Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: BGg+E7ymSMW3Gga+tQAH6gibTBBL38W95k1giMvidEY=
Subject key identifier: 3B:21:91:7D:5C:45:FA:CC:0B:D9:10:0F:C2:39:86:86:64:13:4D:34
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 019D2B17953342D9736822DB505AEFC150A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 17:00:58 +0000
Manifest this update: Thu 26 Mar 2026 17:00:58 +0000
Manifest next update: Fri 27 Mar 2026 17:00:58 +0000
Files and hashes: 1: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: GHJCoNRvqPl1i8hJemamMN/be5okhs8lb5cTmWj72co=)
2: CXyMI2l8iEL8L83sjM9bkDZ8hS4.roa (hash: j/IQcIj8RO7TPRLNA/hKS2090AInnEPNtfaLrldabW0=)
3: VoUC5dLmrwvo5IVIUQ9reyXsBQk.roa (hash: qRjYhRjtRMqcpSCBbiNCNUBeAUXt7NZHib1uEHQNNXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:95:33:42:d9:73:68:22:db:50:5a:ef:c1:50:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Mar 26 17:00:58 2026 GMT
Not After : Mar 27 17:00:58 2026 GMT
Subject: CN=3b21917d5c45facc0bd9100fc239868664134d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:37:70:ee:89:3b:40:86:a6:81:31:58:94:
37:11:a9:07:a0:fc:fb:4b:05:38:91:7a:b1:ba:13:
1a:6c:58:f2:d5:45:12:44:d3:d9:57:ae:bd:82:00:
2d:7e:f5:66:84:a8:a4:df:b7:98:e9:d4:1e:8b:e0:
86:07:ec:82:f9:fc:c9:14:a1:78:73:9b:83:74:1c:
ac:3d:e7:e0:bf:c0:0b:99:ed:b0:6d:e5:c5:8a:e9:
b8:86:77:c2:85:42:21:9d:3c:66:81:ec:a3:f3:81:
35:2a:35:e4:28:ef:dc:67:78:ab:f5:49:d4:f9:53:
ea:da:35:d4:e9:d3:81:a8:22:36:00:11:f0:29:89:
81:24:b0:82:0c:91:72:f8:0f:f9:7d:3c:5d:03:22:
f9:00:df:cd:48:44:e1:4e:e9:78:ee:78:da:3f:a0:
e7:44:9c:9e:ef:c5:e1:9b:c9:e1:00:f9:c7:db:2a:
e4:80:2c:a8:b4:57:79:05:a8:7b:13:09:f9:dd:80:
f5:ff:39:aa:85:86:b2:20:52:20:ea:7b:ab:d4:bf:
33:04:7e:f5:95:65:84:92:1d:52:a9:75:24:d5:e0:
23:95:01:e8:e1:f1:bc:a9:40:b3:b2:0f:ce:b1:4e:
b9:df:ba:4d:a8:b7:c6:0a:dc:cd:eb:ba:c6:5a:c8:
31:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:21:91:7D:5C:45:FA:CC:0B:D9:10:0F:C2:39:86:86:64:13:4D:34
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:07:21:4d:2d:e0:e0:c3:ca:3d:15:0b:fd:60:e0:eb:e1:9f:
70:78:a3:54:27:63:32:8b:bc:b3:a7:7a:3e:c8:4d:2c:c7:e4:
40:11:08:20:c7:76:89:a7:64:8f:70:26:e1:b1:fb:a1:bd:94:
4f:5e:e2:a9:e3:3c:d4:63:9e:83:0e:c6:f1:73:b6:79:87:c7:
c0:99:c7:9c:69:a7:31:4c:c4:ab:8c:02:3f:fc:10:e6:97:00:
12:5f:26:a7:3a:01:89:58:76:91:f1:45:21:5f:54:9e:ae:fa:
10:a8:c7:21:e6:b1:20:fe:d9:5d:de:60:b8:ba:b0:dd:8a:41:
74:f4:64:d5:f3:2f:26:a6:26:d2:35:15:6f:0a:32:4b:40:88:
87:4e:42:57:41:bf:91:0b:36:3f:39:7a:52:e8:96:3a:d0:b6:
23:93:6d:15:16:68:f1:87:86:c3:56:3a:5e:de:a3:30:30:c5:
6e:a0:34:3b:99:eb:57:ce:12:82:27:56:07:12:75:83:2b:7f:
d9:4c:2b:6a:ab:c5:50:74:a8:18:cc:09:04:99:99:14:e5:f9:
0b:65:8f:66:07:74:39:9b:e9:74:52:31:6b:b7:e2:16:16:02:
dc:99:15:74:40:01:d8:27:c8:7a:a5:b2:11:ad:5d:c0:42:71:
ec:b7:5c:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rF5UzQtlzaCLbUFrvwVCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2NjYThhYTNmMTc4Yjk5OWE0NmU1ZmY0ZmE3ZGFmOWY5
ZjJlNmYwHhcNMjYwMzI2MTcwMDU4WhcNMjYwMzI3MTcwMDU4WjAzMTEwLwYDVQQD
EygzYjIxOTE3ZDVjNDVmYWNjMGJkOTEwMGZjMjM5ODY4NjY0MTM0ZDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMY3cO6JO0CGpoExWJQ3EakHoPz7
SwU4kXqxuhMabFjy1UUSRNPZV669ggAtfvVmhKik37eY6dQei+CGB+yC+fzJFKF4
c5uDdBysPefgv8ALme2wbeXFium4hnfChUIhnTxmgeyj84E1KjXkKO/cZ3ir9UnU
+VPq2jXU6dOBqCI2ABHwKYmBJLCCDJFy+A/5fTxdAyL5AN/NSEThTul47njaP6Dn
RJye78Xhm8nhAPnH2yrkgCyotFd5Bah7Ewn53YD1/zmqhYayIFIg6nur1L8zBH71
lWWEkh1SqXUk1eAjlQHo4fG8qUCzsg/OsU6537pNqLfGCtzN67rGWsgxBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDshkX1cRfrMC9kQD8I5hoZkE000MB8GA1UdIwQY
MBaAFO98yoqj8Xi5maRuX/T6fa+fny5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzN6S2lxUHhlTG1acEc1ZjlQcDlyNS1mTG04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zNmQ2NDItNTY0My00NTRmLWI1YzAt
OTkwNzc3YzM1N2UzLzEvNzN6S2lxUHhlTG1acEc1ZjlQcDlyNS1mTG04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zNmQ2NDItNTY0My00NTRmLWI1YzAtOTkwNzc3YzM1N2Uz
LzEvNzN6S2lxUHhlTG1acEc1ZjlQcDlyNS1mTG04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQchTS3g
4MPKPRUL/WDg6+GfcHijVCdjMou8s6d6PshNLMfkQBEIIMd2iadkj3Am4bH7ob2U
T17iqeM81GOegw7G8XO2eYfHwJnHnGmnMUzEq4wCP/wQ5pcAEl8mpzoBiVh2kfFF
IV9Unq76EKjHIeaxIP7ZXd5guLqw3YpBdPRk1fMvJqYm0jUVbwoyS0CIh05CV0G/
kQs2Pzl6UuiWOtC2I5NtFRZo8YeGw1Y6Xt6jMDDFbqA0O5nrV84SgidWBxJ1gyt/
2UwraqvFUHSoGMwJBJmZFOX5C2WPZgd0OZvpdFIxa7fiFhYC3JkVdEAB2CfIeqWy
Ea1dwEJx7Ldclw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:55:37 2026 by rpki-client