Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
File: CFl4byJsttSQv7VClOYRp9Uajx4.mft (raw, json)
Hash identifier: 2wdfvebnStqMeYLr4HFruNxdqDLtZHaNi6i0MOY19nQ=
Subject key identifier: CC:16:CF:58:DE:A1:89:A6:58:93:AB:65:0E:AD:1A:A7:11:7E:3D:52
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 019D2A04546F05374297579FDC326C44D00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 12:00:19 +0000
Manifest this update: Thu 26 Mar 2026 12:00:19 +0000
Manifest next update: Fri 27 Mar 2026 12:00:19 +0000
Files and hashes: 1: CFl4byJsttSQv7VClOYRp9Uajx4.crl (hash: vimsNp2VPHIcOVgk3K5R3XlcTltmPxLvzuvglprlC1U=)
2: Ut0-uMPrTscTaYNN4M5f0UoNfFM.roa (hash: Q8bHgGbUawg5ahVwAK4zt6L7o0niif+XBKxRalI2OOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:54:6f:05:37:42:97:57:9f:dc:32:6c:44:d0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: Mar 26 12:00:19 2026 GMT
Not After : Mar 27 12:00:19 2026 GMT
Subject: CN=cc16cf58dea189a65893ab650ead1aa7117e3d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4c:27:12:74:05:fc:4d:78:05:68:a4:4b:9c:
83:23:a7:ad:67:9f:85:01:8d:f4:bb:56:a9:2b:71:
65:70:35:31:3f:77:c3:69:28:16:9f:3b:72:b0:78:
7e:d8:6d:ac:b4:bb:c9:d6:38:17:74:e8:7e:e7:5c:
67:2a:37:de:75:6c:e2:d0:34:6c:2d:72:20:19:bd:
c8:c8:0e:b9:d1:d6:a3:89:3a:0b:46:79:44:a8:06:
bb:10:4f:6a:53:19:94:e3:d4:81:95:f0:96:e4:f8:
b2:41:c3:5a:a3:19:c6:42:2b:31:b7:6c:97:5d:1b:
19:6f:e6:85:7d:94:36:9d:bb:b4:f6:c2:2f:31:15:
c2:fe:fa:a6:f2:f5:bb:97:75:2f:73:a0:94:13:d3:
71:d1:ef:8e:31:6f:b0:ca:10:9a:75:0b:09:2a:5d:
95:ff:40:bf:da:88:e3:59:4c:ef:a0:ea:39:3f:3a:
2c:2f:13:a7:e1:20:a9:80:20:44:5a:1b:28:11:11:
81:ef:91:f2:f4:6f:26:6d:c3:6f:ec:46:ef:2b:0c:
9e:ff:59:ec:dd:4a:b3:d2:83:92:82:1d:b2:58:36:
c5:2f:89:bb:02:93:ee:5c:ea:73:3c:18:0d:c9:fc:
b6:ac:14:7f:a2:41:00:0f:5b:92:10:ad:b7:81:73:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:16:CF:58:DE:A1:89:A6:58:93:AB:65:0E:AD:1A:A7:11:7E:3D:52
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:52:9e:1f:e7:28:e3:04:a8:3e:e6:52:d1:00:f3:40:19:23:
59:36:31:ea:df:6f:3e:47:e9:d0:49:22:9b:c8:d6:1c:36:10:
aa:2b:e6:0b:8a:e2:69:cd:06:7d:b5:30:fa:30:b4:31:b9:50:
42:a2:17:f5:0c:c3:cd:59:2a:14:6f:74:d2:ec:77:15:af:e9:
71:2a:03:5c:86:bf:af:47:d4:03:c4:7b:c6:95:45:98:9c:28:
06:5c:08:d3:b2:be:30:df:e2:db:50:84:50:b3:62:3c:6e:0b:
72:ee:f9:4a:7a:89:fc:25:4d:8c:cd:b5:ac:e1:d4:7f:9a:94:
e6:98:00:75:d7:f1:6d:b4:82:a2:88:f8:13:aa:d5:4c:d0:bc:
87:77:fa:11:02:0b:bb:a4:80:f7:0b:1f:86:79:57:16:eb:fa:
03:cc:8a:a5:0a:3b:f5:4d:d5:25:82:a1:3f:7a:b7:7f:5b:a8:
8d:1f:d7:92:cf:f6:d6:b9:e3:c2:9d:73:c9:6e:24:65:45:e5:
f5:ab:eb:ea:2f:6d:d6:84:e3:9c:08:d5:bf:a5:c4:73:6a:fe:
66:a4:7e:2c:f6:bf:99:bb:4b:14:2b:0f:5e:f0:66:09:03:ff:
86:8e:6a:b5:74:80:43:af:f3:ca:a1:b1:44:72:da:59:85:fa:
b4:4f:25:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:36:16 2026 by rpki-client