Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier: 7RCgb4veVfPXiTYI8fgbdOpR6XxuwsbrdLTxcJJ5j+o=
Subject key identifier: D8:6D:FE:42:07:D0:34:6C:7F:CA:C2:D2:A1:F3:5C:3A:AD:8C:C7:D8
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial: 019D38D34C82BB7883B99777DA26EAE1200B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: MCx614C9rFRrAfFT03dbdEM0A7AIaxvmbYTpPdOimKc=)
2: C96r7R6Mb5GqlprR3I_no-ERD4g.roa (hash: NLf7EUxe3BSu+odq1YzXIDULHf2Z5URrNMh4SALrwlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4c:82:bb:78:83:b9:97:77:da:26:ea:e1:20:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=d86dfe4207d0346c7fcac2d2a1f35c3aad8cc7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:de:90:fd:f5:48:6b:1f:43:64:04:fe:8f:
c5:0c:db:a0:fb:26:7c:13:70:c6:26:fb:52:1d:18:
d3:0d:cd:6f:f5:b4:de:02:a1:ab:3a:39:d1:df:0b:
63:24:70:4c:9c:76:66:e6:87:41:1e:ea:08:72:9d:
b9:31:b9:55:7b:c2:ae:d4:ed:df:0a:0f:17:c8:37:
13:bd:18:65:66:10:c0:f7:18:92:96:f9:36:d5:7f:
25:b4:13:4e:8a:6f:89:9c:71:bd:49:a7:fe:19:cd:
31:14:88:b4:46:9c:8b:b9:4a:8d:eb:96:ac:2e:3b:
40:9a:ff:73:f9:3d:bb:71:b9:d3:67:6d:16:62:5b:
e8:c6:fc:6d:9e:1d:86:3c:67:8e:23:ac:3f:13:7c:
c9:ed:c8:87:3a:6a:01:ea:3f:05:ff:4b:d7:c7:85:
b3:1e:08:5f:d0:94:91:b2:40:5b:ae:87:07:da:50:
87:3e:f2:b0:2b:60:53:6e:cb:a9:4a:f3:2a:79:7d:
e7:38:69:39:d5:d5:77:3d:b4:c3:cb:3d:e9:7f:0f:
8b:dc:4b:61:ce:e2:41:68:f0:53:ba:8f:63:6d:3e:
f6:83:8c:2c:98:07:22:47:a2:fe:1a:e7:1e:de:05:
83:46:df:4d:44:6e:2f:cc:54:a3:31:b4:83:38:37:
79:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6D:FE:42:07:D0:34:6C:7F:CA:C2:D2:A1:F3:5C:3A:AD:8C:C7:D8
X509v3 Authority Key Identifier:
keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c5:58:f6:e6:76:98:02:94:84:fe:ed:5e:b5:05:75:eb:67:
10:cb:ab:b2:bb:7a:6e:71:90:90:1f:94:85:36:51:d8:73:de:
13:46:66:87:ac:fe:e1:93:d5:af:4d:ba:88:77:94:8e:45:f8:
22:0d:0b:a1:e5:a4:d5:d3:f2:15:c7:37:6b:01:5c:8e:42:a6:
47:17:20:6b:4b:d3:6d:b1:4a:06:b2:d7:72:3a:1b:d3:56:a0:
6f:f2:92:00:e8:83:42:99:2e:ae:f7:02:d7:63:6b:4c:3e:3c:
17:2b:9c:f3:75:1a:bc:82:75:d0:3b:14:61:4e:7f:90:25:55:
d9:12:fe:6e:14:7b:96:b7:10:e6:c1:ed:9a:7f:a4:2d:a2:c8:
c4:00:1e:b5:9e:5b:e6:9a:16:b5:78:a6:81:6c:b4:b3:cc:40:
f1:b0:1e:e6:e8:69:df:c3:c6:0c:1e:34:c5:39:90:14:ef:d7:
3e:f7:71:6a:5b:dd:5c:3d:7b:76:27:bb:9c:10:b7:e5:73:04:
03:f8:3e:ca:01:24:00:ce:92:1a:a5:95:44:a2:16:e3:49:15:
92:7b:88:7d:a1:48:6d:98:ff:e9:5d:0f:71:3c:97:1d:f8:37:
5a:d4:cf:33:92:aa:a8:fe:c8:5d:29:fc:e9:dc:94:00:90:30:
0a:3c:06:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:04 2026 by rpki-client