Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: MymKiCYcZpX3BbjrsPCTDVm4tvtnQv0jphb66SZLF2o=
Subject key identifier: 36:10:6B:06:65:38:39:E3:BB:16:E5:74:27:D3:CE:71:AB:4F:F4:28
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 019D382E63F006002D643B6ED06271B4A7B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:00:57 +0000
Manifest this update: Sun 29 Mar 2026 06:00:57 +0000
Manifest next update: Mon 30 Mar 2026 06:00:57 +0000
Files and hashes: 1: 0oe_lYqhqfWPj1_Z9cf3I0XuBc4.asa (hash: 6KuQFoMyFoqYvRnIbS2lO87lEEY0GqUNL5F5S6mix1w=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: U/3RZJ/PrD+IG/5WknJS8uOIuEUfgvPhKW/uKZLmfvY=)
3: xc0me2KbQgULMNxKZvuhScRUfCs.roa (hash: 1eC4dH6VriQO4HyABKFxPH4gj+O4Z05Js1S0v4IJZ4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:63:f0:06:00:2d:64:3b:6e:d0:62:71:b4:a7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Mar 29 06:00:57 2026 GMT
Not After : Mar 30 06:00:57 2026 GMT
Subject: CN=36106b06653839e3bb16e57427d3ce71ab4ff428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:0d:61:bc:67:0b:fa:53:0a:a1:4e:e7:62:
f4:2e:73:2c:4c:28:84:c1:14:0c:aa:ac:8e:7b:99:
22:c1:a3:0e:9d:58:7e:8a:42:73:3d:4d:8d:3d:6e:
94:a8:fa:be:64:da:91:31:6c:c4:9d:e5:2f:a8:3a:
9b:5b:69:bd:ca:da:2a:99:be:ff:a8:6e:b4:5f:6a:
c2:b7:3f:82:a2:e2:af:96:2b:6f:d8:2d:85:21:2b:
2c:25:7e:88:59:2f:25:18:71:ff:dd:35:74:7e:eb:
5a:c9:42:27:f9:c9:dc:dc:2a:81:b8:17:a0:8f:d3:
05:c2:22:57:58:fa:b8:04:21:5f:20:14:cd:d4:fb:
df:4b:76:11:0b:80:27:67:73:a4:22:86:b9:c0:48:
ce:94:d7:73:4b:de:6f:45:ef:8a:ca:49:f7:76:b4:
06:29:dc:96:88:e0:13:c5:25:4b:00:4f:03:06:c4:
ee:68:2b:52:eb:41:41:d9:84:6d:37:c4:e4:ea:85:
64:f0:76:0c:5a:c5:80:9c:93:35:a6:be:1c:ed:43:
38:f1:9f:a4:78:bf:91:10:88:1e:b1:17:64:bd:b5:
22:ae:1c:ca:df:b2:d8:4e:02:a5:7b:ce:1c:72:6b:
23:fc:6d:89:3f:34:96:61:b4:14:b4:7b:f3:0f:4e:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:10:6B:06:65:38:39:E3:BB:16:E5:74:27:D3:CE:71:AB:4F:F4:28
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:69:7b:73:59:bf:1d:5b:63:4d:a4:a6:7f:a2:ba:83:fa:75:
57:b0:5e:8f:99:8a:f6:28:dc:5a:a3:5d:50:80:d9:59:74:e7:
69:7e:bc:6c:06:85:c7:c9:b8:b3:63:35:d4:fe:68:92:f9:b3:
3b:c5:4d:51:c7:30:5a:50:e0:f3:e7:45:5a:18:01:0b:0f:c1:
70:28:15:8a:60:98:e8:8d:7d:7e:67:fd:fb:a5:98:f7:ba:d9:
22:57:8b:86:cd:b0:43:72:42:69:07:27:0c:d2:dd:e0:df:87:
9c:b7:a7:02:2c:19:0e:36:62:13:58:9d:87:60:ce:d6:16:16:
23:e2:68:21:ef:39:f0:95:d8:ec:43:3e:b4:0c:cb:42:2c:ad:
f7:9e:78:e0:15:2f:47:39:89:c7:e1:16:e7:b9:16:3d:45:c2:
00:19:20:5e:b5:fe:dd:10:2b:59:39:e1:15:a2:c5:87:2e:bb:
28:38:72:ce:ec:69:ea:78:cd:4a:37:54:99:ed:e0:8c:4f:51:
33:59:72:fd:b0:47:ab:be:ea:8c:d0:45:8e:bb:89:79:2b:c5:
36:e5:20:2e:18:65:f2:5b:e9:c4:92:8c:6c:cf:ff:61:10:c2:
21:00:70:93:20:0c:be:0f:fb:b6:c0:4d:69:81:34:e2:91:25:
cd:6e:bc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:01 2026 by rpki-client