Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File: are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier: 6hCPP2bx9QJ8kIZbGcNgSCbD0rcVA7HUYBnIf9ZgBYQ=
Subject key identifier: 33:98:06:FD:1D:FE:0E:C2:59:29:DD:A1:8C:F4:5D:47:4E:FA:E2:52
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial: 019D265EF759B3592A9825343963B81750C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 19:00:50 +0000
Manifest this update: Wed 25 Mar 2026 19:00:50 +0000
Manifest next update: Thu 26 Mar 2026 19:00:50 +0000
Files and hashes: 1: T0XlvLPSE0rq8c-N7OAkkhLwUFg.roa (hash: tcM1/9+Y0ysaMgq7228hAfu0hiNGpyhSmSnmef1IcbQ=)
2: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: gcIWGMx8BA+jg/fMwVZSoCbTMGQnEamhA8z1x3aLLN0=)
3: uAlfyOgC6lACz_fQjNh5oktGozY.roa (hash: AyHxXbtccjqD9qYxj8NhKDHPVrcTXTiY5Ov+6QmBFbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f7:59:b3:59:2a:98:25:34:39:63:b8:17:50:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Validity
Not Before: Mar 25 19:00:50 2026 GMT
Not After : Mar 26 19:00:50 2026 GMT
Subject: CN=339806fd1dfe0ec25929dda18cf45d474efae252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:3f:e1:07:f4:82:60:04:c9:b2:7a:f4:ee:
2f:c7:09:13:bf:45:17:dc:f9:48:23:de:93:e5:15:
e8:ee:3a:f5:e8:f5:29:c6:de:2d:26:6a:71:e0:5d:
f7:64:e3:2e:31:e2:5a:ba:67:b1:2a:59:80:73:60:
83:38:7c:34:59:00:b3:71:83:75:08:1c:d0:b5:3a:
62:f3:2c:86:4b:fd:fa:43:83:55:1b:f3:c1:e6:75:
94:b8:a8:2c:f6:44:0c:84:06:c4:66:08:21:13:ca:
e6:d3:62:92:b9:af:72:64:a0:44:ad:da:43:46:39:
20:ed:8c:1d:86:65:b2:ca:1f:0f:9f:da:bc:38:55:
59:fc:b9:02:78:c2:f0:b1:b7:e0:72:1c:39:9b:0e:
c8:24:4b:ec:3d:83:cb:a5:1f:fe:2b:31:e3:a7:6c:
f6:a6:bf:24:7a:fd:5e:98:42:1e:5b:e9:34:07:9d:
2d:a6:85:d2:c9:9a:6d:03:52:f6:4e:e2:5f:5b:7a:
0c:11:f2:6c:43:98:c3:81:af:aa:51:0b:5e:aa:60:
88:2d:a3:b6:73:06:c0:b6:8a:10:7e:11:39:b3:33:
ff:eb:fa:b0:00:66:be:04:2a:0a:35:45:3e:6d:f7:
23:aa:8c:63:30:e9:a7:78:43:f9:5f:22:da:06:09:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:98:06:FD:1D:FE:0E:C2:59:29:DD:A1:8C:F4:5D:47:4E:FA:E2:52
X509v3 Authority Key Identifier:
keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9f:a3:92:23:a6:50:21:d1:c6:ab:d4:34:ad:04:25:a8:b4:
73:3c:21:3c:75:07:dd:55:29:70:8a:18:f1:7a:62:fd:fa:f8:
0c:ca:1d:44:cd:47:f3:1e:78:52:8d:aa:49:2f:3f:c9:e3:4f:
67:12:59:b5:a5:48:a0:81:a8:11:bf:e8:b6:9a:99:cb:56:54:
c6:1c:b1:11:fa:6d:ea:df:e1:69:7e:a4:b2:f9:45:47:02:91:
dc:a6:84:e1:40:d1:10:76:d3:c1:c7:56:e9:07:8c:fa:f2:c1:
b9:78:0b:ca:97:5a:22:0d:24:19:c3:bd:3c:68:8f:54:00:14:
06:72:45:f0:84:cd:6e:3c:f9:bd:f0:93:67:1a:5e:99:d1:fa:
bc:85:cd:b4:7c:c2:e1:4f:14:1d:42:a6:0a:80:c2:b2:ff:01:
73:90:ae:32:42:66:25:19:3a:8b:bd:57:84:0c:17:63:4f:ee:
ac:3f:03:92:a0:22:2d:f6:24:9c:23:7d:b5:39:1b:69:c0:23:
fc:ef:3b:07:12:c4:01:df:a6:1d:f8:11:b9:b2:02:3e:0c:07:
67:7f:93:25:77:a5:02:44:f4:bf:e1:48:26:fe:26:56:35:04:
f6:b1:49:3d:8a:e7:25:b3:34:c4:62:cd:5b:8b:61:40:df:60:
1b:f9:5a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:35:08 2026 by rpki-client