Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
File: rmrw1fOCidNMIbpnxMOXh6QqZp4.mft (raw, json)
Hash identifier: gdvAY8F6yvqptulRRS1qIcTv29wFNhPzOXw7HyGFpcc=
Subject key identifier: 0E:10:3C:9C:3D:C7:F8:F9:D8:07:8E:D9:CC:C0:0A:7A:BA:61:18:1D
Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
Certificate issuer: /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Certificate serial: 019D38D357C5AADB17A3C6CB6918F478C7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:01:07 +0000
Manifest this update: Sun 29 Mar 2026 09:01:07 +0000
Manifest next update: Mon 30 Mar 2026 09:01:07 +0000
Files and hashes: 1: 7jEzRpfkM_lhZ7uAKRZvwSRQGNU.roa (hash: pz42e1Hyvu2YQLi28FAYwohQh8FXz6tczqllHjBA0EQ=)
2: XggtKq3xpWGXCHEG7oJDyVrafuA.roa (hash: Dw7wzvUkHqS4QhsFOClTO2lSejFZXMTyIw7n7pmXh3Q=)
3: rmrw1fOCidNMIbpnxMOXh6QqZp4.crl (hash: slGSSHu867vINckTCh/paZa+BLkWPc4kQiivNttIfvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:57:c5:aa:db:17:a3:c6:cb:69:18:f4:78:c7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Validity
Not Before: Mar 29 09:01:07 2026 GMT
Not After : Mar 30 09:01:07 2026 GMT
Subject: CN=0e103c9c3dc7f8f9d8078ed9ccc00a7aba61181d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:47:db:f8:1f:96:4a:f0:5a:66:65:b5:e2:
28:70:db:2c:74:22:a7:b5:2b:ba:92:71:1a:01:4a:
37:bd:a7:bd:cd:6d:f9:57:8c:75:57:41:58:f2:ca:
8f:97:0a:29:ce:c6:70:2d:96:09:19:9e:12:99:15:
01:fa:6c:d1:6e:d6:f0:fe:61:53:3f:ae:ec:10:00:
16:13:30:2f:31:8a:f7:2c:d2:53:a9:43:85:f0:13:
00:58:b2:d9:86:64:e5:ba:ef:7b:dd:28:a1:16:06:
7d:46:5b:b6:a0:95:4c:42:c6:16:4d:ca:66:a5:90:
71:fa:b3:0c:c8:43:eb:91:b5:12:00:24:a5:2a:96:
bd:67:29:bd:29:38:ac:9e:99:40:e7:3a:c0:2e:b8:
c1:74:56:25:7b:32:6e:5b:bc:13:2c:1d:83:ea:21:
76:1c:a2:11:ed:d5:01:9a:fc:12:f4:50:de:23:6b:
f5:21:24:2d:35:88:c8:57:1a:be:d0:1a:e8:1b:22:
e2:3a:8e:6d:69:5c:19:64:af:49:61:61:9f:c5:58:
cb:ca:67:6c:3f:ef:4b:43:62:f2:e4:5d:32:69:f1:
76:1f:a5:96:4e:9e:51:71:24:29:0f:6e:6c:ba:45:
7f:eb:f2:4d:a5:58:1d:bd:78:45:28:23:48:0f:b9:
60:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:10:3C:9C:3D:C7:F8:F9:D8:07:8E:D9:CC:C0:0A:7A:BA:61:18:1D
X509v3 Authority Key Identifier:
keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b9:b8:f4:ad:f7:62:98:b9:8a:ca:85:d9:b6:36:97:0b:63:
f1:a2:81:10:0d:e0:53:5a:dd:a2:04:2b:42:4c:2d:81:c5:c1:
80:c2:53:24:29:65:95:8e:08:e6:9c:b0:08:c7:22:53:35:9c:
ae:71:4b:94:73:77:42:f4:a0:1c:e4:22:58:98:56:46:dd:5b:
f1:79:58:ee:4a:a2:af:1f:5e:5b:85:d6:a0:12:f0:9b:7d:19:
4f:8f:49:79:35:b3:60:54:37:6a:13:55:b7:59:d7:9b:40:6d:
77:e6:ae:1c:3e:0a:30:01:73:d9:9f:c8:63:24:f3:0e:ba:5d:
d6:07:83:eb:4a:9b:3b:88:8d:06:04:da:6c:30:91:9c:7e:e2:
52:5f:72:79:03:83:ab:b0:4b:d9:63:fd:ac:60:79:4e:cc:28:
77:95:8a:1a:03:e4:a5:98:dd:5a:d4:7a:cc:a7:c8:2b:4e:29:
a6:ef:7d:15:0d:db:c6:ca:7f:f9:72:f4:0a:05:27:2d:b0:c7:
a6:a8:96:a1:66:db:0a:94:36:02:43:ac:0a:44:9c:fa:4e:94:
90:2b:2e:91:66:90:1e:69:a2:1a:f5:30:79:ac:46:7d:0f:54:
e7:7c:89:10:aa:e8:32:37:79:19:4e:08:48:19:07:07:e3:a3:
5e:ba:22:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:58 2026 by rpki-client