Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier: kw+FHAcJ6SQWs3uU6vabLR8GKPzgHi8rtLyruSXXYtA=
Subject key identifier: CC:93:10:9F:E3:C2:A1:06:5D:B6:1A:35:EA:A1:C2:E9:52:91:0A:DE
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial: 019D37C085363958E5EE22FDD2111A059E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:56 +0000
Manifest this update: Sun 29 Mar 2026 04:00:56 +0000
Manifest next update: Mon 30 Mar 2026 04:00:56 +0000
Files and hashes: 1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: L054cuReqtNpo4zZpUTBwLzdG5M0nZWSq9FJ3vhBotg=)
2: DCqk_IhQ4FSiE_K9oD22DV8FaxY.roa (hash: NtlKgarvCVLW792kP4u1993m8xjj7hSbfL1JoLagIyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:85:36:39:58:e5:ee:22:fd:d2:11:1a:05:9e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Validity
Not Before: Mar 29 04:00:56 2026 GMT
Not After : Mar 30 04:00:56 2026 GMT
Subject: CN=cc93109fe3c2a1065db61a35eaa1c2e952910ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:a6:75:31:0e:74:d7:50:00:4b:2d:c6:94:
f4:ef:71:ba:cb:6c:3d:87:50:a9:27:8f:cd:a8:c5:
28:6f:b2:66:65:77:f0:09:e0:fd:84:c6:58:39:74:
c6:f8:fa:52:97:15:fc:70:8d:8f:db:1b:61:f8:91:
44:a1:0a:be:32:5d:64:f0:c8:cb:34:6e:97:9b:ac:
f0:c1:1d:5d:b6:73:80:56:77:8b:b3:b4:56:c7:47:
5a:66:cf:d4:18:86:3e:9e:70:93:fe:de:ec:0f:b4:
ee:fd:3d:a2:a8:ac:32:ec:b1:ad:9c:23:57:f1:a7:
af:8c:09:10:76:ee:ac:dd:93:ba:ee:91:3e:f2:73:
45:29:da:6e:ac:13:aa:cb:49:f8:5e:4a:97:32:fc:
44:1a:2c:eb:ae:26:6b:be:c6:f4:6c:b5:1c:a5:5c:
9d:5f:09:62:a2:20:32:d1:1e:f1:86:10:80:b8:bc:
d2:ce:e9:ed:2b:ec:8f:ef:48:9b:8c:4e:36:04:15:
ac:1b:b1:8c:74:0c:35:12:b3:83:ff:c8:3b:85:29:
b6:1d:b4:e4:76:be:e0:19:c1:7e:b0:09:02:0c:4c:
9f:95:17:ae:19:dc:c6:15:9b:18:2b:e1:13:57:84:
11:60:eb:e8:7a:de:7f:de:d5:4a:1b:67:3b:a0:68:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:93:10:9F:E3:C2:A1:06:5D:B6:1A:35:EA:A1:C2:E9:52:91:0A:DE
X509v3 Authority Key Identifier:
keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:88:80:25:17:04:03:5b:d2:c2:ca:02:80:e5:e1:92:fd:5a:
11:f5:82:66:f6:0b:df:f4:2b:71:6e:a9:10:a1:4d:cb:07:d7:
ed:d8:8e:0c:ae:f5:13:e7:5e:0e:77:96:a0:40:f8:e8:fa:df:
07:2b:5e:c3:39:62:0f:86:02:df:c4:30:31:d1:98:8f:72:32:
d0:c4:3b:41:0a:cd:62:27:c0:8b:2d:1e:46:d5:c6:91:dc:fd:
fd:ed:d0:d6:27:ac:6d:74:d9:97:2e:bd:65:46:15:09:81:96:
ba:aa:3d:43:68:58:66:90:e9:c0:62:59:b1:fb:3f:33:fe:79:
7a:21:60:97:2d:e2:1f:98:01:1a:6e:b6:e4:89:6a:d0:24:b6:
98:74:0f:66:90:ba:2a:09:b5:2e:49:a2:a7:c7:21:7b:b5:79:
68:68:72:a9:a1:44:90:9e:b3:ac:8f:9a:c0:41:2d:c5:fd:a1:
14:97:09:4e:7b:0d:bc:45:a9:d8:15:27:20:19:07:35:df:ac:
d8:ee:70:c2:66:7e:52:ef:86:13:29:ff:f7:7e:71:5b:b7:5b:
f6:7e:b8:b6:68:9f:43:b5:67:5b:b0:cf:e1:33:4c:b7:f5:a1:
bd:be:67:21:af:03:3f:00:e0:3c:ed:82:8d:88:da:f6:85:3d:
03:60:c7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:16 2026 by rpki-client