Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
File: sDHiyoJMqNVWJAanAhrjwToUJdg.mft (raw, json)
Hash identifier: UiWkx75MZYsIcsmusHT5AXEyqCt82mgEAOgKNHOpJDM=
Subject key identifier: EC:8C:19:2C:E5:09:95:AE:BF:F8:31:E9:58:B7:33:73:51:4C:38:F1
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial: 019D3940F5040744872F8669BC53F595EC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 11:00:51 +0000
Manifest this update: Sun 29 Mar 2026 11:00:51 +0000
Manifest next update: Mon 30 Mar 2026 11:00:51 +0000
Files and hashes: 1: Ve64xTr98MUDsiJSZXk12KQ3yVc.roa (hash: wfd77vHmSmUiY8IWmiT9ZwxLolfac6GRsY7+Cx91Rus=)
2: dN5Ucpkm5kNY0YR-q9sxfd6c9rc.roa (hash: ZLBcri8/aXQmB4WoSvVto5wYAi5xFB1PoBjafKyFXT8=)
3: sDHiyoJMqNVWJAanAhrjwToUJdg.crl (hash: 0RDVaiv1WG71C1nN6YeI3X9W7b0S/4HrQz8JfGvtCdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f5:04:07:44:87:2f:86:69:bc:53:f5:95:ec:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Validity
Not Before: Mar 29 11:00:51 2026 GMT
Not After : Mar 30 11:00:51 2026 GMT
Subject: CN=ec8c192ce50995aebff831e958b73373514c38f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:bf:56:b8:8a:8d:4d:d3:1e:f4:57:bd:2e:
36:83:88:a9:e0:9b:2e:10:ea:82:50:74:05:05:1d:
aa:64:16:af:96:b0:8f:95:a5:d3:8e:7d:66:1d:3c:
bc:5b:f6:25:47:cf:6c:4d:66:46:59:50:20:c8:dd:
d0:96:aa:be:f5:c5:8e:e1:ef:90:7c:05:ac:53:3d:
62:c6:6e:bf:6c:8d:84:e3:d9:2b:42:3e:d7:00:8e:
c2:7b:90:23:b2:19:b9:d5:fd:0c:af:b6:78:2c:51:
43:a1:fa:99:ec:cc:ca:22:d6:1e:bd:0f:25:24:43:
d5:6f:d9:f2:cb:2f:59:2f:0f:5c:5b:e9:f0:a4:00:
d6:6f:d3:6b:f6:35:c1:f2:b9:52:2e:97:76:42:fe:
53:b3:00:da:23:b9:a9:df:37:61:a0:23:0f:5f:8d:
a1:eb:53:9f:7b:a3:c8:2a:7c:13:67:68:63:f1:91:
91:05:c9:ba:44:c0:f7:3f:24:11:a5:92:13:01:5d:
e9:7f:d3:2f:01:36:2c:dd:84:08:5b:8f:bb:74:05:
b7:71:50:99:00:28:e2:ed:51:a4:bb:49:e8:0f:4d:
40:c9:8d:b8:ef:b3:aa:76:dc:2b:2c:e2:bd:f3:ce:
2b:44:9a:17:dc:45:cf:3a:4e:63:43:70:c3:3c:58:
e1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8C:19:2C:E5:09:95:AE:BF:F8:31:E9:58:B7:33:73:51:4C:38:F1
X509v3 Authority Key Identifier:
keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:06:93:07:fc:33:fc:4b:06:7c:1f:32:e5:8f:0b:20:80:86:
1a:24:2e:43:7c:c7:1e:cd:96:f9:0a:5f:bd:4c:89:92:5c:25:
05:ad:9d:2e:fc:fa:c1:87:2b:de:5b:fc:de:2a:97:67:06:8c:
ad:c0:74:66:31:b7:20:d9:ab:47:27:3a:cd:15:9c:b2:08:86:
5b:83:de:05:00:91:9d:32:c7:73:29:c5:ab:e9:96:ee:a7:81:
7f:c8:d1:6a:85:47:06:b8:14:64:d3:cd:13:52:a6:d7:3b:e2:
21:9f:86:61:56:ce:ad:ee:20:cc:f9:e6:85:71:2c:98:c8:7e:
80:d7:f3:ec:70:af:7a:37:3d:fd:a7:76:73:41:b0:76:da:42:
be:cf:a8:2d:b1:10:31:7b:cf:79:87:f9:59:49:6d:ca:07:73:
3e:d5:be:fc:94:5a:65:08:3a:38:f5:93:91:40:de:f1:7e:7d:
2a:c5:9c:ca:03:50:e2:fd:85:01:08:79:6e:9c:75:f6:44:4a:
9b:5a:c0:00:d4:60:7a:55:dc:fb:07:ca:4f:1a:a8:50:65:89:
81:ac:c4:41:47:fa:55:07:e2:32:8c:49:75:90:33:ea:9c:83:
19:90:5e:88:81:f1:3a:bb:8a:b7:4c:20:7a:d4:bc:de:84:80:
f0:1d:25:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:30 2026 by rpki-client