Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
File: _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft (raw, json)
Hash identifier: VaBSuE2RJS5k7Gqe+1oVEdfGbhHtfEK5gYvFbmuuSFQ=
Subject key identifier: 47:B0:8B:39:12:C2:9C:A7:BC:AE:F0:D2:EF:D7:C3:29:CC:8A:59:26
Authority key identifier: FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91
Certificate issuer: /CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
Certificate serial: 019D2B853A425B65146A6D76F3CB87294B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 19:00:44 +0000
Manifest this update: Thu 26 Mar 2026 19:00:44 +0000
Manifest next update: Fri 27 Mar 2026 19:00:44 +0000
Files and hashes: 1: _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl (hash: x25lI3F4mQBIrKC0lwBSefhtLR00VEWhWnMH0rwoq0M=)
2: ybXPtjtytnp4awj6RoDLh-SgWqk.roa (hash: yT3G41aEzQUb5MKxunseT7S7bGL9k6nsWABzcpJ77H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:3a:42:5b:65:14:6a:6d:76:f3:cb:87:29:4b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
Validity
Not Before: Mar 26 19:00:44 2026 GMT
Not After : Mar 27 19:00:44 2026 GMT
Subject: CN=47b08b3912c29ca7bcaef0d2efd7c329cc8a5926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:f4:53:dd:da:df:38:ab:3d:84:db:ae:61:
a3:1b:ed:9b:5e:92:56:5c:a3:68:6f:33:95:4a:fd:
17:82:c7:d1:0c:7b:23:44:f8:cd:f9:65:8c:ea:58:
c2:c8:53:90:fd:5f:d7:0f:98:b6:35:ba:23:d7:7b:
1c:15:fc:ca:ac:53:e8:b5:75:cb:7c:a0:c6:16:84:
bc:be:4e:df:77:33:81:21:15:a1:d8:66:48:9e:60:
aa:33:ce:26:5b:03:fe:19:0a:13:eb:45:a0:fb:e1:
9e:90:6d:17:be:8a:65:00:8d:c3:c7:c6:54:72:19:
93:f0:dc:44:20:e3:ee:c6:74:c6:98:b5:5f:8c:3f:
51:25:ee:c5:00:e6:4d:e3:a9:88:3d:e4:e8:24:a0:
c9:b7:4e:e6:91:2c:a2:f5:09:40:bb:a2:ff:da:63:
b0:c1:ed:78:49:14:34:5b:9a:77:76:65:67:70:33:
a9:ed:dd:85:77:9e:63:db:00:8f:24:88:0f:df:8c:
ef:62:bc:60:0e:45:a2:3e:f0:90:ac:0d:a8:46:f7:
33:b1:96:d3:b5:41:66:fc:a0:fb:ec:1d:59:46:e8:
3a:60:8a:00:86:fd:05:91:24:ce:87:df:05:e4:b2:
f0:4e:04:31:54:b7:4b:64:cd:56:5d:43:64:01:a8:
2f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B0:8B:39:12:C2:9C:A7:BC:AE:F0:D2:EF:D7:C3:29:CC:8A:59:26
X509v3 Authority Key Identifier:
keyid:FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bd:20:cc:14:05:e2:93:e8:db:7a:da:fb:3c:83:e4:e2:ed:
b9:27:98:67:31:2e:60:45:d6:45:f1:0f:f2:7f:31:d4:5f:6d:
c6:b5:1e:a9:ee:1b:39:17:8e:9d:6f:f2:95:d1:b2:f7:ac:2f:
a3:ce:f2:9b:fc:0f:37:5a:2d:24:dd:2b:c4:1e:2c:70:3a:14:
3c:69:7b:39:02:5a:f3:80:08:c7:d4:61:3f:3f:50:0d:05:16:
e1:59:89:48:1f:b5:dd:c8:c9:20:73:ac:5b:ff:d9:43:70:d2:
d3:e3:3c:15:a8:ea:e3:c1:b6:bb:28:2d:d1:2e:c1:40:04:e8:
79:56:12:31:b8:bf:23:70:18:28:9f:3f:b1:da:24:a7:79:29:
b7:83:d4:45:d5:d8:cf:f0:68:be:7f:89:d5:7b:53:3f:8e:0d:
4b:44:da:2b:60:95:b1:d5:bb:46:51:6a:15:84:70:ad:96:05:
b3:d1:96:76:79:70:b8:dc:be:2e:a2:63:ca:02:d9:77:b3:20:
06:0c:9f:48:33:99:ba:3d:b3:bc:8c:a6:e7:3b:57:e9:bc:2e:
ee:dd:42:30:d3:1c:7e:91:f8:50:76:94:fd:48:6a:16:62:c0:
66:14:45:4c:04:a9:4f:ce:7e:0c:fd:3c:2e:25:69:40:c8:58:
17:20:8f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:13:43 2026 by rpki-client