Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
File: _IJp9C5GRBqx7ZlMifdHuqVU4yA.mft (raw, json)
Hash identifier: mSJnWfie/Uvhb6JpXdopPywClnvk0M9ekOb48Ypkag4=
Subject key identifier: CF:7E:8B:23:54:B7:FC:9A:79:C2:67:D1:F2:CA:A3:EE:66:F5:82:92
Authority key identifier: FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
Certificate issuer: /CN=fc8269f42e46441ab1ed994c89f747baa554e320
Certificate serial: 019D37C0E99B8A191006CC2A1E3274A3202E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:01:22 +0000
Manifest this update: Sun 29 Mar 2026 04:01:22 +0000
Manifest next update: Mon 30 Mar 2026 04:01:22 +0000
Files and hashes: 1: OA7ua6CV1NawowKipRihY67EFIg.roa (hash: xqJsWriHrPd8Qn5lT9pYETlcfFbLKXpXQUl+bRYJP2M=)
2: _IJp9C5GRBqx7ZlMifdHuqVU4yA.crl (hash: GM88Tk6wWM9Ae0M3tqiNd6WWzClMkbcTyCsB6WquY+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e9:9b:8a:19:10:06:cc:2a:1e:32:74:a3:20:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8269f42e46441ab1ed994c89f747baa554e320
Validity
Not Before: Mar 29 04:01:22 2026 GMT
Not After : Mar 30 04:01:22 2026 GMT
Subject: CN=cf7e8b2354b7fc9a79c267d1f2caa3ee66f58292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:79:3b:56:c1:82:74:99:97:d6:82:c6:a2:25:
be:f8:f0:87:5a:fb:48:f2:72:3b:01:95:53:99:9a:
48:eb:8c:1f:29:b4:2f:32:c7:62:69:a4:39:ae:6b:
c9:6d:b3:7a:24:7d:39:3a:6c:e2:7f:8c:53:13:61:
75:ea:d6:b8:70:e3:24:30:fa:a5:f0:66:48:5a:2e:
52:8b:12:d8:50:36:cb:61:41:d8:00:de:68:38:42:
e3:97:23:ea:dc:14:22:76:64:7f:77:34:c0:37:0e:
03:1c:a8:f4:c5:ae:aa:59:d3:07:50:b8:5b:19:14:
e0:8e:a5:0e:59:4d:a3:2a:33:1c:3b:14:11:c8:5e:
7d:3e:38:48:a9:93:5f:60:a0:64:2b:19:24:c5:74:
e1:69:04:41:5b:4c:78:97:5b:59:9c:fb:b5:92:aa:
68:09:fe:14:e6:71:5b:f6:2a:6e:ee:92:0b:d7:9d:
92:08:fa:2a:a9:13:2b:13:ab:13:82:ab:29:77:68:
69:fd:da:93:33:fd:7c:84:14:92:e8:4f:65:55:3d:
21:c2:2a:35:f6:39:d2:d6:5c:40:56:a9:93:7b:df:
cf:dc:de:ca:ed:f5:78:e3:c5:46:18:1b:52:bf:04:
2b:6a:c6:46:54:88:12:a1:34:90:54:6e:bd:89:7d:
6f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7E:8B:23:54:B7:FC:9A:79:C2:67:D1:F2:CA:A3:EE:66:F5:82:92
X509v3 Authority Key Identifier:
keyid:FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:54:ee:98:e8:b2:d9:df:3c:cf:38:eb:70:9a:0c:ae:bf:41:
6c:45:ab:ab:80:a3:09:34:18:78:fb:47:fc:42:e2:32:57:9a:
d3:58:2b:dc:cf:2c:97:2d:37:43:84:fc:32:f3:c8:34:93:ef:
a6:28:03:1e:15:59:23:e9:90:ee:0e:ab:bc:c3:37:da:6c:e1:
5e:13:1d:05:ee:ad:41:1e:18:a9:65:87:86:de:66:97:8d:68:
eb:e7:05:8a:5a:3e:5d:79:90:0e:1e:c8:00:74:c5:b3:75:fc:
29:55:e1:52:a0:73:2a:28:b4:87:bd:77:cd:9b:08:cb:e5:02:
f1:06:94:26:68:1d:4a:40:f2:c9:37:38:0a:95:02:4d:af:5b:
af:bf:d3:5c:83:23:f0:0f:50:d8:23:d3:68:0f:09:a3:22:d1:
e1:be:a5:b9:0d:ec:b7:2f:06:6d:c1:ac:10:e8:1d:f2:96:3c:
d9:fe:9a:6a:3d:17:e4:da:40:f9:83:d1:7d:f2:de:9d:2e:94:
7e:52:88:a0:31:1a:88:3b:63:d9:78:93:4b:c5:bf:62:ef:b5:
bc:0b:a6:d0:b4:05:66:1f:8d:4b:38:77:11:4a:67:3b:a7:5a:
04:a5:91:64:df:38:01:83:52:97:80:ca:e3:2a:57:8b:5c:65:
d0:fb:24:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:54 2026 by rpki-client