Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier: TXDLEsP/KnK+7xXGJgmTjQeBWv1NP51qbB/QBHIb3+8=
Subject key identifier: AF:DC:90:E4:AC:89:34:1D:09:1B:DF:B6:C6:86:A4:5B:45:F0:71:2D
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial: 019D3866585C786444A2A4B5C246302DA8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:02:04 +0000
Manifest this update: Sun 29 Mar 2026 07:02:04 +0000
Manifest next update: Mon 30 Mar 2026 07:02:04 +0000
Files and hashes: 1: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: m0gcCun6tTk/GWU5i/a4XUS+Em3BeuD0gJanVSgdVfM=)
2: srGtxdotdL1gGYebpFyhRC2KgLw.roa (hash: peHYPQm6+m6K0GIm1p2M4aZrPJFnCNdM3/dYTyUbnoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:58:5c:78:64:44:a2:a4:b5:c2:46:30:2d:a8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Validity
Not Before: Mar 29 07:02:04 2026 GMT
Not After : Mar 30 07:02:04 2026 GMT
Subject: CN=afdc90e4ac89341d091bdfb6c686a45b45f0712d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:25:0f:1f:53:d6:3a:cd:42:2f:53:4f:b6:
43:45:1a:24:7b:26:0f:86:a5:62:ff:34:6a:12:26:
31:65:ab:a7:ce:87:11:43:76:30:7d:93:0b:0e:6f:
47:6f:8e:ad:2d:3c:b9:91:31:8d:b7:46:b9:6f:22:
cf:19:0e:f8:0b:33:26:c8:4b:d2:cb:1a:42:73:3c:
7e:3a:f2:ad:84:b9:d4:dd:92:db:e5:1a:3f:57:f3:
2f:46:8e:4a:07:4d:e3:ef:1b:a7:01:e0:28:d0:15:
af:80:85:54:52:6a:8a:d6:70:81:d9:5d:75:57:83:
54:e0:0a:d2:4f:22:e8:d1:44:35:54:c7:20:79:d7:
11:0d:9c:f5:32:61:bb:c1:ad:27:e6:d7:53:96:9a:
5f:57:eb:12:fb:b9:19:70:ab:f4:67:ce:8e:2d:b8:
70:f7:f6:a1:b9:18:7c:d6:10:1f:0a:08:1c:24:fd:
7e:ae:cf:52:c3:d5:59:52:4d:08:50:0b:1b:4d:ef:
fe:06:66:b2:24:03:d1:3d:a0:81:07:37:89:ab:b5:
d6:ad:31:78:45:7d:2e:5d:d1:9a:2d:43:6a:24:06:
4b:3e:73:04:b7:a7:35:89:49:83:29:eb:02:74:56:
f6:2e:9f:c6:21:d7:f4:24:4b:7d:2a:0b:68:5a:71:
5d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DC:90:E4:AC:89:34:1D:09:1B:DF:B6:C6:86:A4:5B:45:F0:71:2D
X509v3 Authority Key Identifier:
keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:55:d5:69:cf:16:07:ec:07:8a:13:5f:7a:d4:45:58:99:c0:
e8:28:31:1f:6b:39:3c:f2:f0:5f:2d:ba:10:57:63:ea:76:4e:
1b:20:43:dc:b8:cc:a0:2a:84:35:66:a5:b7:ed:a9:6f:99:4e:
24:89:d3:be:5e:e3:ef:0b:d3:8b:a9:f7:a8:0f:25:a5:69:7c:
14:96:f5:15:e2:bf:a0:70:24:13:64:34:a6:3d:7c:28:43:ef:
d7:bc:9a:31:dc:7c:17:b7:df:98:52:17:ae:20:23:88:54:69:
5b:16:7f:ad:ea:e7:b3:b6:6a:b3:f9:c9:8a:2d:7f:67:fc:6f:
a1:28:74:72:c3:57:2d:74:58:d2:77:51:8d:5f:3f:6c:3c:86:
b7:d2:41:d0:50:2e:1a:06:28:da:d6:be:2b:35:a9:30:b7:49:
55:a4:ad:45:36:0e:7a:3a:97:9a:47:4c:b0:0e:c9:d1:a1:48:
f6:76:16:9b:94:6a:31:10:29:37:f5:87:f0:d3:04:9b:70:a6:
dc:70:24:5f:af:a5:0f:8b:ea:96:10:64:80:1e:aa:5d:48:2f:
43:c6:96:eb:bd:31:bd:73:16:7b:d4:f8:be:eb:0a:b9:b6:ed:
33:e7:74:fe:05:01:ad:9d:87:2f:a3:d8:6b:0a:13:ec:0b:0e:
4b:f7:59:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:36 2026 by rpki-client