Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
File: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft (raw, json)
Hash identifier: aWybROiD16Cscb1/UdJR5yxACbRJ9OBpPv/WFVlVnK4=
Subject key identifier: 09:51:C4:8B:EC:35:03:3C:39:0F:22:4E:36:51:F0:46:20:42:A6:37
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Certificate issuer: /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial: 019D390A603ED6101F35296E50C65BB62E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:01:14 +0000
Manifest this update: Sun 29 Mar 2026 10:01:14 +0000
Manifest next update: Mon 30 Mar 2026 10:01:14 +0000
Files and hashes: 1: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl (hash: zPUef16nlro7giDFfWSiORnnW9MlUvGYQ32mv900ajM=)
2: sK7iWd_IWdtBYlzIusErtM7RZEo.roa (hash: E9yaNEt+sG4ikRZ0VOMP720zInpE25towLQ25YYLJFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:60:3e:d6:10:1f:35:29:6e:50:c6:5b:b6:2e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Validity
Not Before: Mar 29 10:01:14 2026 GMT
Not After : Mar 30 10:01:14 2026 GMT
Subject: CN=0951c48bec35033c390f224e3651f0462042a637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:27:d7:63:2a:eb:56:5a:d3:8e:56:b6:f1:01:
07:7d:5b:8e:d3:60:0b:08:34:0e:a5:e1:8a:62:2d:
e9:2f:92:8a:6c:78:be:f4:79:a5:92:e0:c9:65:9b:
da:9c:13:53:3a:f0:02:d1:93:c0:dd:59:ce:1b:f2:
45:dd:03:90:d0:40:8b:cf:36:7d:42:93:92:3f:d6:
cf:00:9c:e3:a4:81:9b:c1:15:c4:a9:96:d8:a1:97:
9d:5d:9e:8f:3e:a5:6b:ea:71:1a:25:30:e3:20:45:
c0:d5:79:23:99:3c:c8:1f:0c:b2:cc:8e:ea:b6:27:
d1:f7:f2:ef:c7:c4:54:02:d4:33:1e:ca:d7:8d:9c:
2d:ea:18:ec:27:4f:c6:e0:a9:c1:4f:78:d8:41:fc:
30:4b:0f:4f:c1:77:49:71:e3:1b:85:04:3f:e9:5a:
c5:0f:f6:b4:c5:82:85:c5:54:13:a6:1f:d5:ee:0a:
5e:ad:54:b9:52:2d:1c:bd:ad:ba:e4:63:5b:cb:e3:
08:dd:00:f5:03:f9:e8:bd:3e:52:1f:57:32:22:0b:
9c:6d:de:57:c9:2f:c9:4e:8c:a0:f7:c5:6a:99:cf:
ba:e7:71:4c:70:05:2c:dc:60:d4:ef:39:fe:8f:3d:
3e:13:fb:ed:62:55:2e:12:95:f6:22:f0:48:d9:0c:
92:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:51:C4:8B:EC:35:03:3C:39:0F:22:4E:36:51:F0:46:20:42:A6:37
X509v3 Authority Key Identifier:
keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:12:a0:e3:ae:32:dd:79:95:ff:eb:76:09:ff:24:37:50:37:
0e:6d:56:a5:21:ca:50:1a:e4:84:61:6d:6b:6a:71:74:60:33:
31:e6:49:da:fb:f5:a7:ce:24:cd:82:ba:30:1d:76:ae:46:0d:
8d:72:94:51:35:33:e8:68:64:b2:7d:d5:a3:55:05:59:52:f9:
0a:02:f3:ec:46:75:67:b4:95:c5:38:40:55:94:17:b9:71:ca:
5a:07:f7:03:32:d7:d3:d8:83:6d:c5:74:50:32:7e:fe:b1:64:
72:6c:8e:eb:1a:ff:c8:8e:04:04:9e:b8:01:bd:cf:e4:9f:70:
f4:da:fc:0c:ff:b1:41:61:b0:07:e4:5a:93:40:89:71:94:44:
61:10:cd:47:39:b2:f7:1e:ce:f3:a3:97:31:c0:59:fa:f3:da:
14:b2:4b:e4:23:58:d5:17:1d:d4:2e:23:63:2b:4f:81:70:d9:
1f:e0:04:80:9e:d6:b8:74:06:8d:68:74:f2:4e:d6:95:6f:1e:
0b:17:63:ad:ad:e9:66:68:02:77:a0:5e:7b:aa:1b:1b:99:10:
3a:36:1f:a1:f5:46:57:60:fc:8b:1a:f0:12:7c:8a:f0:ea:20:
f0:c4:fd:2d:c4:93:14:c9:6d:fc:71:b6:bb:83:dc:b0:d3:82:
96:13:9e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:20 2026 by rpki-client