Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: Iw6CwN7ytrybg6p2K9uhGQBsvdNcchblTMBVaudOUcA=
Subject key identifier: DD:F7:0D:53:B3:AB:49:1D:0C:9C:A1:75:19:77:1E:19:08:FB:21:93
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 019D37F6DD2842A02CC2B90688831846E989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 189F
Signing time: Sun 29 Mar 2026 05:00:18 +0000
Manifest this update: Sun 29 Mar 2026 05:00:18 +0000
Manifest next update: Mon 30 Mar 2026 05:00:18 +0000
Files and hashes: 1: 0tjlFCD9R3QvhuaUb8R98x3yaAA.roa (hash: QW/Cv+tz1AwpdParcrVZ17Ri4asuS8geM/KpLVI71iU=)
2: RYe-A-tcBgsvnTviE-ENg27AeMY.roa (hash: BIG9Ev2/ZDOm8EsC2U3aW/Qd5R8vFaAuiSgknEWjyDA=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: HnPj09iWQOXxhN1+8ea8cVH1rsys13+3nKiHEaP0AQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:dd:28:42:a0:2c:c2:b9:06:88:83:18:46:e9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Mar 29 05:00:18 2026 GMT
Not After : Mar 30 05:00:18 2026 GMT
Subject: CN=ddf70d53b3ab491d0c9ca17519771e1908fb2193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:51:64:4c:32:a2:33:15:03:23:b9:a0:df:ed:
1a:fe:27:86:c1:0d:b4:13:e7:c2:ac:96:5d:af:06:
aa:bb:b8:fe:92:43:ac:be:b7:93:c4:51:c8:d0:91:
f3:1c:8e:e9:e1:4b:3f:24:58:fa:98:cb:86:1c:80:
36:f0:78:85:7d:73:6e:eb:bf:62:3d:6f:9b:43:a8:
d5:bd:08:52:52:5c:40:94:d0:77:a1:f2:ae:c1:98:
a9:fa:33:b9:e2:9a:5d:8b:9d:42:ee:7d:e7:b4:10:
59:5d:af:cf:7d:d2:d1:e4:5c:12:82:28:4f:47:6e:
be:81:9e:02:be:4c:ae:81:c0:2a:4c:8b:9b:72:01:
1b:1c:2c:b7:64:c3:71:96:85:88:4e:0c:d2:69:07:
c7:c9:f7:3f:0b:ce:90:3d:1f:65:69:45:32:e9:cc:
c3:c2:f6:c3:0c:be:66:69:6c:e4:21:0f:7a:fd:80:
df:c0:03:5b:d3:c7:1a:83:dc:c8:d3:e9:8a:19:a0:
1b:31:d7:5f:84:a7:49:33:e8:50:2a:e5:7b:80:bb:
90:b7:c5:99:af:36:a1:6d:cd:4c:3d:c2:7a:41:cf:
4d:df:b5:0a:95:b6:57:39:36:29:b4:27:78:76:21:
ad:13:32:9a:2a:89:a7:aa:7a:b8:1b:f5:5f:d5:46:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F7:0D:53:B3:AB:49:1D:0C:9C:A1:75:19:77:1E:19:08:FB:21:93
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9c:f8:bc:89:57:63:f9:32:88:88:f2:a5:27:23:2c:f0:28:
77:a4:84:ba:58:fa:41:e0:ac:7b:12:31:1b:1b:37:67:86:d5:
70:c8:2b:ea:c0:6b:7d:4d:04:1b:d9:2e:3b:d6:b0:d5:a9:42:
c0:70:10:4c:eb:1a:03:52:67:d4:ef:c1:fb:d4:94:20:62:7c:
d0:84:7b:34:bc:ec:8d:ce:e1:c7:8c:1c:a3:27:67:80:5e:8e:
da:c0:94:af:21:ab:78:f2:bc:68:80:10:23:e6:11:60:2f:16:
a7:dd:97:fc:12:4c:10:1c:89:b7:e7:94:a2:03:9f:38:4a:b5:
74:29:0a:c0:94:74:43:88:7f:9b:f4:85:f9:8f:20:31:be:50:
5e:30:7f:a2:89:64:a4:e3:34:f6:06:d7:cc:f3:ab:56:c5:cc:
88:fe:60:83:42:7f:cd:96:3b:fd:51:33:7b:83:f9:cb:13:4c:
cf:4f:b0:a8:d0:cd:c7:37:ad:07:7a:41:7e:20:cc:75:b5:af:
0f:f5:7a:c7:a9:12:21:76:a4:d5:10:a6:5d:ef:fe:6c:63:d3:
57:73:67:41:9a:65:c1:05:7b:66:1a:26:18:8b:ad:55:26:05:
89:a8:2f:e3:6b:a1:9a:26:de:1d:ef:27:48:38:b2:46:3f:ea:
90:a5:41:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:26 2026 by rpki-client