Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
File: RgeLLcCGzllV5i25IvNUuC0TzVs.mft (raw, json)
Hash identifier: 3zY4A4RIM5KnfS1Hp1SVIAuBL/kW0TTBZcSq93GsPtw=
Subject key identifier: 7A:A4:1F:E8:6F:F5:07:59:FD:84:BE:89:9F:E7:67:97:35:C2:BE:48
Authority key identifier: 46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
Certificate issuer: /CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Certificate serial: 019D37BFF56CC97F1B5D82027EAF61D8EE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:20 +0000
Manifest this update: Sun 29 Mar 2026 04:00:20 +0000
Manifest next update: Mon 30 Mar 2026 04:00:20 +0000
Files and hashes: 1: RgeLLcCGzllV5i25IvNUuC0TzVs.crl (hash: z9ydOkE256HFJX2P8owedyv5lw3hzwIr3UGYNz9V9Nc=)
2: w-HS7u9pOCeavi1t1p3yuKE0Dtk.roa (hash: vpKhQFUnBTckNnsA2ROYZZBHVXGsMz3MaClaBLJjb4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f5:6c:c9:7f:1b:5d:82:02:7e:af:61:d8:ee:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Validity
Not Before: Mar 29 04:00:20 2026 GMT
Not After : Mar 30 04:00:20 2026 GMT
Subject: CN=7aa41fe86ff50759fd84be899fe7679735c2be48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:d0:a8:80:d7:ed:3d:69:e2:ac:72:8f:f1:
6c:23:69:30:17:ed:95:06:05:8f:3b:53:d5:2f:90:
ca:c5:e4:19:08:be:bf:14:dd:f1:3f:ff:d8:76:97:
c0:6d:c7:d8:ef:83:6d:61:bf:c5:b5:50:83:c0:a7:
18:08:1f:90:e3:50:ea:40:ea:fd:0a:2b:75:16:1b:
58:55:aa:b9:c9:27:24:d7:23:c1:a8:22:bf:cb:eb:
33:d3:50:ef:fe:75:19:fb:36:6d:73:74:eb:db:f8:
ae:c8:14:cd:d3:2f:3e:39:27:54:f7:6f:77:20:30:
5f:ce:0b:86:79:ab:63:22:69:ec:35:4a:e6:02:f0:
8f:b2:c2:29:95:b8:42:be:75:eb:cd:a1:6e:1d:d2:
1b:0c:4b:da:4f:41:c4:13:17:4c:52:4a:2d:36:c3:
9b:e8:cd:cb:9e:b0:51:ae:ae:46:b9:80:c6:8d:79:
92:ed:cc:c8:c1:d1:b8:f8:65:a2:a0:7c:cb:83:67:
3b:4e:c9:55:9e:36:29:07:1d:b6:75:07:65:70:0b:
6d:8e:bc:b6:2e:f1:de:c0:2f:52:44:d3:93:64:d6:
e8:64:f5:80:03:2a:7c:ba:7b:91:c0:11:98:47:88:
11:16:52:27:fb:a2:af:73:89:e8:eb:d7:88:57:b4:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A4:1F:E8:6F:F5:07:59:FD:84:BE:89:9F:E7:67:97:35:C2:BE:48
X509v3 Authority Key Identifier:
keyid:46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6f:fb:1f:ce:90:bc:04:a3:07:56:01:4e:3c:1c:18:c8:00:
f4:e7:89:8e:fd:04:d5:59:cf:f1:c5:bb:8c:5e:e7:cf:13:9e:
5f:63:98:d8:4d:b0:be:5d:a9:6f:30:e4:2b:2c:25:4f:cf:b3:
38:2a:c1:73:92:85:49:1d:37:e8:50:03:20:5b:76:37:26:15:
50:eb:c2:70:69:0d:4f:10:29:0a:33:56:14:2c:bf:c6:8a:9b:
62:51:b6:b0:59:fb:a9:14:4d:ed:df:9e:95:37:6b:0b:a3:51:
0b:5c:b3:41:26:37:7c:b1:c6:2d:0b:47:26:30:91:75:a3:45:
70:71:01:09:53:c0:a8:fa:bd:e6:1d:7c:4d:29:39:ad:5b:75:
80:c7:a2:1c:1b:af:1b:a3:f6:f6:17:56:56:5a:af:c2:53:08:
9f:82:68:15:b0:87:b3:db:9c:a0:fa:c7:06:9c:8c:ba:9c:84:
a9:f7:c3:95:c6:d4:ce:7d:88:c0:8e:96:77:24:ae:8a:68:17:
a9:43:28:58:6a:79:aa:79:14:52:95:d0:22:d9:dd:98:2b:36:
c2:72:4d:98:61:d4:57:69:d2:e7:51:f1:a6:f9:f9:f9:1c:b8:
fb:76:60:1b:4b:7b:39:69:05:57:16:7f:0b:6d:ff:13:f3:fe:
09:28:68:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:42 2026 by rpki-client