Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
File: Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft (raw, json)
Hash identifier: 1RaUoU2ev21aM0QdQmH25HJtKPfuHR/QtFUoelNuG1k=
Subject key identifier: 3B:99:A1:95:94:6C:A8:CF:3E:A5:03:FF:8E:AB:FE:9A:C2:0A:53:0B
Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Certificate serial: 019D37892D3A05536F91100F83618FF80247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:00:30 +0000
Manifest this update: Sun 29 Mar 2026 03:00:30 +0000
Manifest next update: Mon 30 Mar 2026 03:00:30 +0000
Files and hashes: 1: 8-89J-VDYbXo5QJ6KxQpyalUIfY.roa (hash: 6ikDySot4sJSAZPqWZ7X36wEO/TGRKEez0qZEAZB7js=)
2: Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl (hash: qxlXI21g+HuBWFn1qcpjY+HxTuo79ioi3PV40sKEyMk=)
3: L8AVKGa-B0wTU4PbL9QcxbYeJJk.roa (hash: o6V+qlxfeOpUo6BdN79h+Rr8zer3sNJyIWZIjdcrgXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:2d:3a:05:53:6f:91:10:0f:83:61:8f:f8:02:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Validity
Not Before: Mar 29 03:00:30 2026 GMT
Not After : Mar 30 03:00:30 2026 GMT
Subject: CN=3b99a195946ca8cf3ea503ff8eabfe9ac20a530b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:1c:39:51:9a:0e:75:12:e9:f2:9b:29:5e:
b6:4c:0c:1b:7d:33:2b:e5:7c:1b:b5:3a:b2:c8:ac:
8f:fd:5b:87:a1:02:a0:bc:20:32:41:78:b0:ae:54:
2b:e7:6d:0e:28:b6:c2:81:35:40:44:cd:4b:f6:5a:
4f:f9:63:ff:17:25:ba:d2:df:17:61:40:27:3f:ef:
9e:5a:02:c6:d1:70:29:20:e1:2e:7d:f2:77:84:3b:
5a:d1:66:12:ad:29:fc:f3:74:fb:6c:77:bc:81:56:
09:4b:20:96:35:13:08:12:b8:25:5d:c8:9f:b8:8c:
9c:bf:a7:53:ca:41:85:7d:ae:06:50:bc:38:dc:d8:
4b:7f:9f:67:4f:5c:00:b6:62:9e:ab:a5:13:e8:d2:
f0:f1:1e:0b:bf:9a:0a:97:d9:5f:cd:e7:a1:32:0e:
4a:10:e7:e2:50:62:c6:20:6a:a5:93:4b:b5:d9:61:
d5:37:44:ca:83:b5:ab:31:17:dc:01:fd:01:9f:1e:
a7:23:08:23:cc:c0:30:a1:01:1d:83:ae:14:46:09:
6e:d6:8d:88:4b:0e:13:3f:ee:34:c2:2d:7f:49:63:
72:ab:f2:f7:72:82:a0:b8:3d:05:89:5e:9f:0a:ac:
61:0a:dc:1b:0c:68:dd:d0:f7:1d:3e:61:92:78:51:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:99:A1:95:94:6C:A8:CF:3E:A5:03:FF:8E:AB:FE:9A:C2:0A:53:0B
X509v3 Authority Key Identifier:
keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:6a:11:b5:0a:c9:95:99:ac:39:7f:3c:35:c7:12:92:fb:b0:
6e:0b:5e:13:2b:9b:02:af:d7:e3:e6:2f:21:ec:23:9f:bd:5b:
f1:9d:5e:16:ba:25:66:ab:db:21:f4:4f:7b:aa:3c:7b:af:82:
49:6a:89:dd:20:b0:e2:9f:5e:8b:55:32:71:75:1b:72:3b:82:
69:67:4f:85:03:37:fb:f0:24:0f:29:e8:56:0f:58:82:82:4c:
ee:cf:ab:a5:f5:09:8a:68:16:5d:a4:9f:de:6e:89:fa:92:da:
cc:bb:19:5e:87:77:60:b3:5b:77:04:0c:55:d9:0e:de:e5:8c:
13:29:ae:88:1b:f4:22:a6:90:79:a8:25:4b:08:45:14:d7:00:
db:49:69:ac:09:8a:c7:9c:2f:4b:fb:94:6c:56:14:42:27:28:
e7:dc:a1:e8:d4:56:8f:e0:2c:e8:d2:9e:30:f0:dc:44:71:90:
f3:8a:59:ec:e8:a3:e2:25:8c:d5:30:1a:d7:b7:fc:1b:22:d7:
32:0b:5b:15:08:39:02:59:3c:c1:29:0a:13:e5:9f:d4:6e:56:
46:93:58:9a:ec:e8:f8:b4:00:15:19:3a:2c:dd:94:27:72:6e:
2a:16:76:d2:80:71:ae:e7:53:cf:b9:09:fe:58:2f:d5:1a:d2:
86:96:b9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:56 2026 by rpki-client