d:a9:48:b9:9c:e4:05:cc:
8b:82:b0:0e:1a:8f:25:f1:e0:6d:79:f3:26:c8:a9:
91:88:37:36:72:2b:12:b1:20:24:15:3e:be:f0:e5:
33:32:fd:2c:3e:73:45:bb:98:5f:8e:fb:20:80:05:
e8:29:d6:f0:1c:bf:f2:9d:76:29:71:99:c7:cd:c8:
e0:3e:94:dd:e9:6d:97:64:37:71:2b:a6:3e:f9:09:
c9:64:58:02:59:f4:23:f2:34:b9:45:03:d3:53:f7:
75:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CA:67:18:9D:5A:12:00:4B:B1:DB:44:C5:28:47:F6:CE:DA:75:C9
X509v3 Authority Key Identifier:
keyid:7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:02:ce:f6:52:f7:95:d3:32:bb:9b:f9:56:d3:81:62:18:0a:
ba:9c:5d:43:2c:ea:65:49:b1:f3:e7:73:61:9c:a7:b3:5f:4d:
38:72:06:cd:2d:af:33:38:62:b2:8a:19:3e:f8:62:33:c5:c4:
a2:bc:dd:bc:5f:ab:6c:3c:be:e9:60:8c:6a:86:0e:a6:2d:bc:
66:5c:85:7d:d9:04:a3:63:61:d1:ff:eb:89:dd:7b:50:83:71:
0a:b1:ad:ee:a5:a3:5a:df:85:31:0e:ac:88:66:10:1a:93:13:
f6:2f:58:a8:44:95:6d:f9:7a:6a:00:e0:30:72:ee:1c:64:94:
c5:c7:b0:98:79:0f:0a:e9:f4:e1:27:56:d3:06:3d:09:f6:d2:
3b:b2:1e:6d:3f:a6:83:67:9a:a2:44:f7:46:be:93:38:9c:3a:
a7:4f:88:e9:ac:9c:ea:04:c6:58:92:82:d9:18:3a:f6:69:51:
26:1d:17:07:65:18:ca:15:06:81:bf:b4:e9:dd:98:5d:2f:1c:
91:a7:e6:4e:e2:a0:1f:2b:84:27:5f:22:94:91:d9:1f:9b:9c:
ca:e5:39:1e:81:c8:ab:9c:fb:62:df:3f:04:4d:bd:c6:f7:13:
86:f5:32:35:a3:8e:f1:99:21:9c:82:b5:93:8e:4b:a7:8d:63:
39:a2:79:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:17 2026 by rpki-client