Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
File: Fwpcah2MIGUdVj4_ELujqD344L0.mft (raw, json)
Hash identifier: r7d7zoeGYyuCX1WMpkmBSdgAeWH9MjLY9dK26wyAjG4=
Subject key identifier: E4:7D:A3:73:F8:A8:A0:B3:29:F4:6C:AD:52:68:53:36:2B:D8:A0:B6
Authority key identifier: 17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD
Certificate issuer: /CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
Certificate serial: 019D3866341EE77259A99ECBD1D6BCB61FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 07:01:55 +0000
Manifest this update: Sun 29 Mar 2026 07:01:55 +0000
Manifest next update: Mon 30 Mar 2026 07:01:55 +0000
Files and hashes: 1: Fwpcah2MIGUdVj4_ELujqD344L0.crl (hash: CkDaaE6HBYceUzlTlxkGU0VgHWrPnpZCRlOb6eWgxMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:34:1e:e7:72:59:a9:9e:cb:d1:d6:bc:b6:1f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
Validity
Not Before: Mar 29 07:01:55 2026 GMT
Not After : Mar 30 07:01:55 2026 GMT
Subject: CN=e47da373f8a8a0b329f46cad526853362bd8a0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:32:6a:7e:da:67:3f:cc:bf:70:7c:ea:e6:31:
af:16:c8:af:2e:bb:33:64:ee:93:79:1c:e9:17:a3:
30:8b:f2:ad:e5:49:d8:9c:11:4a:d7:ee:e2:bf:77:
41:6a:5d:48:ce:b9:06:85:fb:94:35:80:f9:e7:5c:
16:ea:80:7a:94:a2:cf:84:74:2b:44:4f:29:70:6f:
e0:00:8e:bb:bf:e7:b9:d7:9e:2b:cb:e9:7d:fa:ca:
0c:66:b9:75:e1:24:70:f3:82:0c:91:60:f6:71:2f:
d9:37:b9:fe:31:ce:44:36:9f:3e:34:4c:d7:7b:75:
29:36:f8:08:f8:1b:51:86:ce:0c:d7:7e:a1:85:c5:
4a:97:b0:2b:40:21:18:0e:f1:27:17:99:2f:07:d0:
e3:35:dd:e4:7f:53:a4:ff:0c:ee:ee:8a:14:fe:39:
d4:10:40:fd:49:79:0a:51:9e:ad:10:5b:59:1e:f5:
77:77:ec:81:55:db:e6:4e:3a:fe:1a:d1:22:f4:91:
89:2f:07:41:f7:d9:17:ab:5b:be:83:4b:a0:ce:b3:
bc:b3:8e:a3:a7:10:61:44:c4:54:9e:92:27:9e:33:
12:17:5d:8a:ae:2b:88:cb:1e:3e:53:66:86:9c:68:
ed:bb:9b:7d:7f:e3:29:46:cb:93:d9:74:98:40:51:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7D:A3:73:F8:A8:A0:B3:29:F4:6C:AD:52:68:53:36:2B:D8:A0:B6
X509v3 Authority Key Identifier:
keyid:17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:bd:39:62:44:26:49:a5:73:62:13:7a:e8:41:2e:b7:0c:db:
25:11:4c:38:aa:c0:44:77:7b:50:36:f0:69:e1:94:a7:37:ac:
61:64:1c:6c:da:cf:8d:6a:d3:2c:5c:3b:b2:4b:21:52:00:43:
4d:b5:6f:d0:89:9d:bb:40:2b:5e:f4:cf:c4:a4:e7:b0:ee:40:
50:d4:cc:87:06:1a:d3:4c:bb:aa:5f:6c:84:3c:2f:68:5a:79:
3a:dc:48:dd:67:04:8a:b7:c3:4e:17:c9:bb:da:36:3c:58:e8:
4e:19:ce:14:f2:dc:19:e7:fa:54:a7:b1:6e:bc:86:1e:ae:73:
74:c5:3d:35:b9:55:de:ef:06:75:01:69:6d:02:89:55:f4:37:
58:94:bd:c3:9e:5a:51:bb:85:0b:28:56:9e:d1:8b:76:47:1b:
43:a2:b4:e3:d3:a7:be:df:b2:99:83:de:0d:1d:a2:1b:f4:a2:
79:31:4f:fb:62:73:a0:51:f8:5c:1b:e1:bf:a9:69:8f:d4:5b:
c2:a9:72:d1:99:8d:9b:26:fa:37:7a:b2:be:bb:2b:d8:7b:a0:
8c:2e:c2:a2:d2:f3:2a:25:4b:f0:82:7c:79:5d:2f:47:5a:c3:
88:9d:e5:39:63:59:0d:36:21:3b:1c:38:9c:76:ff:7d:10:0e:
1c:07:27:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:45 2026 by rpki-client