Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier: x0NTAhPJZukWwbRWVmxjqEsvC9LVHlsqj0SEZQeNLq0=
Subject key identifier: 88:FB:7B:81:7E:DC:A3:5C:3C:4D:8C:FB:24:31:A3:CB:97:0A:F9:8B
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial: 019D3AC190AD421F7E70AC5CCE3F8B59DE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 18:00:57 +0000
Manifest this update: Sun 29 Mar 2026 18:00:57 +0000
Manifest next update: Mon 30 Mar 2026 18:00:57 +0000
Files and hashes: 1: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: ahlIuhY/C7yRXWcvXm7t0MxGI6UFGMVXNf7yE7KMTUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:90:ad:42:1f:7e:70:ac:5c:ce:3f:8b:59:de:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
Validity
Not Before: Mar 29 18:00:57 2026 GMT
Not After : Mar 30 18:00:57 2026 GMT
Subject: CN=88fb7b817edca35c3c4d8cfb2431a3cb970af98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:77:f9:61:83:f7:6d:c6:c0:b3:cc:f1:51:
4c:3e:8b:80:6c:c2:73:a1:f7:0b:4b:3d:1d:8f:c8:
6f:27:93:15:8f:9b:1b:2e:80:60:56:2f:8b:c3:47:
4a:93:72:a9:e3:8c:ab:db:ef:d9:e6:fe:20:33:78:
29:cc:43:9a:9e:28:9b:75:06:bb:87:e3:5c:a5:01:
b2:27:22:5a:6b:cb:f3:8e:d5:4b:dd:d0:6d:fe:46:
09:37:50:e4:47:ea:e9:db:4a:4c:68:5c:29:14:fc:
8c:c2:f6:2d:27:99:e1:f9:d6:86:26:d6:29:a5:14:
f4:30:34:fc:91:f9:b8:6b:2e:b2:61:54:a0:90:f3:
88:5d:40:c2:04:84:c2:ca:bb:9a:4f:ca:da:79:a2:
98:ce:88:77:4c:cb:27:e3:cb:69:d4:c9:93:79:7d:
1c:84:71:a1:ee:c6:31:ed:05:3c:17:5e:84:4a:ec:
3d:cb:9a:cb:3c:55:9b:98:57:f7:11:ec:05:95:c5:
7c:12:2a:65:91:67:9d:cf:80:cf:41:1c:c1:f8:b4:
d1:bb:3f:5c:a8:1f:95:2d:8f:63:af:54:ab:77:e6:
e2:12:d9:d1:5b:a0:fd:59:11:c3:9b:8a:cb:d7:4e:
51:e3:9c:2e:2a:be:35:98:1f:fe:bb:c8:14:2d:00:
b7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FB:7B:81:7E:DC:A3:5C:3C:4D:8C:FB:24:31:A3:CB:97:0A:F9:8B
X509v3 Authority Key Identifier:
keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8f:ed:c3:64:c1:92:d2:8b:d0:4f:a8:1d:04:24:a3:37:f0:
ef:96:09:e2:32:fc:06:16:11:a8:13:08:40:68:be:4a:80:95:
91:3d:05:9c:a4:c1:5d:cb:d7:ea:c9:ff:7c:8b:0f:05:fe:fe:
26:3b:15:89:42:68:35:17:07:16:e3:cf:8c:f1:ef:e7:b6:31:
65:18:e3:82:fe:9b:9a:a3:52:32:ee:6f:23:b4:68:aa:69:32:
5d:60:1d:e6:a5:c8:df:5d:1d:11:b0:b0:90:7a:6a:cd:0f:04:
7e:08:af:8c:0d:87:f1:13:49:c8:56:1e:ed:05:6f:49:2c:f3:
ed:90:ff:b7:74:f1:4d:9d:bc:34:0d:4b:5d:bd:04:03:11:67:
e9:1f:ca:72:ba:1c:cc:76:b4:06:95:a0:bf:09:8d:9d:22:b8:
d8:8d:61:41:90:5d:49:bb:7b:1a:96:a0:fb:75:ce:68:d1:66:
69:52:77:7f:71:e6:6d:96:b6:57:58:8f:9f:a6:8b:7a:19:28:
2f:99:6a:b4:83:cf:73:7a:50:53:17:56:c0:d5:87:ea:5a:7f:
12:55:f1:4d:01:3a:d7:b3:69:65:8a:fc:76:e3:d6:55:ad:59:
8b:23:6f:a4:b2:5f:80:20:28:98:94:5d:65:51:b2:5f:65:31:
b0:06:dd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:49:17 2026 by rpki-client