Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
File: urc2dvq68SBW7bucedcVT-3gHyw.mft (raw, json)
Hash identifier: vCDnwPip8DLSoEliCtvw5piMsOiaBpjCuIg4WKwtABE=
Subject key identifier: CB:0E:0F:84:A6:14:55:90:A8:65:3C:F6:59:3C:A9:B5:51:40:2F:7D
Authority key identifier: BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
Certificate issuer: /CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Certificate serial: 019D382E8FE7AC56073A8EF5FF24920B05F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:01:08 +0000
Manifest this update: Sun 29 Mar 2026 06:01:08 +0000
Manifest next update: Mon 30 Mar 2026 06:01:08 +0000
Files and hashes: 1: kiYFAEZ-m6dCCqZUXXXM7UkxEuQ.roa (hash: o5DgZsV413bg/omkWA7yGgiwOhEayAL+iXDGxDZd72U=)
2: urc2dvq68SBW7bucedcVT-3gHyw.crl (hash: 53U57cQyy70ed33zjMZA5UiyJ+h6LPQ9d26vjn9A65w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:8f:e7:ac:56:07:3a:8e:f5:ff:24:92:0b:05:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Validity
Not Before: Mar 29 06:01:08 2026 GMT
Not After : Mar 30 06:01:08 2026 GMT
Subject: CN=cb0e0f84a6145590a8653cf6593ca9b551402f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:d7:34:e0:41:89:4b:98:b3:3e:25:de:6b:
ff:96:74:4c:14:50:14:cb:65:75:cc:31:51:c5:f2:
eb:3a:b5:7a:ca:22:ae:dc:13:38:5d:d2:2e:ab:ae:
c9:aa:f2:09:f3:54:ce:d8:01:b2:09:e5:92:20:50:
43:d7:6a:df:76:8c:d7:b9:ad:c7:2d:2f:f4:e7:d9:
f8:10:79:b7:e8:83:e5:bc:5c:70:c4:8a:8e:64:15:
e9:56:99:cd:76:82:af:01:04:05:87:fb:1b:98:f7:
20:94:18:17:a4:be:2d:76:c7:39:fd:f7:f9:3f:0b:
5c:c1:5d:8c:e2:7d:86:69:20:6c:97:12:7b:b4:ab:
a2:f0:67:02:f2:ad:c1:fa:e9:29:bf:f6:87:c3:f8:
9d:f0:19:16:45:e6:b8:27:5c:29:34:7c:a2:ea:47:
57:4f:57:e3:b1:2e:c4:c5:99:b0:9b:21:5e:0c:68:
c6:e9:5a:9b:25:7f:7f:5f:26:f6:c1:90:24:84:a9:
68:c9:05:0e:fb:2c:a3:36:eb:72:32:01:29:1a:91:
d6:a5:02:a3:55:bf:32:8d:b9:64:a2:97:a8:3f:f2:
1f:a3:58:fc:ed:58:bc:ac:f0:6b:8b:0d:9a:a5:77:
2a:28:5d:f2:2c:cf:72:74:5c:8e:49:44:a7:f8:cf:
89:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0E:0F:84:A6:14:55:90:A8:65:3C:F6:59:3C:A9:B5:51:40:2F:7D
X509v3 Authority Key Identifier:
keyid:BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:56:07:49:39:f1:df:cc:6c:24:28:29:98:9d:75:b8:c5:81:
bc:50:ae:e6:29:fc:5f:8e:0a:42:ea:69:b8:6d:58:ad:5b:39:
c7:c2:54:a1:2f:9c:81:22:b7:97:c9:bd:37:d9:26:d6:82:88:
4e:04:ac:b2:68:e0:20:3e:38:24:cc:0d:0b:a8:77:fd:28:49:
a1:9c:9f:ed:43:83:ed:70:9c:fc:72:6c:b9:77:25:22:5d:4c:
80:81:c7:16:14:56:e7:73:b4:32:7b:f9:c4:b1:55:ee:dd:a3:
99:e8:32:15:f3:7c:3a:90:50:7c:ac:24:1b:ce:41:6c:b7:03:
dd:37:31:83:c4:f6:b7:1a:e5:0c:4e:89:02:ca:67:7b:29:d8:
b6:2d:8e:14:c3:3d:a3:57:ab:84:af:ea:96:15:95:ef:a5:03:
66:de:0a:02:8c:40:a0:4f:93:a5:42:2a:05:76:24:d8:00:0d:
6e:3f:60:f1:f7:0c:d6:3c:b2:12:ea:d5:c4:fc:85:69:9b:b5:
d5:54:12:02:08:3b:57:b2:3c:26:4c:89:40:9b:c2:43:11:d6:
2b:83:64:5b:b8:ba:11:11:57:e7:ae:61:17:d5:56:88:3d:ec:
13:40:a6:9b:bd:65:29:16:2d:94:cc:50:e0:e6:f5:69:a0:27:
16:5d:42:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:57 2026 by rpki-client