Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
File: RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft (raw, json)
Hash identifier: bpxmOU7LRRzstceUqYT6TnBta68QrSd/1IAQttldL0s=
Subject key identifier: BC:57:50:73:ED:8A:6A:41:64:18:96:03:2C:EC:D7:B8:06:59:0D:11
Authority key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Certificate issuer: /CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Certificate serial: 019D37F6E12CFE67A54829285D63AD149DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
Manifest number: 159F
Signing time: Sun 29 Mar 2026 05:00:19 +0000
Manifest this update: Sun 29 Mar 2026 05:00:19 +0000
Manifest next update: Mon 30 Mar 2026 05:00:19 +0000
Files and hashes: 1: 96uhsxBhe-FEbEFUz44UCsO9ftM.roa (hash: sX4SikCnq8N0L06GUAKXHc2cNrB1d0XvilI3V9rlkrI=)
2: RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl (hash: JWo9pepI/wo8TwwclSEjYGmKKgMFT6pbekTAYWgbMcI=)
3: hVY_dYxYhKuO3qtI4MOUcvIONF4.roa (hash: yGx/OoacbBBGFHUNn7h+o/bue//pA9bBusA+ebRU/Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e1:2c:fe:67:a5:48:29:28:5d:63:ad:14:9d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Validity
Not Before: Mar 29 05:00:19 2026 GMT
Not After : Mar 30 05:00:19 2026 GMT
Subject: CN=bc575073ed8a6a41641896032cecd7b806590d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:d2:0d:55:2e:51:4b:f1:4c:21:b5:be:ad:
d5:55:c2:b2:4e:4f:41:60:d6:4a:9b:d2:dc:c6:e2:
fa:50:05:06:dc:f6:65:9f:cd:6d:24:cc:7a:b4:f5:
72:12:4e:ec:4e:86:37:cf:85:0a:78:80:00:36:83:
cc:15:8a:08:7f:06:8b:5b:c4:17:68:31:0a:c4:0e:
32:64:65:a7:6f:1d:03:12:21:43:ef:e1:19:37:55:
20:4e:f9:89:78:1d:69:35:f2:92:0a:74:21:88:55:
51:51:a2:61:12:a7:5f:0a:b7:25:93:a2:ce:60:65:
ec:18:d4:d9:17:59:cd:79:07:8f:1d:18:19:9c:e2:
4b:a2:54:26:df:2b:1c:c4:ac:cf:cc:7a:43:a9:44:
fc:0c:c8:a6:ec:c5:31:98:ac:ee:eb:ef:1f:7a:79:
16:2c:21:df:e8:24:5c:32:d0:df:63:92:0c:b6:c6:
f7:6f:b4:dc:cd:b7:dd:bb:56:ed:6f:d6:ba:72:68:
95:cf:ad:c7:4b:46:03:6f:61:5b:50:88:59:68:db:
e9:7c:89:46:65:12:ac:ec:1a:3c:e2:54:ac:73:44:
88:bc:15:d8:4b:c8:d4:dd:31:8c:5f:54:58:7f:dd:
f6:31:bb:bf:79:1c:5c:76:82:31:90:6b:f0:d5:53:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:57:50:73:ED:8A:6A:41:64:18:96:03:2C:EC:D7:B8:06:59:0D:11
X509v3 Authority Key Identifier:
keyid:44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:96:a3:47:10:0e:e4:c9:aa:5f:cc:3e:b5:0f:4f:37:1b:33:
19:dd:ec:53:95:30:77:28:1c:e4:4f:34:e2:4b:c5:8a:93:68:
70:6f:ac:db:3b:5d:de:5d:63:27:8e:a8:33:4d:a3:bf:f9:25:
5e:ce:03:04:5e:2d:ba:8c:18:d9:fb:d3:78:10:28:65:ec:9c:
34:0f:33:8a:ce:f7:77:21:40:8a:32:1e:68:f3:db:c1:ad:80:
cc:f6:5f:1d:97:f2:f0:2e:be:44:14:77:7f:fc:26:bf:d1:77:
81:ee:b4:cb:b1:e1:43:bc:d1:44:e1:f3:5d:28:9c:63:aa:f8:
e4:7f:76:21:02:54:4f:55:72:c9:3c:e2:26:6e:93:57:55:42:
ff:82:1a:43:9d:2a:05:51:54:3c:c5:11:75:fb:3f:76:9a:45:
c3:87:6a:b1:76:c1:90:9d:6e:f7:14:5d:3f:c8:e2:3f:01:58:
28:52:fd:ea:b2:9e:13:64:e1:50:2b:98:15:b6:e7:cc:ab:7c:
4b:8c:7f:ad:a7:24:cc:66:19:f9:dd:68:74:4d:d8:bb:a9:4b:
11:22:65:4b:7c:98:c8:4e:d3:b2:f7:35:68:a8:fd:e7:0c:3a:
01:08:0b:7c:cb:14:4b:49:d3:99:d3:c8:f1:d0:52:fe:93:df:
1a:be:eb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:16 2026 by rpki-client