Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
File: v2SXmq7U54jkUQ7fi2lr2WysdzI.mft (raw, json)
Hash identifier: owFrsGaHUN7tbREOSNjyyQIb64JgCThlrFgBUQsk6Yg=
Subject key identifier: C1:17:29:22:41:17:C4:DF:8E:4C:1B:FE:86:4F:AD:2D:C8:67:78:2E
Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Certificate serial: 019D2816E7102C2E7350BB9F2A63003BB8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 03:01:22 +0000
Manifest this update: Thu 26 Mar 2026 03:01:22 +0000
Manifest next update: Fri 27 Mar 2026 03:01:22 +0000
Files and hashes: 1: e5AN9CeaovW_-N5WzIokstkAxl8.roa (hash: sBlMBRCxbZS22yXbnNUeVngysMGnAhuVKxhszpfbMQc=)
2: v2SXmq7U54jkUQ7fi2lr2WysdzI.crl (hash: Sb3hSgtcVjGz7DfY5aHKQ7EJSp1rK+x9g4A+PLfCieA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e7:10:2c:2e:73:50:bb:9f:2a:63:00:3b:b8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Validity
Not Before: Mar 26 03:01:22 2026 GMT
Not After : Mar 27 03:01:22 2026 GMT
Subject: CN=c11729224117c4df8e4c1bfe864fad2dc867782e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:dd:bf:fb:0e:4b:b1:d7:36:d9:09:21:4c:
0a:18:90:45:f5:1e:2f:6b:4f:72:f5:6e:f8:a0:3f:
c5:0f:e5:d1:8e:67:b3:cd:cc:ae:f2:5e:17:4e:9d:
6e:9f:83:95:72:7a:a9:cd:3a:a4:29:fe:32:93:08:
7d:95:47:5b:79:15:e3:f0:7a:05:fb:e8:0b:1d:e9:
cf:15:e7:dd:57:e9:38:3a:d7:e1:85:61:f0:dd:c2:
f8:fb:19:23:80:69:c5:10:62:4b:08:2b:f6:70:12:
e4:70:32:da:d2:0c:83:bc:72:36:22:15:84:14:2f:
13:df:7a:28:52:a8:26:0a:20:18:f9:6c:11:11:5e:
52:60:00:a4:5f:8a:43:0a:08:15:aa:41:9f:f3:6f:
18:fd:dc:0c:b7:d1:ac:ca:85:9b:18:52:93:8a:4a:
a5:ea:84:58:fa:d9:36:6e:ae:d9:db:d6:c0:58:9b:
81:4c:e6:63:30:c5:2d:88:02:ec:0d:72:2c:0d:d9:
3e:af:85:9e:d1:39:ab:60:0b:53:1b:6f:95:84:33:
78:03:86:aa:9d:eb:b8:36:ca:09:2a:ee:b6:a0:96:
82:02:12:d3:80:3d:0a:6b:95:6a:6c:41:45:e0:50:
ca:bd:c5:79:f4:a9:c8:cb:22:f2:0e:00:94:bd:10:
4d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:17:29:22:41:17:C4:DF:8E:4C:1B:FE:86:4F:AD:2D:C8:67:78:2E
X509v3 Authority Key Identifier:
keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:62:f7:88:84:33:2b:2d:21:51:cf:22:d9:37:50:d1:de:e5:
15:95:0f:14:cd:e7:78:d7:0c:95:13:4e:86:08:a2:cc:1d:da:
14:c2:2f:03:ca:d8:50:fe:46:60:ac:4c:ec:96:0b:cd:6a:32:
1d:70:a9:64:31:00:b8:c8:55:72:f6:10:e2:71:68:8f:9a:46:
f8:7b:9c:ac:89:1c:9d:79:4c:5c:8a:38:2c:66:af:3d:2b:94:
4f:0e:be:98:bf:b5:aa:c0:4c:fe:fa:11:e4:81:22:85:2c:01:
c8:45:de:c3:f7:21:da:7a:43:99:85:c6:99:8f:27:86:6a:22:
59:50:66:15:6e:65:90:fe:34:d0:c9:1f:95:fb:c6:80:b2:9f:
18:3a:64:e9:80:81:45:03:87:ad:ff:fe:a1:8b:a1:5a:d4:e0:
20:c7:22:4b:63:4a:32:25:9f:ff:64:25:66:cd:68:bd:26:76:
82:73:23:69:5f:12:2e:cc:b2:eb:aa:a2:85:07:cd:df:0b:01:
4e:66:f4:10:50:3b:f1:63:0f:f8:07:ef:cb:f6:8a:fa:b1:b4:
8f:19:a2:05:41:3e:95:47:04:1c:d1:b7:19:b5:0e:ed:36:09:
b2:ae:e8:d5:e5:3d:2d:42:3d:a1:b1:49:ca:d3:1f:83:d1:fc:
9d:9a:54:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:33 2026 by rpki-client