Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
File: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft (raw, json)
Hash identifier: 0f3j+TJQ6dJVql7eF+mQyRaGZ12IhDi1YQkV15sS5xU=
Subject key identifier: 69:D1:49:F4:BD:7C:32:DF:DF:EF:EA:36:F6:3D:3E:3F:05:CF:76:61
Authority key identifier: 16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
Certificate issuer: /CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Certificate serial: 019D27DFAB6CDBA2A9043271B4F974C73BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 02:01:02 +0000
Manifest this update: Thu 26 Mar 2026 02:01:02 +0000
Manifest next update: Fri 27 Mar 2026 02:01:02 +0000
Files and hashes: 1: 8msB_pW-2uX67lJFvxygplmiAYM.roa (hash: MdKHF0c5oREJJjw35mtLasbrxg7HAjIQzXUDf6T975M=)
2: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl (hash: j8DI5X0qXK/RmcScqgzWslt3oHKzovKs2QuUhV2ccNs=)
3: IajAPDXFrm4cByKhe7ThnZfhW3I.roa (hash: vevJj6ucu/ojjyycSHmCWDRHZV5C3N0NfeV2mJqpgMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ab:6c:db:a2:a9:04:32:71:b4:f9:74:c7:3b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Validity
Not Before: Mar 26 02:01:02 2026 GMT
Not After : Mar 27 02:01:02 2026 GMT
Subject: CN=69d149f4bd7c32dfdfefea36f63d3e3f05cf7661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:ee:10:b7:a0:a5:a3:6b:46:e0:95:3f:21:
cd:ad:99:06:fc:77:13:53:95:4d:a5:00:6d:bd:5f:
5e:0e:59:fd:02:a9:10:54:5c:8e:69:fa:d9:fe:93:
1a:5f:39:2b:00:1d:93:50:53:e7:44:d5:4a:1a:1a:
36:ff:f8:47:56:a4:b9:e9:9c:cc:f8:f1:4f:9d:f8:
87:73:1a:93:b7:12:5c:00:ed:dc:52:d0:f8:3e:fe:
1b:30:cd:40:96:7f:5e:b2:fe:6f:f1:73:db:03:f2:
67:40:f6:24:74:51:6d:eb:fd:1c:3c:9b:82:c4:12:
c1:8b:c4:d3:eb:ef:73:a1:79:fa:0c:7e:0b:66:53:
38:19:43:9e:a3:b6:97:e4:f0:4f:7d:6b:7f:78:82:
23:47:00:a5:54:92:5c:3b:c9:5b:f5:68:bc:47:64:
45:0c:ca:41:1d:f5:6e:65:04:08:8a:f4:0c:da:80:
2d:4d:ba:82:43:53:2b:a6:8b:5e:15:5c:fb:b3:6e:
61:10:ac:0e:25:ad:26:6d:48:e8:da:cd:3d:57:4f:
af:26:50:ed:37:93:50:8a:e1:85:b4:70:60:62:2c:
4a:ec:6a:d0:9e:62:ea:19:01:49:95:b1:7e:de:d8:
58:05:1e:e5:e8:c9:88:b2:5c:48:0e:02:3b:2b:d6:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D1:49:F4:BD:7C:32:DF:DF:EF:EA:36:F6:3D:3E:3F:05:CF:76:61
X509v3 Authority Key Identifier:
keyid:16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c8:2b:bc:ad:dc:a2:bb:56:0c:52:da:c7:91:ee:dd:e8:42:
1e:13:d1:6f:27:70:4f:b7:3e:e8:2d:d7:e0:da:83:3e:65:a5:
4f:81:ef:7c:94:af:84:eb:46:5b:2b:5a:4f:56:b6:2d:12:ee:
57:51:ad:ba:bc:13:4b:15:7b:3e:f1:2e:81:b1:58:a2:b7:4e:
3a:24:39:98:68:91:38:5c:9e:71:fb:c2:74:d8:df:8e:a1:3d:
a5:63:1d:ce:b1:29:14:fa:7e:96:20:a6:1d:ae:b9:34:1a:e3:
9f:d1:85:a7:fd:2d:d1:51:56:96:41:6c:5c:cb:31:35:b4:8e:
43:9d:ac:ca:fe:b0:2a:a9:06:ea:60:5f:b2:ed:b8:11:ee:f9:
7e:e8:38:d2:47:1f:d1:b9:cf:b5:60:f6:59:09:63:eb:59:9b:
75:ae:90:1f:5a:f4:32:0b:16:60:f3:3d:ea:ab:b5:9a:93:74:
80:ad:e0:36:fe:50:fb:f7:c1:df:58:e2:8f:cc:b2:6c:37:8a:
2f:d9:d8:24:8d:23:b9:3e:fc:86:ad:f8:61:2f:df:95:36:ae:
9c:0e:4d:ae:ed:47:1e:bd:59:f4:b3:6a:5a:f6:c8:0f:ae:00:
b2:d3:92:66:6d:3b:f8:c9:41:cd:99:25:69:b3:de:3f:0a:8e:
fb:41:ef:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:10 2026 by rpki-client