Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
File: Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft (raw, json)
Hash identifier: 1G6T0hWp/L3akqQAIdgisImYDhvN8AgFkhwDzVURE+E=
Subject key identifier: 46:21:F3:3F:0B:18:FF:DE:35:7D:C1:E5:C2:54:C6:A9:C5:F9:0E:85
Authority key identifier: 16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA
Certificate issuer: /CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
Certificate serial: 019D38D33BFFEB8D466E81A07FAC35BA2220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:01:00 +0000
Manifest this update: Sun 29 Mar 2026 09:01:00 +0000
Manifest next update: Mon 30 Mar 2026 09:01:00 +0000
Files and hashes: 1: Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl (hash: JjtsUJ3aUyl2WTk6EGowTgJEhFtgBR9Pze15tGrCA4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3b:ff:eb:8d:46:6e:81:a0:7f:ac:35:ba:22:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
Validity
Not Before: Mar 29 09:01:00 2026 GMT
Not After : Mar 30 09:01:00 2026 GMT
Subject: CN=4621f33f0b18ffde357dc1e5c254c6a9c5f90e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:ae:3c:a1:1f:c4:1b:f2:c5:38:23:d5:56:
ea:f0:a4:e2:af:08:77:f5:fa:f6:27:32:15:31:87:
3a:76:28:67:c4:96:c4:77:3a:f2:ac:04:1c:58:26:
f2:91:73:f3:48:94:42:27:21:e8:34:17:20:98:d2:
72:1d:dd:3d:d1:41:41:dc:5b:d0:37:2a:d5:bf:d2:
9b:09:8e:c3:ce:08:9d:b2:c4:a1:8b:f6:09:d3:1d:
7d:ad:8f:ca:c1:8d:3f:c7:3c:64:cf:c0:c1:14:7a:
64:82:c9:d0:02:55:97:f2:42:3b:82:73:7f:81:07:
b5:b8:d0:d9:2f:ac:b0:2c:f8:ae:31:e0:55:73:71:
45:45:0b:23:f2:09:17:a8:41:52:f6:72:d5:3d:3f:
16:ee:17:cb:1b:73:84:c6:66:5f:95:0b:a0:97:99:
e5:19:44:5f:65:ef:83:aa:53:d0:30:c8:46:ee:51:
6d:c9:1c:da:b9:34:97:fd:54:20:d4:ef:4b:c7:e9:
0a:cb:48:61:38:37:5e:25:a1:a6:91:e5:8c:02:24:
33:59:36:11:b6:3b:cc:cc:a7:83:48:bc:58:43:c3:
ab:c1:c4:b1:86:44:b0:18:36:f1:83:c4:cd:14:60:
be:50:43:aa:a4:c5:d3:a4:37:72:b7:6f:00:99:58:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:21:F3:3F:0B:18:FF:DE:35:7D:C1:E5:C2:54:C6:A9:C5:F9:0E:85
X509v3 Authority Key Identifier:
keyid:16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:91:ae:df:fc:4c:9f:60:04:60:86:cd:6d:ae:be:46:ce:2f:
e6:0b:d8:61:4a:d1:26:69:a0:a9:bd:20:07:75:40:05:3d:7e:
74:9f:e7:20:23:46:ef:0a:05:d3:b0:6f:42:1d:ad:46:7b:f6:
1a:f4:cf:22:7d:d4:61:69:d8:74:28:45:ef:c0:f2:5b:78:95:
5f:13:e8:78:d0:1c:fa:31:09:e5:b0:fb:37:04:f0:bb:c6:53:
9b:a2:f9:bf:ef:34:60:91:36:52:d4:b7:4a:2e:33:45:2a:5d:
7a:98:13:ae:07:d6:90:3d:d1:2b:b3:6d:41:c5:5f:5c:b5:34:
d0:c0:29:33:0b:50:97:63:53:23:17:29:e2:cf:3c:80:42:15:
cd:d9:18:9b:3c:0f:14:b3:c7:6a:2a:32:2a:3d:dc:32:08:2f:
eb:cd:37:35:60:fd:ee:af:21:7a:2d:f9:32:5b:06:66:e0:d5:
1e:79:7e:2b:bc:42:c6:78:35:75:0f:3c:b0:fc:cc:59:e6:c4:
cf:e0:11:bf:cd:8a:2f:b9:f2:5f:18:b3:36:db:94:0d:73:19:
4d:79:b4:31:e1:5e:73:ab:d1:b6:db:f7:10:e8:4f:82:3c:98:
28:ac:3f:f6:0d:12:b8:44:b9:52:de:08:da:35:99:6e:d8:75:
fe:aa:ed:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:58 2026 by rpki-client