Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
File: iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft (raw, json)
Hash identifier: FO45+1RaGVMitXu2blDZnDTbVGc8CXNkeXm6j0zqlgo=
Subject key identifier: 84:7D:2E:D9:23:91:DA:6B:AF:30:88:C8:2A:0F:DE:28:A7:6F:4B:FC
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Certificate issuer: /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial: 019D37F718C3E6CFC933EE1A0FBA64FFBCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 05:00:33 +0000
Manifest this update: Sun 29 Mar 2026 05:00:33 +0000
Manifest next update: Mon 30 Mar 2026 05:00:33 +0000
Files and hashes: 1: C-j7DHdcPeX_wLaiQQCXx01sXKk.roa (hash: lDDZElowGuCMiUnBVx2Enp74tiPB1NbesCh32sGC/h0=)
2: iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl (hash: 97Rv95id/Hu9S5urDlhfpDuXWIs6skQDFMnr4HxHF40=)
3: js6Pq6wBoWvKTyUwxz0skM29Qco.roa (hash: Y4NrXbk6igcwSNPM65V1DQWV2gXoGtbHhjuHToI9XM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:18:c3:e6:cf:c9:33:ee:1a:0f:ba:64:ff:bc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
Validity
Not Before: Mar 29 05:00:33 2026 GMT
Not After : Mar 30 05:00:33 2026 GMT
Subject: CN=847d2ed92391da6baf3088c82a0fde28a76f4bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:25:27:af:ee:eb:e3:2d:b3:ca:78:d6:24:88:
65:e0:65:b6:9f:85:ea:1e:44:ef:b2:34:34:e0:cc:
3f:44:20:46:36:ff:f1:95:0a:a7:88:eb:ba:9d:55:
ca:31:66:3f:7f:32:f1:7e:b3:43:5f:27:15:97:ea:
ee:0b:b3:dc:7a:ad:c6:b7:ab:d5:ab:fe:a6:96:4d:
11:23:ec:70:18:b2:2c:3e:6e:54:ed:ea:a2:45:0a:
54:0c:01:c6:5f:2a:70:2a:08:81:e0:63:79:f3:4a:
c2:45:5e:9c:bf:44:50:21:b9:33:0f:ce:5e:26:4e:
70:e4:f2:ea:36:34:1b:83:4c:47:4b:a1:c3:2e:54:
fc:3d:80:7d:aa:4a:be:9a:3b:9a:e5:71:ea:14:96:
e3:26:94:b5:5f:de:56:e5:30:9f:ed:c1:ad:4e:4a:
3e:12:77:0b:7d:3b:f2:f9:73:93:0e:22:93:75:af:
b9:25:9d:4d:7e:9e:d0:8b:c9:df:cf:c7:9b:25:22:
88:98:bf:6e:2a:39:51:1e:d2:bc:f4:2b:3d:c0:28:
3a:02:ff:e1:e2:2f:f9:53:ef:32:22:f3:61:33:40:
c3:b1:5d:2c:cc:46:9e:da:4d:f8:98:2e:26:25:03:
b1:ec:ac:5b:a3:58:58:3f:89:75:9b:d4:d3:d0:48:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7D:2E:D9:23:91:DA:6B:AF:30:88:C8:2A:0F:DE:28:A7:6F:4B:FC
X509v3 Authority Key Identifier:
keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f6:4e:5f:a7:0d:92:d4:76:0e:5f:f7:2e:1e:a7:d0:45:70:
ec:15:ab:50:4c:b0:d3:3f:75:ab:bf:0e:fe:aa:e0:15:a0:d6:
cd:b6:22:24:a1:11:0c:21:59:4c:61:d2:05:5e:2c:e0:c5:aa:
6a:66:3c:68:2f:b0:f9:b0:25:4b:11:86:0f:db:ba:94:a1:72:
d2:fa:3f:db:99:35:80:88:c8:c6:08:a9:50:7d:c8:6c:54:fc:
f3:8d:29:99:31:20:a6:02:7e:39:05:10:5c:87:36:59:4d:b3:
d0:09:ec:20:77:9b:c4:06:15:ef:d1:de:ed:0f:e3:6c:27:55:
b0:d9:5f:26:17:c1:91:f6:fe:f7:3a:4b:ed:4d:a0:78:7f:9f:
a0:ef:1b:11:51:9c:15:b0:67:6a:e0:1e:fe:44:2b:5f:37:51:
72:3d:d6:cb:85:75:cd:c9:ef:4d:bb:ba:64:04:5c:4e:19:f4:
78:f3:d5:d8:a5:6a:00:1c:cc:2f:ea:9b:ec:3e:4e:6f:a9:50:
d7:56:c3:d0:57:8a:8d:ea:54:dd:77:c0:8f:5a:44:14:17:e4:
e6:6d:d5:81:e4:dd:2f:1d:e6:de:b6:43:47:f7:a5:e7:2e:a5:
9a:b6:b9:51:57:31:3d:18:08:d8:a4:b6:f2:b6:b9:b7:b5:5c:
ef:7e:7c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:44 2026 by rpki-client