Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft
File: _mraoZRFOXtBXvSivmTq_PNbcpA.mft (raw, json)
Hash identifier: BdhZoy/TVCneM5MDv6c9OP/by/8UiRxeTh8dXVFqyjE=
Subject key identifier: CB:25:51:72:F3:47:1B:AE:8F:B8:44:8D:EC:17:AF:A5:9D:2E:6A:59
Authority key identifier: FE:6A:DA:A1:94:45:39:7B:41:5E:F4:A2:BE:64:EA:FC:F3:5B:72:90
Certificate issuer: /CN=fe6adaa19445397b415ef4a2be64eafcf35b7290
Certificate serial: 019D2BF2BD33D0F8CCD13CD858999A189A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_mraoZRFOXtBXvSivmTq_PNbcpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft
Manifest number: 0188
Signing time: Thu 26 Mar 2026 21:00:21 +0000
Manifest this update: Thu 26 Mar 2026 21:00:21 +0000
Manifest next update: Fri 27 Mar 2026 21:00:21 +0000
Files and hashes: 1: _mraoZRFOXtBXvSivmTq_PNbcpA.crl (hash: 1EoJWOQy2U8B96NJpWSmNZJ1bgeNNRsbUso8tJ1jrSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_mraoZRFOXtBXvSivmTq_PNbcpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f2:bd:33:d0:f8:cc:d1:3c:d8:58:99:9a:18:9a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6adaa19445397b415ef4a2be64eafcf35b7290
Validity
Not Before: Mar 26 21:00:21 2026 GMT
Not After : Mar 27 21:00:21 2026 GMT
Subject: CN=cb255172f3471bae8fb8448dec17afa59d2e6a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:20:1d:c5:fd:ea:5e:44:25:ee:48:7d:a8:b9:
28:2f:23:69:0a:cf:42:2d:00:5c:63:a4:c2:78:25:
7d:2f:36:8e:ea:2b:f0:33:61:76:e3:f3:40:48:44:
23:1a:34:c5:6a:98:40:72:dd:aa:82:d7:c8:9c:c3:
2e:8c:1c:f5:1d:e3:b0:d1:87:e3:e7:29:f6:cb:86:
2f:6e:c8:96:6d:52:c6:19:b0:b9:e7:32:49:aa:02:
1b:be:86:26:ba:54:10:48:21:b8:fc:78:2d:97:9d:
04:d4:4c:fc:6c:98:6b:54:0e:da:98:f3:96:6d:7b:
5d:5a:ce:96:40:64:5d:7a:e1:b5:f9:66:d0:4f:a8:
ed:f1:09:8f:a5:08:98:f6:c7:d7:2e:4d:c5:77:44:
72:f6:b7:b3:bf:d8:fd:e6:5e:5c:a2:9f:5c:5d:08:
5f:2e:b8:3c:57:27:19:16:77:d0:08:98:41:d7:90:
ee:53:22:ee:58:d3:07:66:34:0a:16:38:32:f6:60:
33:2c:15:4d:77:50:98:bd:bc:70:0c:3f:ad:fa:9a:
aa:54:d3:f8:6d:39:2d:fc:f5:4d:54:15:28:e7:a4:
15:7b:4d:34:2f:39:9b:a1:97:5e:64:cc:a1:7c:c9:
31:74:5f:bf:5b:20:44:d1:a2:27:cb:8a:7f:29:d2:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:25:51:72:F3:47:1B:AE:8F:B8:44:8D:EC:17:AF:A5:9D:2E:6A:59
X509v3 Authority Key Identifier:
keyid:FE:6A:DA:A1:94:45:39:7B:41:5E:F4:A2:BE:64:EA:FC:F3:5B:72:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mraoZRFOXtBXvSivmTq_PNbcpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:51:c2:f7:a8:2a:d5:76:e4:78:c9:67:ff:a2:16:84:24:b5:
f4:25:5a:87:49:1f:45:62:07:cd:2c:7d:14:95:81:92:22:63:
97:74:03:29:11:90:4a:99:2a:23:0b:d7:1d:22:40:74:4d:c0:
dc:d9:59:ab:50:33:c6:72:1d:69:ed:e3:c6:34:a4:bf:85:50:
13:d7:29:8f:d2:4b:ad:e0:40:44:1f:19:f3:82:ce:25:1e:7e:
7c:e2:32:24:95:73:bd:65:aa:b4:4d:8e:7e:58:8b:f4:b4:fb:
81:5c:98:7e:71:29:aa:42:62:1f:40:27:f5:61:d4:ee:70:8b:
af:cb:9c:b6:e4:6a:8a:19:b4:9f:63:dc:c5:be:80:b2:6f:19:
81:eb:aa:db:47:21:89:9d:11:d3:a0:e0:0f:f1:7f:99:4f:6a:
73:ea:ec:c2:02:52:6d:f3:4d:21:4b:8f:ed:d3:e7:46:ef:93:
e5:67:83:0c:4a:7c:c8:3e:82:b8:c6:80:bf:da:34:34:90:cd:
cd:6e:0a:07:01:48:16:9b:e3:c3:74:fc:56:63:7a:d0:a2:f2:
79:ce:3d:b6:d1:d7:f8:60:fc:07:d3:0b:38:34:99:0a:63:5d:
5d:12:2d:65:47:ee:a9:a7:93:60:08:94:8d:f0:42:78:aa:f7:
5b:e0:ee:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:32:26 2026 by rpki-client