Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
File: cF5128zl_N2R2KmeWhssmVuBJ3U.mft (raw, json)
Hash identifier: fkCh3jwZQBoqJQ17C+DGpzXizwSdjdXBhu6O/khBFRs=
Subject key identifier: 82:BA:03:54:D2:43:46:64:BF:C2:AA:66:0F:28:CF:BC:B4:24:55:2E
Authority key identifier: 70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
Certificate issuer: /CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Certificate serial: 019D2C6138B4C867ED8B5AFB0DB0F62865E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 23:01:02 +0000
Manifest this update: Thu 26 Mar 2026 23:01:02 +0000
Manifest next update: Fri 27 Mar 2026 23:01:02 +0000
Files and hashes: 1: OtqwT00KNG8ocLQ5lsbZa477HJU.roa (hash: 3OLEihhSTZHcEQMRGGKnC6MAqTjm7MFUfykjVMW1buE=)
2: cF5128zl_N2R2KmeWhssmVuBJ3U.crl (hash: Eir/w4UibkS7+TcWZH4q2rrf6PxnbmXXlYETjUipihQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:61:38:b4:c8:67:ed:8b:5a:fb:0d:b0:f6:28:65:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Validity
Not Before: Mar 26 23:01:02 2026 GMT
Not After : Mar 27 23:01:02 2026 GMT
Subject: CN=82ba0354d2434664bfc2aa660f28cfbcb424552e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:1b:58:ed:0a:2d:25:7a:be:44:08:d3:8e:
52:a0:55:1b:d1:63:e2:1d:3d:de:eb:6d:8a:5a:e1:
99:db:e3:b2:bc:f6:3b:7f:d8:f2:f9:31:d0:e8:6e:
10:62:29:44:ad:c0:45:e2:56:90:6f:bb:8c:ce:8b:
27:85:f4:6c:dd:4d:c0:69:8b:08:cd:93:9a:5f:ff:
32:c4:cb:b7:de:05:00:07:0c:60:1c:5d:68:d2:85:
86:39:a3:09:59:ca:b0:46:cb:ad:c2:fc:4c:6c:21:
fb:89:4e:2d:83:21:97:13:18:f2:f9:eb:a7:26:b8:
0b:e8:45:ef:f3:43:23:4f:bc:f4:56:02:13:8f:ea:
36:be:62:05:d1:ad:cd:c0:8d:9d:50:27:76:b4:fc:
d8:dc:56:b1:51:20:0a:8f:20:54:86:b4:63:3b:81:
e3:cd:1e:df:7a:45:98:ba:63:5e:5f:dc:80:44:a3:
0c:4f:c2:a4:30:77:7b:47:d7:c1:cc:8b:aa:e4:17:
af:c7:89:b3:01:31:53:a7:55:f9:ee:57:9d:41:d9:
6b:32:98:44:6d:08:ea:b3:67:10:1a:d6:af:3a:28:
e0:06:fa:39:38:8c:53:3a:70:27:d9:19:5f:77:cd:
a4:0f:a8:d8:a6:ab:03:a5:57:4b:ef:e4:cb:c9:87:
3b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BA:03:54:D2:43:46:64:BF:C2:AA:66:0F:28:CF:BC:B4:24:55:2E
X509v3 Authority Key Identifier:
keyid:70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:2d:7a:50:72:27:a0:27:9d:9b:b0:3d:10:66:84:90:14:e3:
0d:97:fa:b5:c1:fc:12:eb:35:fb:92:7b:59:15:54:dc:d1:53:
80:37:3a:78:84:af:9c:98:ef:be:bd:ba:74:24:16:81:ca:c1:
bb:e9:57:fe:e8:6d:aa:94:08:5b:73:a1:0d:26:70:53:37:4c:
45:25:ad:69:89:cf:f4:cd:54:1e:b8:7c:f4:d9:3c:a7:cc:d7:
2a:d8:77:d6:f6:3f:68:e6:c4:ba:18:15:b9:3f:c9:f7:28:82:
c9:7b:91:cc:f0:bf:56:c0:60:ee:64:84:4d:8c:53:0f:09:db:
60:47:a7:0b:26:d9:b8:36:bd:b8:de:6b:38:ab:84:7d:86:b8:
ca:67:0c:29:f2:95:f9:f8:4f:1d:11:03:96:5a:2b:6a:8a:89:
53:75:f8:84:9f:f1:7a:19:78:83:b0:5c:a3:e9:0c:0f:8b:88:
19:9d:20:d0:8a:18:7f:ff:66:e8:4e:59:7f:76:3c:83:1c:29:
30:2e:21:72:31:41:41:83:64:39:e0:44:90:99:98:33:28:4c:
89:58:6b:fd:38:2e:4a:a1:6f:4e:57:90:8f:77:b5:40:4b:c1:
b7:b0:7b:ef:29:16:84:25:e5:26:fd:b7:7a:91:62:39:16:96:
39:b9:75:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:21:27 2026 by rpki-client