Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
File: R88nFPKduANS6fMJ6i6MUoyUa9k.mft (raw, json)
Hash identifier: nerIDRv9c09YCACvYxe+IvNnx8dXt9EV1JOsJwr8gIA=
Subject key identifier: 90:F7:72:98:5B:54:06:4F:3F:C4:41:0D:D1:7A:2F:F9:1E:6C:3D:AB
Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Certificate serial: 019D3788FF542F68BE8FB08221800285D6AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
Manifest number: 1850
Signing time: Sun 29 Mar 2026 03:00:18 +0000
Manifest this update: Sun 29 Mar 2026 03:00:18 +0000
Manifest next update: Mon 30 Mar 2026 03:00:18 +0000
Files and hashes: 1: R88nFPKduANS6fMJ6i6MUoyUa9k.crl (hash: AobXMyptqYZWPHImSQbDT/FZ/o6rarLkjxSzTkGw3nI=)
2: nAtKKEo6Mzv-candAEifxL69_bo.roa (hash: R8Il+SRs/b8Guq3ex4Y5aLHHglnfMg1tmovCHKBdtmE=)
3: xgLWD5Den1Vtir_enPdc8NWaykY.roa (hash: 4jXsKVFiJh5GbUk/Fg7oyDg5JPS53CqBKNMj2FoIAHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:88:ff:54:2f:68:be:8f:b0:82:21:80:02:85:d6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Validity
Not Before: Mar 29 03:00:18 2026 GMT
Not After : Mar 30 03:00:18 2026 GMT
Subject: CN=90f772985b54064f3fc4410dd17a2ff91e6c3dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:27:d2:ec:81:04:a0:d9:72:17:9d:9c:c1:
94:e1:97:8e:42:9d:6e:6c:5e:a9:95:3e:3f:b5:b4:
e7:fb:31:9c:3e:54:3c:18:ac:a9:95:e9:f5:71:71:
af:05:b5:9d:06:ce:78:da:79:9b:6f:9b:68:09:df:
fc:01:75:16:e0:fd:f9:bf:1a:05:78:af:04:df:82:
c6:08:74:da:82:8e:43:3d:d4:c4:05:a3:31:6f:7b:
98:a7:2d:50:bb:e6:aa:0c:cc:9e:56:ff:b6:12:c6:
4d:c4:3f:26:01:5d:95:bb:01:01:d0:57:47:30:55:
db:ac:53:00:d8:db:03:69:14:3b:cd:29:8c:d5:38:
4f:b0:2b:86:fc:33:1d:a5:41:e5:d2:0a:6f:88:6b:
cb:e4:2a:71:18:ff:68:47:55:42:28:10:a7:9f:2e:
32:4c:da:85:67:b3:f2:f5:99:2e:76:29:33:43:2f:
e9:00:65:b4:34:1d:0a:d2:b2:66:96:18:62:bd:78:
66:2f:08:ea:36:af:b0:85:4d:b5:80:59:1a:48:85:
44:fa:a2:cc:3c:dc:8a:9e:21:ee:63:dc:37:ac:ab:
57:c2:8a:a8:3e:83:d6:32:fd:85:b9:67:65:96:7c:
ba:3b:18:a0:66:22:07:c3:f2:21:20:72:63:d7:90:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F7:72:98:5B:54:06:4F:3F:C4:41:0D:D1:7A:2F:F9:1E:6C:3D:AB
X509v3 Authority Key Identifier:
keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:91:54:56:4a:dc:2c:62:9b:1c:03:33:57:08:14:9b:f1:6f:
60:f2:4c:b1:4c:48:70:47:4a:d9:b1:7c:43:87:49:94:65:1d:
8d:12:4e:a2:34:c9:8b:06:0e:a2:95:83:1b:db:ef:7f:47:88:
58:11:5c:89:a0:c6:3b:d0:16:6a:68:18:8e:e9:39:27:9b:0d:
ea:6b:33:3f:55:73:2f:4a:18:46:72:20:9a:29:81:38:f0:02:
f3:9f:45:3a:32:f8:02:de:05:57:88:c5:2e:af:5a:dc:a3:84:
67:56:d1:74:43:9e:b1:40:65:54:37:97:09:ad:5b:03:af:b1:
55:e4:ec:03:08:32:fe:12:95:d6:08:b5:09:b6:c9:ff:b2:3a:
76:24:c1:33:a9:23:74:6b:f3:d8:d7:e0:d4:1b:53:d4:85:ac:
ff:1a:3a:a4:0c:de:8f:2e:f2:0e:b5:11:0c:d8:fa:a0:5b:89:
dc:ae:64:ff:ed:65:d3:ff:e2:76:9b:dd:62:c9:d4:b2:49:d3:
29:02:08:db:82:99:5e:52:04:3e:80:a2:09:5f:22:7c:12:97:
14:d7:04:27:ce:a9:8f:74:19:b0:41:fd:25:98:70:8c:33:ff:
31:f9:ba:c0:bf:ec:85:13:34:9c:c3:54:26:7b:c6:a2:64:19:
38:25:d5:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iP9UL2i+j7CCIYAChdarMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Y2YyNzE0ZjI5ZGI4MDM1MmU5ZjMwOWVhMmU4YzUyOGM5
NDZiZDkwHhcNMjYwMzI5MDMwMDE4WhcNMjYwMzMwMDMwMDE4WjAzMTEwLwYDVQQD
Eyg5MGY3NzI5ODViNTQwNjRmM2ZjNDQxMGRkMTdhMmZmOTFlNmMzZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM8n0uyBBKDZchednMGU4ZeOQp1u
bF6plT4/tbTn+zGcPlQ8GKyplen1cXGvBbWdBs542nmbb5toCd/8AXUW4P35vxoF
eK8E34LGCHTago5DPdTEBaMxb3uYpy1Qu+aqDMyeVv+2EsZNxD8mAV2VuwEB0FdH
MFXbrFMA2NsDaRQ7zSmM1ThPsCuG/DMdpUHl0gpviGvL5CpxGP9oR1VCKBCnny4y
TNqFZ7Py9ZkudikzQy/pAGW0NB0K0rJmlhhivXhmLwjqNq+whU21gFkaSIVE+qLM
PNyKniHuY9w3rKtXwoqoPoPWMv2FuWdllny6OxigZiIHw/IhIHJj15CPLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJD3cphbVAZPP8RBDdF6L/kebD2rMB8GA1UdIwQY
MBaAFEfPJxTynbgDUunzCeoujFKMlGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUt
NThhZGY3OGQ4Mjc4LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUtNThhZGY3OGQ4Mjc4
LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJFUVkrc
LGKbHAMzVwgUm/FvYPJMsUxIcEdK2bF8Q4dJlGUdjRJOojTJiwYOopWDG9vvf0eI
WBFciaDGO9AWamgYjuk5J5sN6mszP1VzL0oYRnIgmimBOPAC859FOjL4At4FV4jF
Lq9a3KOEZ1bRdEOesUBlVDeXCa1bA6+xVeTsAwgy/hKV1gi1CbbJ/7I6diTBM6kj
dGvz2Nfg1BtT1IWs/xo6pAzejy7yDrURDNj6oFuJ3K5k/+1l0//idpvdYsnUsknT
KQII24KZXlIEPoCiCV8ifBKXFNcEJ86pj3QZsEH9JZhwjDP/Mfm6wL/shRM0nMNU
JnvGomQZOCXV7w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:56 2026 by rpki-client