Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
File: q8Legg4C88P4bluMnEndxJMlEj8.mft (raw, json)
Hash identifier: H6KheXV+3+S2NUj0fo2wkud7frj2HyYV5hPYW0mQGPI=
Subject key identifier: A3:8D:76:D5:F1:02:A7:75:8B:2E:AC:6A:DC:1C:70:A3:02:B2:E1:DB
Authority key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
Certificate issuer: /CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Certificate serial: 019D38D30CA5689A11914636F0A6738CC066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:00:48 +0000
Manifest this update: Sun 29 Mar 2026 09:00:48 +0000
Manifest next update: Mon 30 Mar 2026 09:00:48 +0000
Files and hashes: 1: _BnlDW0yMenZgGVAmuqxZ3GnNuo.roa (hash: 7rAqk38Xj2YUz4ZyKSekZT3B86MBmL3C6PiQyPZP8+g=)
2: q8Legg4C88P4bluMnEndxJMlEj8.crl (hash: Qnkeq8bbdbxkRE/JtprhkkyFwMn9xZTEQZWOpgqjXWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:0c:a5:68:9a:11:91:46:36:f0:a6:73:8c:c0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Validity
Not Before: Mar 29 09:00:48 2026 GMT
Not After : Mar 30 09:00:48 2026 GMT
Subject: CN=a38d76d5f102a7758b2eac6adc1c70a302b2e1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:dd:ae:b7:d5:04:59:62:88:0e:10:ad:46:
d6:5e:b3:f4:b9:0d:f5:8c:fe:0c:f5:6b:8f:08:bd:
4d:e9:fc:a9:a9:e1:24:cf:68:03:49:48:6e:cf:ea:
38:4b:32:0a:9d:96:a5:17:8f:65:e7:18:9f:1a:b9:
5c:e5:f8:76:15:18:56:10:ec:39:71:ba:78:57:12:
cf:de:34:5a:a4:fe:e9:fe:2b:fe:38:b0:ea:eb:f2:
fa:13:80:f9:fe:b3:bd:ae:8f:05:c0:5a:ed:31:1a:
9f:f4:c5:d9:f5:a6:26:3b:f1:b4:f9:ec:58:05:2f:
9a:01:78:5f:41:8a:62:f5:6c:76:0a:58:6c:e3:83:
11:4b:21:d9:a6:1f:be:34:a7:f9:a8:7a:23:af:e3:
ca:c9:6d:2f:0e:b3:fa:1a:37:6b:ac:d9:58:6d:0c:
1c:82:86:cb:af:7c:95:5f:40:f7:a6:6e:10:3d:29:
c5:c1:6c:b2:e4:a4:05:ba:44:02:b7:30:f1:94:8a:
48:d8:55:5a:13:12:7d:b5:bb:eb:69:cc:83:a5:92:
8a:4a:2d:57:65:18:23:02:73:07:fb:d3:a8:33:33:
3f:af:3f:c7:d8:ba:c9:6e:f0:88:e5:64:82:e8:13:
36:23:ea:32:24:2e:16:e7:0f:b9:09:4c:9b:b6:01:
1c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8D:76:D5:F1:02:A7:75:8B:2E:AC:6A:DC:1C:70:A3:02:B2:E1:DB
X509v3 Authority Key Identifier:
keyid:AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:56:a0:5f:28:ec:91:c4:21:f2:5f:9a:6c:fb:a9:27:60:f4:
b2:e0:87:fc:aa:18:48:d1:9f:a2:9f:2d:9c:ff:cc:a2:1a:ea:
56:33:45:3d:34:68:69:95:c4:82:af:f5:24:61:36:1f:d7:85:
86:ae:80:91:19:ec:0f:cd:d0:d3:55:24:94:ea:31:0d:02:57:
f7:a4:04:b4:70:bc:d1:77:54:72:4f:f3:f5:8c:9f:69:b1:9e:
71:37:14:ff:61:d4:bf:b8:cc:5f:3c:1c:0f:31:ee:c5:27:11:
e8:f6:2c:2a:92:81:34:62:ff:77:c9:5c:56:d6:12:9b:ab:2f:
73:98:9b:87:1e:e2:88:63:19:e4:7e:c4:5f:be:88:6d:1e:80:
38:85:e5:9b:54:d6:47:18:8a:c3:05:86:fb:c5:77:98:fc:bc:
3e:f3:0a:14:94:61:87:85:7c:da:75:ec:7a:c1:57:1f:bf:53:
6b:20:9c:5a:cd:f5:b6:2a:21:0c:78:0b:c5:4a:b6:43:bf:b8:
a3:ad:ab:c0:25:63:08:2c:0a:b1:a5:7d:c1:d1:55:6b:1d:b7:
4b:f6:11:b0:1d:8e:a2:4c:4e:b4:60:70:a2:8e:05:95:7c:c5:
85:1b:c5:c7:66:1e:27:20:68:87:5d:5c:cf:24:60:8e:ce:cb:
60:2d:67:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:53 2026 by rpki-client