Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
File: MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft (raw, json)
Hash identifier: YwM073kGc/FTnt2qYh7i6O0rR1kzmzCpUSy1toZbU4k=
Subject key identifier: 4D:FB:C6:22:99:85:A9:2F:F2:77:A5:22:B8:AA:CD:C4:FA:AC:F7:14
Authority key identifier: 30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F
Certificate issuer: /CN=304a791dc74f2377232fbb07b6ae71240ab9555f
Certificate serial: 019D37C012CAC2B89485D8BFF4F8193059BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:00:27 +0000
Manifest this update: Sun 29 Mar 2026 04:00:27 +0000
Manifest next update: Mon 30 Mar 2026 04:00:27 +0000
Files and hashes: 1: DTTdYiDe4rcTCaN-iEKODwI-Eu8.asa (hash: DsmLYrnfk5AoSwzKsrv0DOGKLoF+nHgo9UgrFRmJvjU=)
2: MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl (hash: M+g+GrVhPLp+IB6qlGm6puqpKkXDE/JwFs/qJsWg0Eo=)
3: xJH_hObu47NQAEZXy5oLh9VkIAc.roa (hash: 4Dk7/rqnOwM68MYpX2SX9kUT9VCrAuSm9jEE6Z2mvJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:12:ca:c2:b8:94:85:d8:bf:f4:f8:19:30:59:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304a791dc74f2377232fbb07b6ae71240ab9555f
Validity
Not Before: Mar 29 04:00:27 2026 GMT
Not After : Mar 30 04:00:27 2026 GMT
Subject: CN=4dfbc6229985a92ff277a522b8aacdc4faacf714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:09:e3:38:e3:1d:e1:1f:52:bb:d2:e4:52:
35:85:de:c4:40:ad:ae:49:f6:c4:c7:32:89:4d:47:
7a:6a:cf:a0:fc:f1:49:91:e7:1f:6a:60:9d:2d:48:
a6:88:8f:a9:6d:43:38:6b:33:da:71:81:d8:02:51:
6a:29:61:e6:31:71:fc:f8:b0:54:ac:39:2f:01:74:
40:e7:ec:75:10:bb:8f:49:99:ab:e4:fd:03:79:a3:
26:c3:f5:18:52:0e:44:12:ea:2c:9a:3f:d5:5a:73:
15:29:d3:18:da:31:f5:a3:cd:22:d1:32:31:4e:e3:
1a:09:dd:7f:9b:d2:69:66:ac:2c:14:e3:f9:6a:13:
cd:88:4c:07:55:ca:3e:c4:40:27:9a:6b:11:ee:b7:
34:e6:73:e6:12:57:f0:fb:73:ef:34:b8:33:2d:df:
4c:be:e6:fe:8a:2a:65:e5:64:4d:ee:2a:d5:f7:af:
2b:c1:6e:51:d1:f2:dd:b5:70:80:d9:66:bf:22:18:
13:79:a3:ed:d3:c1:74:bf:85:42:93:8c:ad:fd:0b:
ea:70:25:9d:75:cb:83:58:fb:de:00:b5:4a:60:3f:
e3:4a:5f:c5:b2:f4:00:f4:42:09:20:8f:20:5e:4f:
cb:cf:c2:9f:1f:c8:38:f9:67:72:2e:4f:39:79:e1:
b2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FB:C6:22:99:85:A9:2F:F2:77:A5:22:B8:AA:CD:C4:FA:AC:F7:14
X509v3 Authority Key Identifier:
keyid:30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a8:97:9a:ef:23:d9:31:52:e1:49:03:d8:77:c4:6c:44:81:
cc:69:ae:cb:b2:6d:e5:b2:35:69:21:82:62:dd:2f:8d:59:9d:
96:be:a0:51:cc:8b:d1:24:3f:bc:58:14:b1:57:98:86:76:b6:
29:cd:5b:db:4f:7e:a1:06:e0:69:cf:7e:44:80:82:d0:48:e6:
21:8f:6b:3e:84:fe:3f:a4:be:61:65:26:c8:c7:34:d5:92:c7:
46:27:9f:66:aa:db:e2:36:15:0d:9e:45:71:aa:bd:0c:23:9c:
7b:2c:8a:48:33:b2:54:57:92:07:3b:85:91:7e:6f:81:91:3e:
e0:a4:bd:21:50:ad:07:63:68:80:d7:8d:0b:c6:fd:12:73:90:
a2:37:6b:fd:2c:7e:d8:0b:ce:40:b7:00:ff:89:f8:94:4e:57:
59:65:cb:5b:d9:e4:ff:99:9c:e9:f6:71:4a:85:3a:73:e2:2f:
db:63:23:6f:b0:7c:cf:46:2b:5c:f7:1b:54:c5:a0:aa:26:35:
d8:74:00:c5:57:31:9f:1a:04:cd:bd:a7:17:1f:3b:63:7e:c4:
5d:7c:66:36:7d:1d:8e:fd:a9:6f:e2:72:2d:a5:c0:36:0a:01:
6f:15:e5:64:63:76:5e:22:0a:3e:55:8f:1d:4c:fc:23:84:34:
2b:e0:1b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:48 2026 by rpki-client