Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
File: dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json)
Hash identifier: qIgl+vEIEIXjD925OxibtNE6jLXd+d7LIXG73TSBJ98=
Subject key identifier: 3B:2C:44:A1:6A:D3:92:A5:12:81:B6:37:64:E0:EA:A2:1A:6D:49:4A
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial: 019D39AEC4FC6868634B972980042BB5BAB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 13:00:48 +0000
Manifest this update: Sun 29 Mar 2026 13:00:48 +0000
Manifest next update: Mon 30 Mar 2026 13:00:48 +0000
Files and hashes: 1: LCf-Tegx0fZiipUoAGLWioHn_mQ.roa (hash: gYRcDzeAFInSekOjnAJBC9uOYALnCXCAmTDWjzmnLrQ=)
2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: UEfCV2tp8INVHvJ8qhUIWKklNblgHS06uD4HViiFqSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:c4:fc:68:68:63:4b:97:29:80:04:2b:b5:ba:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Validity
Not Before: Mar 29 13:00:48 2026 GMT
Not After : Mar 30 13:00:48 2026 GMT
Subject: CN=3b2c44a16ad392a51281b63764e0eaa21a6d494a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:f8:08:d0:23:3e:81:78:d8:1f:31:01:8c:
63:20:ed:64:63:e0:36:f7:d1:38:7f:42:99:0f:6d:
70:2c:6d:fa:b3:de:af:63:fd:30:af:35:ca:f3:74:
41:2d:f7:b0:30:5d:a1:0e:60:95:70:28:f2:06:63:
c3:ab:d2:0d:46:f2:57:4b:03:c3:2c:f0:cf:09:15:
66:9e:fe:62:da:e3:38:45:03:e0:0b:5b:fc:da:9d:
cf:ba:74:a5:97:f4:d7:69:c0:cf:96:93:4a:56:b6:
b5:63:9e:e6:17:41:ad:f4:87:c9:ab:e1:5f:b2:f6:
ec:a2:af:6f:65:77:d9:40:46:dd:68:b3:78:f3:57:
c1:69:89:28:42:3e:8c:a3:67:dd:ef:a4:b4:7a:4c:
12:0f:f3:a6:a1:1d:b6:fc:1a:6a:2a:95:cb:5c:a2:
9d:3b:bc:17:4c:de:e9:4f:d1:66:48:9f:0e:12:c2:
70:4f:e5:3d:ca:e6:e2:ee:42:45:4b:94:54:b0:d3:
34:31:be:51:83:e4:1a:d5:ff:33:df:fc:ec:b4:ec:
80:1f:1e:31:87:ed:62:eb:87:54:83:aa:01:5b:24:
e1:4d:21:71:81:7b:fa:9e:12:63:43:61:64:34:05:
98:c8:66:a8:82:be:68:a1:77:60:9a:21:55:d6:9e:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2C:44:A1:6A:D3:92:A5:12:81:B6:37:64:E0:EA:A2:1A:6D:49:4A
X509v3 Authority Key Identifier:
keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:64:3f:bc:3b:f6:59:0f:55:af:cb:8c:5d:b7:83:89:b4:c0:
b4:50:b2:df:c9:9d:a4:51:d8:b1:20:13:76:8b:c4:41:9d:19:
4e:7c:c4:ae:e0:2c:be:17:57:f1:d2:66:aa:ed:d4:63:31:e8:
19:c9:0c:87:c4:ee:a2:c7:7e:83:0c:ea:c6:d0:e2:54:90:5f:
41:a1:d9:0f:20:a4:65:a0:bc:1b:23:f3:ca:d2:bb:f9:3f:55:
f3:c5:c2:04:74:2e:97:fa:8c:68:66:a1:43:57:b9:59:e2:a6:
7f:81:00:b0:e2:11:3e:79:07:51:35:23:b0:51:16:ab:ba:6f:
f9:14:57:88:21:e9:ad:65:bb:3c:c9:28:bc:2b:09:51:b1:3c:
86:3b:d3:57:6f:10:ab:87:86:e7:60:e5:24:6f:14:83:69:9d:
45:4a:2a:44:4e:4e:88:d9:d2:c2:ac:30:49:ba:ac:1c:4e:af:
95:9b:8a:7f:26:de:94:97:8e:4e:4e:2a:b7:94:8c:67:6c:ba:
09:1f:28:63:d8:d4:84:88:58:e4:3a:2b:b3:66:0a:b6:c5:dc:
b1:a3:0d:33:28:27:ba:d0:bc:03:25:77:72:4c:9d:af:fd:e0:
f6:b1:5e:ff:ef:da:b3:0d:f0:0d:da:e1:d6:66:32:c6:c4:17:
39:32:93:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:56:48 2026 by rpki-client