Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
File: 189nO-jwMimh57bmFhbzl0ziL_4.mft (raw, json)
Hash identifier: 19qoDSf5Ch8CjnA29h9zpT4SRaa5ckm37/wwcbxzAK0=
Subject key identifier: 64:8F:41:40:96:15:F0:86:45:BA:47:F4:B5:C8:AD:D7:3F:0A:29:87
Authority key identifier: D7:CF:67:3B:E8:F0:32:29:A1:E7:B6:E6:16:16:F3:97:4C:E2:2F:FE
Certificate issuer: /CN=d7cf673be8f03229a1e7b6e61616f3974ce22ffe
Certificate serial: 019D26964C499A3E30EA2C0AA86919A8A812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/189nO-jwMimh57bmFhbzl0ziL_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
Manifest number: 2B
Signing time: Wed 25 Mar 2026 20:01:17 +0000
Manifest this update: Wed 25 Mar 2026 20:01:17 +0000
Manifest next update: Thu 26 Mar 2026 20:01:17 +0000
Files and hashes: 1: 189nO-jwMimh57bmFhbzl0ziL_4.crl (hash: cPwKV1n9eZAsiNScnkjzHTqeTN8NVnb0OGx1lrc/VFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/189nO-jwMimh57bmFhbzl0ziL_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:4c:49:9a:3e:30:ea:2c:0a:a8:69:19:a8:a8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cf673be8f03229a1e7b6e61616f3974ce22ffe
Validity
Not Before: Mar 25 20:01:17 2026 GMT
Not After : Mar 26 20:01:17 2026 GMT
Subject: CN=648f41409615f08645ba47f4b5c8add73f0a2987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:f2:17:79:7c:32:6e:af:98:3f:d1:bf:f5:
3b:b6:1f:05:1a:23:d7:75:e0:c4:4c:60:48:d1:79:
ee:89:e9:48:7f:60:e3:28:a8:fa:8f:86:2f:49:6b:
9a:6a:92:b8:dc:46:2d:7c:81:6f:74:c9:8b:bb:36:
a1:c8:a3:fe:81:5c:c7:62:b9:a2:e9:10:7d:4f:da:
f6:72:17:2a:9f:14:52:e1:c5:f2:f8:0d:94:da:15:
83:de:5d:ab:4e:27:15:96:bb:27:63:0a:74:04:0d:
13:7d:3a:e3:dc:60:f1:b4:42:20:7f:68:9c:9e:e8:
7b:41:09:cf:cf:0d:f2:8e:61:bd:14:d1:a8:be:22:
16:ab:c5:36:46:ed:fa:b5:c7:08:bb:72:a7:ce:e0:
64:9a:bc:7c:0b:f4:3d:ef:30:43:7c:26:4a:d3:22:
e0:2e:b5:68:2d:bb:d4:94:40:f1:c3:c5:ba:e5:26:
24:a6:55:70:41:6d:b8:07:15:a2:86:2c:d4:0c:8b:
eb:1b:23:d2:6f:53:5e:87:15:26:66:49:bb:c8:89:
7d:0c:70:05:b1:b3:9f:78:bd:77:aa:e4:ba:2d:67:
b9:88:cb:ca:d1:fe:b7:ca:f2:de:d7:03:48:90:4b:
76:b6:c9:ec:b2:04:05:6b:16:8b:33:15:16:8c:12:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8F:41:40:96:15:F0:86:45:BA:47:F4:B5:C8:AD:D7:3F:0A:29:87
X509v3 Authority Key Identifier:
keyid:D7:CF:67:3B:E8:F0:32:29:A1:E7:B6:E6:16:16:F3:97:4C:E2:2F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/189nO-jwMimh57bmFhbzl0ziL_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:dc:d3:49:5f:4e:fe:29:96:6b:29:64:0c:80:2a:68:13:05:
d0:5b:9f:79:a5:08:b0:e7:8f:3a:82:54:58:f6:50:0f:09:35:
c2:d6:f4:55:d5:8c:93:d3:3d:2e:4f:cc:3e:70:1b:0c:2e:82:
26:b2:f6:f5:82:15:74:ec:7c:3f:c0:91:37:2c:9c:5f:6a:25:
da:66:52:15:cf:5e:82:e0:4f:e7:ce:01:f6:75:63:f7:3d:c8:
6f:a4:f5:ad:68:65:a3:d3:4c:8f:59:49:a2:9d:28:fc:f2:5f:
ce:82:95:48:5a:75:12:64:fa:15:65:2b:8b:78:5b:43:4a:dc:
36:e6:68:46:82:a8:fa:dd:14:bd:17:3f:82:00:10:66:db:c4:
76:f2:7c:1c:fc:59:3d:95:81:19:0f:71:a2:26:1b:1a:96:e1:
ca:b7:aa:d5:9c:77:bf:8e:51:c8:93:ea:90:91:7c:18:d6:2b:
d9:57:d8:f8:fa:64:bd:88:9a:de:29:0c:76:9f:a6:27:70:85:
1d:63:bb:e6:2c:11:8d:10:e5:26:76:fc:0a:1e:05:e1:52:86:
69:09:08:f4:b3:10:91:ca:12:c7:1c:71:5d:e7:03:44:3f:33:
43:68:3c:c6:07:e2:9b:48:94:81:18:78:82:23:a2:87:f2:54:
83:16:47:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:13 2026 by rpki-client