Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File: fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier: OrPMfPAalb17cjmeYFU1CV8vjlpBnA5JaCR8rz16eGg=
Subject key identifier: 1C:AD:8D:64:D5:1C:3E:9D:00:FD:22:64:C0:FC:27:B7:05:A5:D9:84
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial: 019D382E85C28E31CC707B62343A0FB31488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:01:05 +0000
Manifest this update: Sun 29 Mar 2026 06:01:05 +0000
Manifest next update: Mon 30 Mar 2026 06:01:05 +0000
Files and hashes: 1: VDuV_ga9fKWg5ZTg4MIqY7BMCyw.roa (hash: KhFc35C6NWJw+95DJdGU/WqBGVukwlgQW3Tv6X8QShQ=)
2: YV2FC6tSLQepIUe84M0yNrIYwXI.roa (hash: a1BK4hhpvi1wRKKydzXpZZxOv3b6LUqaoMmqbdgZ8n8=)
3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: rcEPK58f6zboSEiq0K4slNqDCszBKlFYSEgEgvp0Txg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:85:c2:8e:31:cc:70:7b:62:34:3a:0f:b3:14:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Validity
Not Before: Mar 29 06:01:05 2026 GMT
Not After : Mar 30 06:01:05 2026 GMT
Subject: CN=1cad8d64d51c3e9d00fd2264c0fc27b705a5d984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:01:ed:62:81:fd:99:df:b7:e1:e6:63:a2:
34:88:54:d2:a3:61:c4:72:73:cb:8f:35:20:ec:99:
63:68:b4:b4:02:f8:9c:56:00:c6:aa:d7:42:b0:fe:
39:f3:33:e5:da:0c:e3:44:6e:6a:a7:21:78:89:88:
0a:35:38:6b:1c:29:29:52:6e:d7:7f:ac:c1:a7:c0:
90:2a:f5:04:ee:b6:ed:4c:d5:a8:6b:bc:f6:1f:e9:
49:a4:9d:cf:2d:da:9e:58:d4:94:e1:e2:21:f4:e5:
c0:47:2f:b7:14:6c:4b:45:f3:b5:b1:bf:ae:70:04:
3f:f3:5b:02:c9:e7:ea:0d:fd:1a:8c:4a:ea:66:04:
c1:ef:01:32:c2:12:9d:a4:d1:60:36:44:73:bc:92:
1e:b0:ad:eb:21:ae:58:72:d1:92:c6:38:7c:15:fa:
aa:ea:5d:dc:a0:70:36:1d:a4:09:ac:f2:f7:17:3a:
31:59:26:21:be:72:32:52:84:9a:dd:2d:20:b1:cf:
45:02:ce:1c:b3:9b:22:bb:6b:c8:5a:53:a1:d6:27:
ee:41:4c:d5:dd:15:1e:09:6b:b7:92:36:dc:f9:79:
55:e8:b4:d0:b0:e9:e1:c7:02:c5:db:07:be:91:5e:
54:36:02:06:62:d1:00:bf:97:8b:dc:7e:e4:c3:e1:
7e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AD:8D:64:D5:1C:3E:9D:00:FD:22:64:C0:FC:27:B7:05:A5:D9:84
X509v3 Authority Key Identifier:
keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ff:67:1e:93:be:78:88:1b:ca:3a:6a:72:aa:a1:dc:4e:0b:
91:10:cc:59:27:90:ad:a0:39:ab:56:60:04:f7:ba:60:40:ac:
36:98:cd:f9:74:0d:c2:c4:fe:19:61:85:f4:47:57:62:6d:49:
c9:68:12:a7:8f:60:b1:de:f8:1c:ed:27:2a:f0:7a:30:03:67:
07:aa:3e:32:65:95:2a:ac:e2:14:c1:d5:9c:79:c2:84:6b:d5:
5d:1a:df:0f:62:68:58:bc:ce:13:8a:e0:59:1e:69:37:7e:00:
14:8f:4b:69:42:d6:d1:77:b1:55:05:41:68:03:1a:ec:54:e6:
94:53:d2:d5:93:2c:1f:0e:2a:10:aa:88:60:88:af:63:e1:af:
68:44:30:80:0c:79:fa:8c:94:dd:a8:d1:fb:38:a0:83:42:60:
00:27:34:33:14:83:fc:bb:cd:76:e4:e4:c1:b1:3a:4a:6b:c1:
f9:ef:49:d4:8b:bc:2f:7a:f2:90:2f:7a:88:7d:8d:91:d6:51:
5f:4a:a7:b3:c6:82:b7:ba:ad:cc:ac:04:d9:d3:af:c1:69:85:
65:82:50:42:02:11:40:1e:d2:0e:e9:20:02:38:ae:fc:56:94:
e4:e1:63:88:5b:41:da:aa:7b:7d:a1:6a:9b:a2:c8:75:f6:4a:
11:02:e1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:24 2026 by rpki-client