Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
File: ril1GgrIGmVxkFRupHgM2GFA3J8.mft (raw, json)
Hash identifier: bkU+wvkmJHK5hllXXQa9b7g3o87CivlgpJ/+zcDogwU=
Subject key identifier: 0E:82:52:B1:AE:3B:79:9D:04:80:A1:9E:48:45:37:D2:C6:66:71:45
Authority key identifier: AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
Certificate issuer: /CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Certificate serial: 019D28167E3D38C611FD68C224339984556C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 03:00:55 +0000
Manifest this update: Thu 26 Mar 2026 03:00:55 +0000
Manifest next update: Fri 27 Mar 2026 03:00:55 +0000
Files and hashes: 1: A1dGDDi1OYigZK5SVk3AfsJoxJ8.roa (hash: ymU3iCZelIy0c5l6QoCL4pY5leFZomtGyloWJN3ojX4=)
2: Oh22G_915CY9u5MflKN_pMtA1DI.roa (hash: FsseF+o2oG0Sc0WcfTJeMuviJKeiZFceVmBH8y//bkA=)
3: ril1GgrIGmVxkFRupHgM2GFA3J8.crl (hash: D3KG1cbO/PoIQk3ArDLSgxUu0AovhwC11q09M9tVijI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:7e:3d:38:c6:11:fd:68:c2:24:33:99:84:55:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Validity
Not Before: Mar 26 03:00:55 2026 GMT
Not After : Mar 27 03:00:55 2026 GMT
Subject: CN=0e8252b1ae3b799d0480a19e484537d2c6667145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e1:77:39:74:7c:45:d1:79:d0:5e:51:ef:7b:
84:4d:ac:1e:f0:80:17:33:b2:36:eb:f0:be:eb:4a:
9b:bf:29:b0:b5:2d:30:d0:af:88:4c:b8:cf:b2:f3:
6e:01:a6:f4:6a:6a:e2:d1:7d:ce:4e:b3:c9:08:80:
b1:81:f1:cf:74:40:db:aa:2a:b5:bc:a3:c2:a0:df:
8a:d7:ee:6a:e9:64:4c:15:48:9a:ed:81:f7:46:65:
9b:96:8e:59:0c:f7:c4:28:44:28:cb:af:8a:f0:06:
f8:07:b3:92:5b:ce:53:02:da:9a:81:38:7e:52:68:
e2:e5:32:ad:8c:d4:4a:5a:e2:2c:25:8f:3f:46:65:
b0:48:db:ab:29:22:f0:65:24:4a:51:dd:d8:db:aa:
e0:08:32:de:d9:72:cf:06:f7:f0:0b:eb:df:47:6f:
98:7d:59:d5:cc:88:f2:1c:21:c7:31:51:2f:1a:df:
1d:ba:e0:66:36:3f:9d:6b:03:51:23:86:f8:ad:dc:
17:f1:23:df:24:ec:4c:fc:e2:91:81:97:41:d8:c5:
02:a8:f5:3e:9c:60:ac:33:44:c8:3e:1a:0f:de:60:
dd:d7:41:55:60:78:c1:98:df:1e:81:9b:9c:4a:e0:
e2:4a:15:9f:7d:17:4e:d2:c2:83:d8:ed:46:dd:67:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:82:52:B1:AE:3B:79:9D:04:80:A1:9E:48:45:37:D2:C6:66:71:45
X509v3 Authority Key Identifier:
keyid:AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:3c:55:c6:f8:bd:30:05:b8:39:25:81:df:15:b4:e1:66:6b:
ca:dc:1d:20:97:4f:38:d4:42:5d:f7:fe:61:9c:68:bb:c1:ec:
7e:8e:b7:f4:cd:df:a3:f9:a5:88:2c:1c:77:a3:bc:f1:34:ef:
e5:07:d8:34:cf:e9:aa:f4:a6:2c:14:96:21:60:87:0e:58:cf:
36:30:f7:d7:be:22:2e:67:44:ae:68:60:f4:a6:49:1f:e8:2f:
60:4d:a7:1c:a6:71:25:f7:46:20:b5:58:dc:84:b3:ef:57:07:
ae:b9:13:50:ac:d5:34:64:1e:e5:41:0f:2c:63:5c:f9:18:66:
6d:b4:a9:00:74:b6:41:0c:4b:cf:28:fd:fc:93:54:64:b1:50:
f3:67:d5:a2:8e:bf:3a:09:e8:be:a2:a1:5c:02:cb:3f:d3:87:
c5:9c:77:db:14:a7:ab:5a:83:0e:23:16:4a:92:de:93:43:2a:
90:92:80:8a:f9:1f:f9:eb:a4:64:8b:b2:de:9c:c3:fd:37:17:
09:21:00:b0:18:c1:57:3f:7c:01:d2:ee:3b:27:8d:fb:1d:1b:
29:4b:ef:09:e9:41:b9:e1:2d:fd:58:7c:f5:fa:fb:66:89:1e:
9d:a3:a8:33:cc:6b:a1:f2:a0:bd:8e:6b:a4:57:f1:1c:3b:4e:
a5:d9:df:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:35:01 2026 by rpki-client