Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
File: d0TGtvujc4EeAL7khOIkxrbiP9I.mft (raw, json)
Hash identifier: Oqgvk8+RqtXb3TeLFVSZP15qVLx6LST4LBbtHKaYd54=
Subject key identifier: 82:5C:6A:00:AC:09:0C:0B:80:3B:AB:EE:52:DB:F2:49:B1:E1:45:B8
Authority key identifier: 77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
Certificate issuer: /CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Certificate serial: 019D382E71D84C2ADE230DDE90914E89A73C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: d0TGtvujc4EeAL7khOIkxrbiP9I.crl (hash: U26HUT/jDaqCSte/2ZSDYp0nAC5y1EAcpZcTYWfziAM=)
2: heI6_nt9P_HwBy_T8oGJnHTTh5g.roa (hash: u5XqVFg6oCgpt4OHeWuXYXSoPOakGmDYPh6j3OSR1w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:71:d8:4c:2a:de:23:0d:de:90:91:4e:89:a7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=825c6a00ac090c0b803babee52dbf249b1e145b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:77:7b:b0:77:90:24:9f:d6:b5:ab:8b:51:
7e:e9:60:12:94:4e:76:2a:67:7d:19:6a:b9:7e:74:
ca:d5:1e:13:80:dc:ce:f8:24:3b:48:07:31:a8:fc:
0c:0e:80:f1:ab:de:36:97:e8:c6:91:7b:47:0d:89:
8f:7b:d8:d3:16:86:71:cd:5b:af:32:b7:2f:b3:99:
7d:a6:51:76:6d:e2:fa:2e:16:a6:8b:47:0b:27:98:
72:4d:b2:fc:97:dc:41:4f:b4:58:c5:0a:2a:00:c3:
cb:73:b4:a2:00:89:77:8e:03:18:e2:7c:fe:9c:1a:
92:78:c2:e4:13:ae:50:71:8f:88:13:08:c1:bc:52:
27:49:bc:ea:c5:48:f1:2f:d8:14:09:7c:d5:bb:c9:
58:fd:5d:8b:f0:a9:d5:45:78:bd:37:91:9d:ad:bf:
f5:d8:ad:c3:83:cb:ed:87:6a:d1:3b:f6:d9:d5:d1:
24:47:1f:08:59:15:60:50:dc:1c:fc:94:f3:20:dc:
89:dc:c7:af:fd:d7:27:a0:78:9f:d1:00:4b:0e:7b:
f3:e5:ef:5c:15:f6:a5:07:56:0f:62:05:92:64:97:
78:b7:10:ec:8c:c1:c0:ae:e5:63:4c:1b:b9:28:81:
a7:03:4d:3b:f1:02:c0:87:5a:07:08:60:44:a3:7f:
f5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5C:6A:00:AC:09:0C:0B:80:3B:AB:EE:52:DB:F2:49:B1:E1:45:B8
X509v3 Authority Key Identifier:
keyid:77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:29:60:8f:b1:9e:15:08:a1:10:e0:61:3d:80:4f:b1:bf:56:
a5:0c:66:0c:91:08:9a:8d:03:3f:cd:07:de:19:2d:10:b5:a3:
ef:05:3d:77:0f:b5:2e:91:ad:be:79:b9:b1:e0:16:1c:8f:3b:
60:1d:87:a7:6d:27:11:b0:71:a1:02:bd:67:30:1e:56:1a:10:
c0:59:85:ae:e9:c7:e3:df:7c:cc:c8:42:5e:11:2d:f2:89:53:
8f:70:78:0d:2a:26:b9:49:d6:53:8a:20:6f:cb:e3:bc:40:51:
18:58:e5:07:ed:b5:b8:38:cb:60:01:35:f4:05:a1:3a:a7:a6:
ea:42:5b:64:dc:38:9c:fd:d8:29:eb:26:24:85:f0:15:e2:8c:
e8:85:9c:2e:41:d5:66:9f:ef:f9:dc:7f:9d:df:c1:ca:64:c4:
85:a7:65:4d:63:2b:9f:61:0c:ba:68:83:ec:fb:6d:ff:d0:56:
e8:8b:8b:b6:9b:88:74:2e:af:c7:ed:2f:8d:d2:c9:7f:55:e0:
ba:12:5f:1e:6a:94:56:24:b0:88:fa:80:2f:c1:9d:c9:8e:34:
6f:ea:14:54:bf:ae:8b:de:3f:43:79:5e:7d:a9:41:c3:e7:7c:
29:50:b2:01:40:6f:ac:a1:f1:d9:fe:7c:6f:02:c2:fa:f7:83:
72:49:64:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:59 2026 by rpki-client