Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
File: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft (raw, json)
Hash identifier: hPxBJZIl1sj7MmwD/W1P//xKhLFetU6eIYRU4MZ0oo4=
Subject key identifier: 2F:6C:FB:11:43:3A:2F:B9:E8:B0:2A:F1:98:76:70:A2:10:30:B5:37
Authority key identifier: FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
Certificate issuer: /CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Certificate serial: 019D37C13C07790615F6B165207493D1F9C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 04:01:43 +0000
Manifest this update: Sun 29 Mar 2026 04:01:43 +0000
Manifest next update: Mon 30 Mar 2026 04:01:43 +0000
Files and hashes: 1: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl (hash: LvAM6Dp1qs6gcqk6sierq5N+wfLpCDU+8oR6NCqwNq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:3c:07:79:06:15:f6:b1:65:20:74:93:d1:f9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Validity
Not Before: Mar 29 04:01:43 2026 GMT
Not After : Mar 30 04:01:43 2026 GMT
Subject: CN=2f6cfb11433a2fb9e8b02af1987670a21030b537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:26:e8:41:7e:1b:0f:cd:18:de:c2:4d:2d:
85:c0:e4:38:7c:6f:05:c1:a4:66:39:75:af:bb:28:
66:7b:59:b4:15:7a:d6:9d:a6:7a:e9:82:b9:84:aa:
a9:9e:b7:42:f7:49:cd:a6:1e:48:d0:1c:29:85:16:
b3:d6:d7:e6:43:99:67:60:cd:d1:fd:64:f2:2c:b3:
d8:22:f6:d5:a0:6f:c0:f1:5f:b4:d6:e9:c2:5d:dc:
99:e8:27:f5:33:17:3d:e1:21:8d:16:39:de:b8:79:
03:fd:e6:7e:12:ac:99:c6:35:f9:ca:2b:3d:51:55:
a0:f0:b3:aa:02:64:c1:1a:f9:10:16:53:79:b3:82:
4b:b2:ba:47:bd:fb:e7:f6:3e:31:d4:dd:11:81:a7:
46:99:e4:eb:a4:72:f3:e0:64:29:1c:85:f8:b8:36:
3f:b0:f2:0a:84:33:01:97:8c:14:79:03:b2:82:e9:
af:dd:2b:82:34:5d:08:ab:cf:a9:a7:c9:f7:7a:f1:
bb:29:22:e1:95:5c:c5:af:1f:fb:20:8c:43:07:12:
a5:bd:f4:dd:dc:b2:27:17:1f:d3:1f:28:20:02:c1:
5f:68:9d:51:82:15:04:5b:dc:15:27:e7:5e:e8:72:
6c:cc:73:1e:f8:6e:d8:c4:9c:77:ee:ae:51:d3:c5:
7d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6C:FB:11:43:3A:2F:B9:E8:B0:2A:F1:98:76:70:A2:10:30:B5:37
X509v3 Authority Key Identifier:
keyid:FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7f:bc:8d:b2:21:80:20:e8:cc:d8:07:19:a3:c2:58:3b:60:
ee:2a:c7:a7:63:14:23:d0:33:3a:29:b0:c9:44:76:14:13:6b:
1a:13:e1:0a:e8:3e:a1:92:78:c8:0f:5b:d8:22:5f:61:01:ca:
44:4f:8b:7a:d5:77:c4:8b:e4:e3:35:a7:a4:6f:cc:ca:a0:17:
27:e6:54:14:4a:bb:66:c3:42:4e:29:3b:7f:04:cc:ea:31:4f:
24:eb:d5:05:5d:14:a8:ed:3f:57:7f:0c:e2:ce:4a:25:48:d1:
a4:09:27:20:ba:7f:ee:27:c3:26:e7:56:59:62:f8:2b:94:47:
e9:3f:23:6c:65:bc:d3:32:c4:17:6e:4d:7d:b0:0f:38:0d:8f:
97:12:6b:a7:c6:ab:96:76:2f:40:a8:d0:29:ba:23:f0:be:b9:
0b:d9:94:55:74:95:c9:ca:f8:50:92:01:ba:0d:57:3e:fd:4b:
f3:f3:a0:c5:de:6c:f5:16:82:1f:09:85:fc:21:bc:ea:0f:4a:
75:df:ef:f0:43:d4:c0:40:5c:a2:ab:8a:43:ae:b7:71:11:87:
ea:4f:cb:b1:3a:50:ea:8b:96:83:87:dc:f5:0f:bb:e3:e2:5c:
cd:f6:db:f3:e9:11:6c:38:57:63:91:6e:7c:a6:b1:d4:40:0b:
78:91:16:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:24 2026 by rpki-client