Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
File: RIGO8G79biLUcUBKtTikucgH7-A.mft (raw, json)
Hash identifier: zsQrP6KwMJyuPVDdhbr0UgJAHP3Uvtd4ZK+zKQtTxJo=
Subject key identifier: 62:1D:29:78:60:F2:58:C4:F3:07:FC:9D:D1:8B:DA:F0:C6:4B:9A:E9
Authority key identifier: 44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
Certificate issuer: /CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Certificate serial: 019D389BFB80149E5107C026C2A28FBCC7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:39 +0000
Manifest this update: Sun 29 Mar 2026 08:00:39 +0000
Manifest next update: Mon 30 Mar 2026 08:00:39 +0000
Files and hashes: 1: Q9i-FCkC-t1j39X8T_DbrADXSgI.roa (hash: hTcLuq6cpKXAgg3YJq/YAMv0+iDnhPDuX0a1jXYwiP8=)
2: RIGO8G79biLUcUBKtTikucgH7-A.crl (hash: fxoR/S8qfk3UEWejzAeYevQzQteC/pDK6apD4iKP9jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fb:80:14:9e:51:07:c0:26:c2:a2:8f:bc:c7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Validity
Not Before: Mar 29 08:00:39 2026 GMT
Not After : Mar 30 08:00:39 2026 GMT
Subject: CN=621d297860f258c4f307fc9dd18bdaf0c64b9ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:db:f3:ee:67:4d:51:5b:d7:04:ee:47:06:
99:a3:e3:ce:18:fb:66:a3:aa:b2:78:c2:8a:d7:bd:
8d:eb:0b:6d:6e:0b:e0:78:8b:37:0a:52:8e:7b:2c:
4b:ed:88:5c:f2:7c:d6:e6:d3:d8:9e:51:08:f3:82:
d4:08:ec:59:7b:5a:45:32:1a:37:7f:ae:c1:aa:84:
60:0c:86:02:bd:ae:d1:ff:cc:53:47:d7:bd:ca:f5:
a8:80:0a:54:37:30:93:68:97:46:41:67:bf:be:4f:
48:e7:e5:d7:d4:72:38:73:b1:1d:45:77:67:57:f4:
e8:97:35:d5:60:49:5d:7f:07:5c:d2:ce:d4:fe:ae:
93:62:a4:4c:6e:c4:ac:5b:a6:47:a1:59:79:b3:bc:
86:4c:c6:74:9f:cd:19:f8:92:4c:49:7d:67:fa:cc:
ac:54:3f:24:fe:fd:e9:98:69:ed:ba:be:6d:34:c9:
cd:d7:ce:a5:0c:3e:ee:84:2e:78:e0:34:1a:e7:8b:
72:4e:2e:73:65:03:fd:69:c9:ff:af:72:b8:bf:86:
f8:7b:73:39:eb:5e:3e:4b:37:fc:16:20:7e:10:cd:
50:6c:d5:19:27:fa:bc:46:a8:53:b4:e3:b2:e9:c0:
48:15:bb:8a:ba:cc:3a:de:e6:79:7f:98:ab:0d:74:
74:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1D:29:78:60:F2:58:C4:F3:07:FC:9D:D1:8B:DA:F0:C6:4B:9A:E9
X509v3 Authority Key Identifier:
keyid:44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:57:d6:a0:79:be:7e:8f:a6:07:5b:ce:21:bc:72:60:02:ba:
b1:f8:7c:7a:46:3d:2f:c8:14:c0:7c:14:cf:7d:d2:fe:ca:ee:
f7:db:c1:7d:23:0b:59:61:d6:c7:d0:f7:10:00:a9:11:08:4f:
a4:39:99:57:93:b9:95:09:e0:ae:fc:b1:c8:41:a9:bb:ff:11:
c0:10:40:c9:c4:75:1b:66:df:99:dd:6b:7c:e4:99:ad:58:da:
13:37:16:ee:bf:66:0c:10:49:36:ae:8a:9a:ae:ca:37:aa:f4:
6c:e0:b6:0b:18:63:0f:2f:cd:d5:6f:a7:78:8c:7f:3d:04:da:
90:ca:9f:84:56:5f:c2:4c:62:df:e2:e8:ae:ab:da:45:3a:55:
d6:3f:70:0a:54:cc:05:9b:8a:0b:03:1f:c2:54:5a:70:e0:1b:
70:cb:0c:49:41:b1:9a:2a:1e:2c:ba:11:30:d0:70:3c:b6:ed:
d2:36:67:2c:3d:f6:85:54:c8:0f:3f:df:7a:a9:54:db:53:19:
ea:c6:4a:1b:7c:e9:63:49:fe:f9:8a:c8:e7:81:6a:e9:80:31:
94:5f:a3:05:bd:3d:cb:66:1e:fb:59:1a:13:27:70:33:17:a5:
78:62:c4:6c:40:d1:32:71:6c:22:95:f4:96:b3:b5:3c:a5:56:
0f:34:89:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:59 2026 by rpki-client