Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: p049ukQaAlb9qYgpf4aCVLfFW4CFC0u8AIQU43RqETY=
Subject key identifier: FA:9A:D5:E3:A5:44:ED:9C:0C:E9:8A:F8:22:41:BD:3E:52:86:B9:E6
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 019D382E2FCD07CF20D59FEC5E863E3B97B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:44 +0000
Manifest this update: Sun 29 Mar 2026 06:00:44 +0000
Manifest next update: Mon 30 Mar 2026 06:00:44 +0000
Files and hashes: 1: XZNXCKIqVDgpPc7kS3zYiOP2yVE.roa (hash: rxN9jO9dfAmhC4tVQzEusEgOoOYY+A90wdSvN0MmV5g=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: 1uYyGs0auZwLALlXbOef6egdqrDeFqWj34fenarQpw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2f:cd:07:cf:20:d5:9f:ec:5e:86:3e:3b:97:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Mar 29 06:00:44 2026 GMT
Not After : Mar 30 06:00:44 2026 GMT
Subject: CN=fa9ad5e3a544ed9c0ce98af82241bd3e5286b9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:f5:66:ca:48:ed:bf:82:73:f0:8d:10:73:
64:e8:19:0a:bc:0d:28:32:35:f3:e2:f4:58:c9:6e:
5c:64:7a:d1:90:dd:7b:ac:c9:1c:32:d7:74:b4:1d:
31:51:0f:59:87:90:46:8a:86:7d:67:27:0c:25:67:
9e:56:06:e1:4b:52:ad:6d:f1:9d:9b:ac:ce:75:eb:
ce:91:71:bb:7c:55:27:be:e6:41:4f:47:55:38:7a:
f6:f3:2e:02:fa:8d:89:2d:0d:6c:2f:ba:1a:69:51:
6a:48:b2:e8:33:0b:6a:82:af:8e:81:f2:42:c8:08:
c2:1c:4b:c8:21:26:91:77:f4:fa:33:84:d7:2d:5f:
5c:4e:3a:80:df:29:50:32:c2:6d:9b:61:c4:9b:89:
f2:fd:06:55:5b:90:4f:fa:34:97:22:1d:69:3f:5b:
90:62:94:87:47:12:ce:93:d2:06:c9:a7:8c:02:f9:
c7:37:c8:09:f2:2f:b0:1f:aa:26:76:f9:69:2b:5a:
de:8d:49:21:d7:03:05:18:d0:05:7c:9a:a3:57:f2:
0d:11:95:38:e9:69:ba:86:cd:f7:4e:8d:49:c4:8a:
f7:3a:44:50:d7:d1:46:08:87:6f:9d:a3:44:7c:57:
8f:64:89:de:c5:a6:9c:e9:c7:a6:eb:c5:87:eb:8c:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9A:D5:E3:A5:44:ED:9C:0C:E9:8A:F8:22:41:BD:3E:52:86:B9:E6
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:13:a7:a0:8b:4e:e7:e1:e8:43:45:9c:7b:5e:83:9b:97:14:
c4:41:88:2c:b1:90:0d:82:c8:bc:10:a8:28:9e:35:4b:8e:9b:
21:8d:07:ce:06:24:f7:00:64:6f:d9:aa:9d:3a:28:21:6c:03:
0c:93:6e:0a:ec:d4:fd:12:f2:96:9a:1d:fe:12:64:b5:d3:a7:
e5:d6:16:72:85:ba:4a:7c:0e:78:f3:75:27:ba:63:a6:34:77:
4d:fe:b7:d3:ce:2c:a1:1c:a1:ac:80:24:b7:51:9b:a8:75:c2:
d7:c9:03:16:f2:1d:b4:2c:3b:3c:30:57:af:f5:57:33:be:e7:
0e:bb:ca:41:26:e0:aa:a9:3c:60:5a:da:04:b7:b0:7b:ea:18:
2b:47:17:b6:77:90:dc:27:47:4e:d9:be:6e:2e:e3:8e:31:2c:
5d:5b:a6:bb:7a:78:a7:8b:66:b3:f1:41:ff:77:4f:53:c5:4b:
5d:68:df:e8:79:e0:b2:58:18:d3:3a:e3:eb:55:80:10:ea:85:
61:c3:2d:13:00:42:72:9f:ab:42:fc:8b:57:f0:59:e1:5d:cc:
65:22:4a:c1:4b:d6:09:f5:eb:b1:fb:ee:27:dc:8f:ab:cc:b2:
ab:42:44:ef:9f:8a:3c:ba:e7:13:d1:45:01:35:e9:8a:89:de:
71:cd:46:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:11 2026 by rpki-client