Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
File: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft (raw, json)
Hash identifier: RehevMp9Im4BXtVzQJnfpCKPZb2Pj/0XT09LB9HdYNo=
Subject key identifier: 21:67:C3:3A:78:97:99:F1:A2:9F:79:35:02:AF:F1:8F:85:03:D0:2A
Authority key identifier: FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
Certificate issuer: /CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Certificate serial: 019D371BF1FD63CACC96957F8BB210744DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 01:01:11 +0000
Manifest this update: Sun 29 Mar 2026 01:01:11 +0000
Manifest next update: Mon 30 Mar 2026 01:01:11 +0000
Files and hashes: 1: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl (hash: K5iT1tAzDm2+8g/akjU0FbfjUpy6fEXt5KWNYoU9vhk=)
2: Afljxr8ZnlyJfn0MjgcAP3_UzNg.roa (hash: kphgkoE3iStHTSUsNJCX6GQ8XFaW4TlqKZ0slrAU88M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:f1:fd:63:ca:cc:96:95:7f:8b:b2:10:74:4d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Validity
Not Before: Mar 29 01:01:11 2026 GMT
Not After : Mar 30 01:01:11 2026 GMT
Subject: CN=2167c33a789799f1a29f793502aff18f8503d02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:ab:ad:fd:f3:16:1f:f5:dd:e1:fd:8a:a4:
44:39:a4:8e:4d:10:aa:08:30:d1:0b:44:14:cb:69:
00:8a:38:eb:5f:ae:2d:a0:34:bd:f2:48:b7:09:70:
42:95:e5:66:bc:0d:cb:b5:e3:b9:dd:3d:de:18:f3:
e1:22:c1:35:5c:98:74:c4:0b:46:61:22:1a:22:bc:
9f:f5:3b:08:6f:27:6c:2e:80:9e:1b:7f:6c:05:8c:
fe:50:16:af:92:67:05:dc:cf:f0:be:c6:cf:e9:8d:
d5:63:f4:e9:d2:89:b5:78:72:d3:5c:3f:03:b0:89:
9c:67:3b:23:7f:2a:1d:6b:b2:83:1a:de:45:e3:d0:
47:88:f9:29:e7:bf:dd:0b:88:22:79:63:3b:ec:9c:
86:43:85:7f:23:da:36:7e:75:a7:31:b6:94:08:ee:
45:17:17:4c:2d:91:43:e1:28:09:c8:0c:19:91:3f:
bd:d6:8a:86:4f:2a:87:e3:24:44:a9:25:86:a5:84:
03:97:4b:06:ac:6a:36:27:5f:57:b6:8f:1f:be:ff:
6c:6b:f2:63:52:2e:bd:7d:ad:49:82:6c:8d:10:eb:
69:b0:c6:b3:39:be:4f:16:ac:b3:b0:5d:a2:23:e7:
9c:ba:67:71:ef:1c:8a:84:78:d8:b1:b2:fc:83:2a:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:67:C3:3A:78:97:99:F1:A2:9F:79:35:02:AF:F1:8F:85:03:D0:2A
X509v3 Authority Key Identifier:
keyid:FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:b8:55:b9:18:e2:d1:41:c1:f9:5b:b1:fe:02:2f:5c:4e:a4:
52:71:f8:3f:7f:4d:19:c7:1a:69:38:97:89:8c:aa:54:47:a3:
1f:fa:08:7f:32:53:7d:2f:94:10:21:2e:51:d2:d4:a7:0a:44:
10:75:f5:06:ff:a8:b8:ce:de:34:85:a3:58:08:e7:89:ec:26:
17:7a:56:9c:f3:4c:62:5e:ea:25:7e:bf:ff:f7:80:26:00:b4:
db:16:24:f2:69:f4:80:8a:7f:d0:c6:25:96:0d:f5:f5:b8:64:
0e:82:80:ea:7e:ae:fc:74:09:49:4e:cb:c2:f9:51:6f:65:af:
3b:db:26:48:19:66:b3:29:52:84:36:91:d0:51:18:96:6f:15:
a2:ec:20:62:e1:a6:f1:a8:2d:17:9a:f7:ef:1d:82:b9:d4:e7:
f1:ab:b2:51:56:80:e8:66:14:8d:b4:52:d0:ac:4b:22:6e:34:
bc:30:a7:5e:81:94:c3:58:e8:8b:a1:f3:94:8d:55:98:93:42:
2e:c5:1c:2a:31:44:a4:59:b5:bc:5e:d7:a4:23:79:75:bf:22:
f0:0d:cf:8e:86:be:83:df:2c:a1:5f:38:b6:af:e7:35:38:8c:
05:ef:11:69:29:6e:97:a4:b9:04:f3:a8:06:bd:c7:19:91:1d:
3a:f8:18:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:55 2026 by rpki-client