Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier: QGIGzFZ4MFUrn8w+VGxfiJQOxindrIkhG6z4tO6v5dE=
Subject key identifier: 12:B3:E8:C3:23:B5:4F:5C:C9:B7:04:5F:C0:67:61:72:D8:C7:1F:16
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer: /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial: 019D37C08E4E2A9DEC8496786D0F6DC7FC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:00:59 +0000
Manifest this update: Sun 29 Mar 2026 04:00:59 +0000
Manifest next update: Mon 30 Mar 2026 04:00:59 +0000
Files and hashes: 1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: /2Zsh0Mx2zgw66PjSzTcOfKgUaAH8RThKKumxHDWfgQ=)
2: gR91LIxxnbU08v57AUEvFf010vs.roa (hash: SbAN6voQ5c1qkWMDRn5E0Sl0vR5PwgTVIGlVOQ/CsHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:8e:4e:2a:9d:ec:84:96:78:6d:0f:6d:c7:fc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Validity
Not Before: Mar 29 04:00:59 2026 GMT
Not After : Mar 30 04:00:59 2026 GMT
Subject: CN=12b3e8c323b54f5cc9b7045fc0676172d8c71f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:fc:5a:53:17:bc:71:ba:46:01:f7:b8:f0:
ec:14:50:76:70:9d:83:0d:ab:45:f1:67:b7:d8:25:
ec:80:ce:9e:97:b8:78:89:0f:71:7e:02:a6:12:9b:
ad:e9:5d:c0:de:00:bb:d1:a4:bb:be:29:71:28:23:
5e:9c:5e:4b:5f:c4:cc:bb:e5:ee:da:67:17:ed:2b:
26:dd:c2:25:05:6f:f4:79:92:40:64:11:a4:1e:a9:
e4:86:2a:cc:73:47:18:39:c6:7e:e9:54:59:73:f5:
4d:84:8f:c7:ec:c3:ef:31:3f:5f:31:8e:c7:5b:15:
8e:a2:af:b1:a2:a8:1c:33:8e:b1:49:24:85:ae:86:
5e:0e:96:33:fc:c0:c6:9e:8e:45:15:03:70:38:6a:
57:e4:08:82:51:c9:2e:b2:18:90:5e:71:8a:80:1f:
ba:22:0f:cb:eb:54:e5:09:6a:2a:86:33:8a:ad:64:
3a:08:65:76:66:80:28:0a:54:3f:a5:68:a0:9d:2e:
5f:2d:41:10:ef:0c:c3:95:3a:6a:15:1c:58:e3:7a:
d4:c5:6e:64:51:41:e8:ef:63:34:2d:c3:c4:92:94:
b7:d2:0d:bf:32:64:cc:2a:0d:98:78:50:9e:d1:a3:
15:92:6c:5c:a2:8b:40:ac:7a:70:b1:48:76:3d:e7:
e1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B3:E8:C3:23:B5:4F:5C:C9:B7:04:5F:C0:67:61:72:D8:C7:1F:16
X509v3 Authority Key Identifier:
keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:14:29:94:4f:92:be:44:fd:a7:22:1a:ba:e0:c3:41:7b:ba:
b7:66:83:18:5f:1c:94:3a:3b:fc:f2:25:7a:11:14:d7:cd:e1:
39:07:d2:5f:a4:2a:f6:58:99:52:19:23:7d:88:93:22:42:75:
4b:4f:8d:97:89:91:cf:f0:37:59:69:da:19:80:2e:fa:34:37:
8e:53:9b:52:61:21:02:d8:fe:bd:00:b3:16:70:19:46:10:6b:
0a:3e:3d:63:14:df:96:ba:e4:20:c8:2f:a8:b6:f3:37:73:51:
cc:bb:da:55:19:3d:ad:36:bc:bc:24:15:25:e9:fa:fb:88:6c:
80:9e:7f:16:55:e4:1f:1f:6c:21:fd:96:24:f0:27:26:47:5c:
51:b1:12:eb:56:c2:fc:19:42:92:b2:ef:76:ab:08:cb:d1:1e:
fb:f4:8e:cd:45:36:4d:62:ee:3f:65:84:3a:f3:26:4f:17:42:
40:ba:f4:25:35:1b:25:53:c1:86:e3:c8:04:19:28:b7:b7:d0:
1f:66:a5:8a:09:70:32:67:4e:81:d6:d5:1b:55:19:82:4f:63:
50:4b:11:28:95:62:4e:5f:53:74:4c:03:e3:d7:24:26:66:cd:
c1:7e:a7:9f:66:4a:a8:30:53:28:f3:05:36:80:2a:bb:c7:f2:
44:d2:55:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:19 2026 by rpki-client