Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier: 6dOhDSjNeespOyLBt2On2XymB59lhSVzD4gF3PQJFxc=
Subject key identifier: E3:1E:54:8C:24:02:E9:E6:F2:22:67:43:29:C3:D4:52:79:30:44:CE
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 019D38D39FC1DC1DF0BE09941A5E42FD9F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number: 189F
Signing time: Sun 29 Mar 2026 09:01:26 +0000
Manifest this update: Sun 29 Mar 2026 09:01:26 +0000
Manifest next update: Mon 30 Mar 2026 09:01:26 +0000
Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: 0dKlTo5K6GXI1SC/8l3NFyj87GTjRWobBUjRRFsK6bQ=)
2: 1N-KhQzruMGSdoGiZ7CO4u7ckk8.roa (hash: FLfbiUatng7gGWOmNIMwpoiBvu3NsECWb2uDXnrhlvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9f:c1:dc:1d:f0:be:09:94:1a:5e:42:fd:9f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Mar 29 09:01:26 2026 GMT
Not After : Mar 30 09:01:26 2026 GMT
Subject: CN=e31e548c2402e9e6f222674329c3d452793044ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:9a:69:7e:ae:06:eb:3e:f0:dd:d6:24:ba:
43:db:51:43:66:9c:63:65:e2:24:a1:7c:34:04:26:
8f:eb:4a:27:1f:2e:e8:cd:d6:30:f1:9e:89:ad:a6:
13:2b:dd:ba:c0:a5:2c:2c:61:a6:9f:e1:31:78:59:
44:84:6d:20:b1:c6:53:25:94:c5:8e:31:d9:24:67:
d6:68:1a:1a:ea:d7:90:a1:d7:b1:a9:47:03:14:e0:
50:58:df:d1:3c:03:24:61:7b:66:e2:d4:29:d6:00:
fe:3a:be:ea:87:a7:99:53:9d:f7:55:7d:9a:63:bf:
f3:4d:6a:1d:fe:00:36:dd:43:13:04:40:5b:4f:4a:
a1:5f:5c:14:fd:23:57:6f:b1:19:35:93:ec:2a:a4:
9e:0b:26:a2:9e:68:1e:70:3a:94:ca:05:77:86:6c:
74:91:dc:36:98:7d:5f:ad:0d:d4:75:50:e3:39:ac:
95:cf:05:cc:5b:e9:c5:6d:2b:23:63:6e:3f:94:e3:
1d:d8:34:c3:8d:f7:b2:1f:16:dc:c0:2e:fb:81:32:
33:c7:44:22:40:d0:1c:67:d8:75:f3:c2:7f:26:ff:
04:74:e6:45:8f:30:30:d2:65:c8:c5:36:a5:d4:b1:
4c:4c:7b:c8:f1:e0:d7:f6:bc:5d:71:22:26:d5:c8:
50:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1E:54:8C:24:02:E9:E6:F2:22:67:43:29:C3:D4:52:79:30:44:CE
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:63:db:a7:4d:39:cc:52:7f:b3:5d:59:22:8e:76:da:65:ee:
aa:02:9e:6d:22:9a:00:f0:87:ee:99:fa:12:a2:4e:32:cf:a4:
2a:50:f3:c6:dc:3f:83:ce:a1:8a:4c:67:ac:20:31:47:c3:50:
b1:df:c4:76:f3:54:a8:f7:1b:79:31:48:6f:f4:cb:72:c0:d5:
20:7b:58:ad:f5:ce:96:81:1a:b7:be:cd:2d:2b:d2:2e:97:63:
1c:f7:83:0e:c4:6c:79:91:17:aa:3d:9b:ef:4d:94:6f:50:68:
6e:ce:f8:23:bc:b4:89:9f:e1:11:65:69:59:64:1f:e0:39:0f:
2f:2b:bf:77:21:71:fb:cf:66:6a:50:ab:8b:a0:ca:f9:8b:30:
a1:1a:ec:fd:96:e2:cf:c3:48:db:90:fc:f8:dc:61:c2:5f:e7:
0b:98:99:b0:9d:36:82:a0:3c:8b:05:ba:69:fb:5c:e9:4d:8a:
e0:7e:6b:d1:55:5e:89:c5:6d:8d:b1:96:5d:aa:66:fb:1d:5f:
ef:eb:a3:bf:02:53:e4:77:c5:2f:88:d6:37:42:a4:e4:6a:04:
f0:a6:c8:50:96:da:b9:9a:43:96:5e:47:46:8d:45:ca:e0:d6:
58:e1:fa:0d:11:3f:9e:52:b3:85:3e:19:05:d3:fd:7f:d6:a9:
07:ec:85:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:29 2026 by rpki-client