Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
File: rD5tWdR-c37cMaZfMQUUzUuV04c.mft (raw, json)
Hash identifier: L4z+fXr+ZW44legsr1fzy/JCFsdOZ7CSYl86tOlFhyU=
Subject key identifier: E4:5B:DB:AA:F6:6F:72:58:BF:06:CF:B0:17:3B:52:5D:40:61:2F:7D
Authority key identifier: AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
Certificate issuer: /CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Certificate serial: 019D38D2EB005183698508849705B7C6FA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 09:00:39 +0000
Manifest this update: Sun 29 Mar 2026 09:00:39 +0000
Manifest next update: Mon 30 Mar 2026 09:00:39 +0000
Files and hashes: 1: rD5tWdR-c37cMaZfMQUUzUuV04c.crl (hash: 9ionLmEko0OR6dkL+asammyC+98sS4BgO34ZfZOcKnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:eb:00:51:83:69:85:08:84:97:05:b7:c6:fa:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Validity
Not Before: Mar 29 09:00:39 2026 GMT
Not After : Mar 30 09:00:39 2026 GMT
Subject: CN=e45bdbaaf66f7258bf06cfb0173b525d40612f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:18:b6:88:30:d5:37:ff:01:6d:c9:26:c0:
f5:9d:f6:5a:e8:0f:94:aa:c8:7d:6f:91:1d:ae:0a:
af:a7:d9:8a:35:58:6d:fe:10:b9:27:66:b0:b9:8d:
1e:ff:28:b4:32:31:be:8b:5a:58:6c:96:1b:5e:4f:
5d:f6:9f:20:25:05:59:ad:bd:2c:c6:9a:d0:29:ab:
97:03:e6:dc:6f:c7:7c:02:f9:21:14:ff:f4:fe:e5:
0d:24:76:a7:47:ca:39:1a:7c:43:85:52:00:d4:5b:
72:b2:95:91:a3:36:2c:70:34:0c:23:1d:3d:60:83:
87:1d:cd:d1:fa:8e:94:d2:9c:61:fb:d0:f2:2b:af:
b1:e5:1b:05:66:61:1a:6d:17:2a:c0:73:07:e2:2f:
6f:9a:34:14:dd:da:87:ae:e0:c3:e4:bb:62:66:62:
63:ee:b3:51:26:67:9e:22:25:01:bd:07:ad:7d:8f:
37:bb:0d:7b:fd:5f:1f:fe:d1:f0:15:b3:a8:eb:1a:
b1:5b:a5:54:6a:2a:5c:79:0e:d4:42:19:67:5a:f5:
77:9e:12:f1:db:c7:66:d9:50:27:98:69:66:18:08:
63:e6:91:ba:7a:a0:7e:a1:c0:1c:41:cc:88:bc:9b:
62:49:66:75:a7:e5:3e:3a:89:54:56:47:c5:1f:f2:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5B:DB:AA:F6:6F:72:58:BF:06:CF:B0:17:3B:52:5D:40:61:2F:7D
X509v3 Authority Key Identifier:
keyid:AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ac:bb:d2:81:99:87:3c:33:96:dc:ed:d2:58:e9:06:37:17:
1b:93:c5:fd:85:9f:10:91:58:98:d5:13:7d:87:bb:75:9a:30:
45:dd:ed:4c:25:b7:13:87:0b:37:96:9f:eb:1b:e8:21:e4:fa:
44:49:a7:2d:7e:12:21:17:b0:a5:6c:22:1f:ec:9f:bd:30:d6:
d4:05:53:fd:1f:33:b8:86:6f:ab:b7:26:e4:06:68:de:32:d5:
0e:30:8f:74:58:0b:86:fa:54:b8:64:6a:9f:02:b0:7d:a2:69:
d5:76:be:24:19:2b:9a:2c:71:c1:ed:4a:50:e9:21:e5:c0:f8:
22:15:a3:5b:f5:29:62:f0:01:33:4c:2b:4f:0b:40:16:05:3b:
31:7a:f4:2a:89:67:37:5e:b2:17:2e:f0:1a:bf:8f:af:75:72:
86:83:7c:e9:36:e4:c5:c2:fd:92:67:31:47:49:23:68:4d:03:
73:ea:25:ba:b5:b4:56:b7:81:7b:21:a6:65:9e:9f:c9:ad:8b:
c5:5e:5b:72:9c:36:46:d9:f0:6a:f4:47:29:b8:a7:9a:dd:5a:
16:18:48:5f:37:97:14:f3:4b:66:e5:1d:1c:72:88:35:39:01:
87:ee:e6:26:86:7a:8b:e5:23:cb:dd:d9:93:08:1c:4a:5e:4e:
02:da:92:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:19 2026 by rpki-client