Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
File: frRWWjLbPJyLiw97TBG9EVTiDek.mft (raw, json)
Hash identifier: ZqxGknFBfc/IZemj5Vovbpb/fe72C5kQpikVxLrnZlk=
Subject key identifier: AB:2C:19:E7:38:CE:5A:4B:6E:9B:52:39:36:86:F9:E3:FC:3B:C7:7E
Authority key identifier: 7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
Certificate issuer: /CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Certificate serial: 019D37C0374DB8F53B8EE7426699A5F5E395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:00:36 +0000
Manifest this update: Sun 29 Mar 2026 04:00:36 +0000
Manifest next update: Mon 30 Mar 2026 04:00:36 +0000
Files and hashes: 1: 4_Zg75KgBPP6BBMIFU4oYXsmHJE.roa (hash: 99GMcdSiV+hIImiUcGfIB2OPx0b9crsIvHTa4c9Qx/8=)
2: frRWWjLbPJyLiw97TBG9EVTiDek.crl (hash: a7RTTYIO4OZoQNlFb1ty3Qq4X8363neoWzwr9DTAHps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:37:4d:b8:f5:3b:8e:e7:42:66:99:a5:f5:e3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Validity
Not Before: Mar 29 04:00:36 2026 GMT
Not After : Mar 30 04:00:36 2026 GMT
Subject: CN=ab2c19e738ce5a4b6e9b52393686f9e3fc3bc77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:64:aa:d7:e0:a6:22:05:d0:df:47:cd:4c:
c7:e1:00:b3:bf:04:22:6a:46:33:eb:4a:94:2b:ba:
d0:49:d9:c6:45:a2:c5:f8:a8:04:cf:d1:b1:dd:96:
12:a8:ff:e9:66:00:81:21:fe:63:5f:46:60:c6:1f:
9a:e3:9e:99:f7:57:10:46:b7:6c:98:78:c7:70:59:
09:35:76:9a:5c:87:68:03:a7:ac:25:a7:02:86:88:
27:13:c8:b7:6a:cb:a5:98:a2:93:b4:92:4e:c6:1c:
fa:31:00:eb:3e:1c:89:0a:dc:92:f9:da:b3:5e:b1:
9e:1a:da:33:1f:86:dd:d3:91:27:17:46:58:f2:2a:
f8:8f:c4:85:d3:37:a0:21:1a:a2:42:58:87:f7:4f:
70:b9:c0:b6:58:e3:29:fa:b3:3f:c4:1b:39:c4:6e:
3d:81:ec:44:0f:3b:71:49:a3:ba:5d:09:49:c0:55:
9b:2f:bf:2e:bd:21:8a:e6:2e:5f:84:cc:20:ac:13:
cc:4b:52:61:f0:38:8d:f2:ec:23:13:0c:13:2a:b5:
a1:52:58:8c:49:84:48:5c:dd:6f:59:5f:4a:87:c5:
61:91:82:ea:d6:70:2c:db:5c:cc:01:75:55:21:26:
4f:ea:f0:9c:3f:3e:80:20:61:b2:85:ce:03:ad:8d:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2C:19:E7:38:CE:5A:4B:6E:9B:52:39:36:86:F9:E3:FC:3B:C7:7E
X509v3 Authority Key Identifier:
keyid:7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2f:b2:48:71:34:83:23:ed:72:b7:d7:2f:dd:3f:cd:b7:16:
e5:18:df:fb:c2:5f:bb:02:73:82:7f:6d:eb:97:f6:c6:5a:de:
06:9b:74:b7:05:e2:14:e8:31:06:76:65:51:2d:5a:8b:1c:9d:
35:ab:44:f7:01:99:ef:3d:97:25:bd:7e:65:78:ab:a2:b7:77:
f0:9c:04:0e:10:fa:6a:10:9d:56:89:77:c5:66:19:2b:6a:1a:
66:4a:98:0b:15:cc:f9:1e:a1:19:9c:27:83:03:59:d5:ee:f2:
5c:cc:37:9b:3f:e1:cc:d9:1a:aa:23:e7:ca:af:2b:06:ae:1b:
8b:55:9a:25:cb:5a:e3:f1:1c:01:bf:85:e6:12:40:ff:42:28:
cd:be:55:39:6f:f6:22:97:58:b7:6d:d6:ea:60:0d:b8:e0:2f:
35:4f:60:59:3c:fc:48:c4:4a:5d:a1:7f:31:cf:9e:c3:76:78:
9a:30:f6:fe:c2:7c:bc:3a:ca:50:4d:93:bd:ee:07:f5:a7:f4:
f2:88:67:33:e1:9f:da:ef:3c:64:e2:f3:14:06:07:2d:0c:e8:
a3:aa:01:48:ff:92:a8:92:4a:70:82:99:73:f6:3b:3e:56:4e:
4c:ff:e2:97:c6:f0:d4:4b:2e:87:9e:b5:81:cc:f2:9d:b4:2f:
d0:48:74:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:55 2026 by rpki-client