Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
File: MF140gdceCCXnXulDSWxQntn1FY.mft (raw, json)
Hash identifier: EauIAORIhJyqRJgydnXcIJ3g3s+T9ePooKttoezAWK4=
Subject key identifier: D2:A8:45:2A:68:FD:DC:A6:F9:B9:34:71:FF:4A:A2:84:CD:4D:D2:3B
Authority key identifier: 30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
Certificate issuer: /CN=305d78d2075c7820979d7ba50d25b1427b67d456
Certificate serial: 019D389C0A80506ADA73BE341C2F4871806D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:43 +0000
Manifest this update: Sun 29 Mar 2026 08:00:43 +0000
Manifest next update: Mon 30 Mar 2026 08:00:43 +0000
Files and hashes: 1: F4oDS3nVMxBAdNHBTP_jR3L2rbU.roa (hash: o/R8nP2KVmlJ+NXMkDw0CKw0ITlj+/zX+zWZq5sENck=)
2: MF140gdceCCXnXulDSWxQntn1FY.crl (hash: H07tynMbLEK9bdnWJJDuMSaj8SbG668uFj9d7DKa3Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:0a:80:50:6a:da:73:be:34:1c:2f:48:71:80:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305d78d2075c7820979d7ba50d25b1427b67d456
Validity
Not Before: Mar 29 08:00:43 2026 GMT
Not After : Mar 30 08:00:43 2026 GMT
Subject: CN=d2a8452a68fddca6f9b93471ff4aa284cd4dd23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:d6:dc:6b:87:33:85:73:04:7c:f0:1a:53:
51:ac:6d:c9:ec:d7:2a:c3:54:4a:2f:7e:18:fb:d7:
63:35:d2:6d:7f:18:72:87:76:d0:3e:57:5d:d5:3d:
71:d9:7a:36:14:93:7b:fa:13:9a:7e:a9:07:75:71:
8c:65:1a:4c:0c:db:fb:c6:9e:ee:f7:55:09:49:21:
15:9f:9c:8a:5a:e8:e9:71:a5:26:70:60:6a:6b:f7:
82:31:2c:98:ab:a0:55:75:1e:3a:7d:e6:9b:e3:fd:
fa:70:77:b4:b5:4c:39:68:92:e8:53:2d:1f:9e:04:
84:b5:a6:68:cb:a2:f7:be:d2:b2:bf:54:3a:f0:f2:
19:0c:54:a2:08:b7:23:16:e9:88:82:9b:41:b0:23:
c3:5c:04:84:b7:b0:f9:8c:77:19:db:36:a2:fb:30:
eb:42:c9:05:57:3d:fd:55:b5:9c:a5:7a:0d:8e:2e:
20:dc:75:93:df:d8:45:7a:a5:b1:82:88:f9:85:ae:
03:4f:44:2e:41:ce:7e:d9:1b:a1:b8:09:89:03:be:
b7:93:50:a2:bc:23:43:aa:d0:57:f8:27:05:af:00:
01:a6:14:ec:f9:94:78:44:17:66:af:f9:3b:6f:75:
45:51:06:6e:73:d7:e0:0a:63:0b:6d:05:cc:6f:bb:
6a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A8:45:2A:68:FD:DC:A6:F9:B9:34:71:FF:4A:A2:84:CD:4D:D2:3B
X509v3 Authority Key Identifier:
keyid:30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:dc:5f:3d:53:84:d0:9b:b5:2b:f8:b5:0d:8c:26:2d:33:01:
d0:b4:6c:84:a5:44:bc:b0:b9:07:5d:ca:74:4e:3d:d3:97:89:
c3:cb:06:21:b3:5d:35:50:33:5a:68:88:bd:45:c2:10:ff:fe:
75:ba:9f:6b:3f:06:72:6a:c1:6c:f9:96:69:53:a1:85:09:db:
ed:74:05:9c:c8:45:90:0f:4c:60:ee:b6:60:ec:4a:21:69:a6:
eb:38:a7:87:c2:06:a9:c2:25:aa:b7:b7:43:62:fe:b0:05:a3:
0f:93:83:82:6d:86:0a:f1:e5:69:a8:b5:22:de:4c:c9:00:5e:
fd:d2:cf:a8:4a:7b:1e:2d:b3:b8:9f:57:4b:db:40:0d:05:59:
af:95:5c:a2:2a:0f:27:94:67:42:77:34:bb:ec:19:65:f1:97:
e5:de:ff:3c:42:5e:26:43:75:a3:31:8e:dc:fa:99:ca:dc:ce:
26:2e:25:30:9f:b2:00:cf:9c:c3:18:30:0e:2a:0a:21:30:60:
71:97:85:0b:eb:c2:19:2d:c7:f0:dc:06:94:7a:d8:8e:9d:49:
93:a0:89:8d:8b:56:44:2c:38:10:7b:58:e9:40:02:4b:99:1b:
13:db:a1:e4:d5:05:be:5f:d0:4b:45:b6:d9:e5:aa:cb:50:49:
62:de:0a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:54 2026 by rpki-client