Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
File: H83UEOElAi3gfKWWP5L3jo-JSG4.mft (raw, json)
Hash identifier: EK/GYgFoY4peaMb2LuXWBtJx4Tl8Fw1Xwb+IVevYGs8=
Subject key identifier: 2E:BD:76:47:6D:C9:C1:49:DA:A8:E3:6B:B3:6D:05:DC:B3:AA:48:4B
Authority key identifier: 1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E
Certificate issuer: /CN=1fcdd410e125022de07ca5963f92f78e8f89486e
Certificate serial: 019D38D34FB98147CA8F6B87ABED7A78BFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 09:01:05 +0000
Manifest this update: Sun 29 Mar 2026 09:01:05 +0000
Manifest next update: Mon 30 Mar 2026 09:01:05 +0000
Files and hashes: 1: H83UEOElAi3gfKWWP5L3jo-JSG4.crl (hash: bQBAnbOfHgjAPK+1L/IXJas3CuQh2Kdwszv+10gKogU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4f:b9:81:47:ca:8f:6b:87:ab:ed:7a:78:bf:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fcdd410e125022de07ca5963f92f78e8f89486e
Validity
Not Before: Mar 29 09:01:05 2026 GMT
Not After : Mar 30 09:01:05 2026 GMT
Subject: CN=2ebd76476dc9c149daa8e36bb36d05dcb3aa484b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:08:9d:cf:31:22:e2:19:80:15:13:38:18:
19:b5:48:1c:a9:77:81:ba:3e:e3:42:b8:07:45:b6:
a5:92:58:11:ad:1e:82:51:f3:a2:af:7d:65:c1:12:
2e:22:77:66:76:77:ab:b4:a2:e5:c7:1b:dc:6b:a1:
c0:d6:ed:6a:5a:3e:4d:0a:94:50:dd:42:3b:26:c9:
1a:0a:7e:79:0b:b4:63:3b:1b:05:e7:c1:f4:6e:19:
9d:90:d4:a5:4f:b0:3e:17:9a:11:1f:37:59:1f:75:
05:74:20:28:81:c6:95:68:73:5d:ac:c2:11:dc:70:
09:90:7a:e1:56:5b:1d:00:1c:49:7b:fd:4c:10:e4:
ed:4d:df:fd:c2:52:c7:6f:3c:d7:ec:4c:d4:4b:55:
b4:34:51:2a:45:e0:f2:ff:0c:f8:9d:ed:e0:ce:e8:
c1:68:99:c0:8c:7c:05:1f:e7:10:b3:12:7b:12:f4:
83:a5:22:35:7d:92:23:87:de:29:e2:31:97:21:67:
1c:05:c9:42:ce:9a:85:18:31:a1:e6:88:02:24:eb:
e5:26:83:92:ad:bd:42:89:7c:ee:c4:df:bf:be:16:
8d:cf:81:04:d1:c5:f7:72:d0:c8:1c:ea:ba:81:e3:
73:c9:06:90:f0:2a:df:26:95:1a:73:79:97:cc:ae:
72:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BD:76:47:6D:C9:C1:49:DA:A8:E3:6B:B3:6D:05:DC:B3:AA:48:4B
X509v3 Authority Key Identifier:
keyid:1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f1:28:eb:14:6c:fe:c1:7f:1a:68:28:29:ee:c6:6b:97:61:
43:3a:4e:14:1f:8b:c8:fc:b1:52:2d:f8:d6:6c:cd:fa:0d:4a:
85:95:a4:68:8e:c7:69:d3:77:22:7f:9a:04:ed:86:83:f1:f9:
dc:c4:f1:e1:00:3f:60:fb:80:af:1e:b5:63:6b:d4:7c:82:31:
49:89:09:3c:b0:f0:a3:6c:ce:b4:66:52:52:c6:b9:4d:e1:10:
9a:fa:c2:1b:31:81:51:33:54:6c:37:70:da:44:ac:15:17:64:
d0:2e:f3:6e:f3:d1:79:f5:19:e8:36:bf:8e:74:a7:52:da:32:
09:ab:9d:7d:8f:92:71:99:10:dd:96:7b:21:7a:fa:d0:87:25:
bf:a1:16:3f:d4:65:fd:8a:4b:7e:83:33:9e:79:83:9e:2b:ec:
a6:58:66:df:59:18:db:11:9f:50:39:f7:9e:86:1c:a9:73:fb:
4f:87:a0:39:5f:08:23:91:79:b8:9a:ce:31:c3:4f:b0:e4:d0:
ed:77:0a:c9:3f:ad:1d:2a:bb:e6:10:2f:83:5a:66:c7:a6:8b:
b0:3f:f1:8a:f1:d6:8b:e7:c5:4f:06:3b:8b:46:12:47:cd:a3:
f4:a4:21:1a:b4:68:f8:59:a2:db:ca:35:f8:81:a9:c7:bf:8b:
db:a4:9a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:50 2026 by rpki-client