Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
File: rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json)
Hash identifier: EZFwKuc1qb5/u/G4Bv5Xd0Yb+cwA7tzy8rbdyj9ekWo=
Subject key identifier: A1:FA:B8:62:12:74:8A:D5:58:1B:21:FA:E0:A9:67:B3:86:01:FE:04
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial: 019D284E1C154605C9A76075771AD84FE7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 04:01:40 +0000
Manifest this update: Thu 26 Mar 2026 04:01:40 +0000
Manifest next update: Fri 27 Mar 2026 04:01:40 +0000
Files and hashes: 1: H_QluTcmBXymBQ4nPpf21yCtfgs.roa (hash: uEZOVXv78aiCLR9+dOv0TDG+ndJ8sKw5tweYmG3KtMQ=)
2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: +keCCHzk/2ox1A38WYTOhipiSjlwhS/egvay8+A8i2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:1c:15:46:05:c9:a7:60:75:77:1a:d8:4f:e7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
Validity
Not Before: Mar 26 04:01:40 2026 GMT
Not After : Mar 27 04:01:40 2026 GMT
Subject: CN=a1fab86212748ad5581b21fae0a967b38601fe04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:01:1d:e6:7d:c4:00:c7:05:3b:10:fe:8d:
06:8a:65:d8:c6:8d:aa:2f:be:8d:c9:ec:61:cb:ff:
f5:9d:48:2c:4d:d8:e1:f5:5b:6b:64:d5:b3:51:dd:
bd:90:31:0b:15:9e:54:c5:e4:cb:62:cf:79:30:ea:
48:96:e9:c5:46:60:4a:1c:fb:c7:8e:e6:ef:3a:f6:
b9:09:67:cd:81:35:7a:13:f9:1b:3e:0b:ed:62:db:
e8:a3:b4:65:90:19:90:b6:b2:89:c1:fc:c5:45:ad:
42:e0:f6:b3:32:0c:4c:46:b1:1a:ff:e8:2e:eb:b0:
5e:d1:93:68:07:bd:4d:18:6e:58:73:80:29:f3:98:
e0:19:b5:96:4c:f0:eb:11:2b:80:e3:2b:67:7c:5e:
9c:7e:16:1c:a0:e3:d1:ec:bc:1a:9d:03:9e:21:43:
a7:5c:6d:fd:4f:3c:fa:87:9d:96:e5:eb:94:db:28:
98:1b:0d:86:e9:cc:84:30:f8:90:10:bd:d2:a0:99:
da:13:45:91:9c:ff:a4:02:aa:00:59:ec:99:b6:7e:
20:5c:ee:f6:3f:e6:55:83:b3:7c:42:83:3b:29:7f:
83:00:4d:8b:6c:9e:bb:d4:22:2f:00:7a:2b:df:ff:
16:a5:00:6b:e0:fc:2c:64:2d:b3:56:89:a2:fb:d1:
d2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FA:B8:62:12:74:8A:D5:58:1B:21:FA:E0:A9:67:B3:86:01:FE:04
X509v3 Authority Key Identifier:
keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3b:31:65:0b:12:f5:d2:b1:05:da:2e:c8:1f:8e:bd:c9:27:
3f:d3:23:66:64:47:0e:32:c5:b6:de:70:29:b5:5b:e4:3c:ae:
d6:b4:39:c0:24:3e:93:ae:d0:89:a2:5e:8e:f7:2e:89:8b:3d:
20:cf:92:47:b2:70:81:9a:06:36:aa:c9:f3:67:76:6d:4d:3c:
c2:51:78:e3:fb:d0:23:89:1b:59:c1:55:34:5b:8b:81:b1:00:
39:f5:f4:86:59:ca:e7:e4:42:79:35:1e:43:39:af:d4:b7:e6:
4f:ac:3a:0a:7d:6f:f7:90:84:a6:0c:05:a6:df:14:76:7b:ae:
f8:eb:d3:5a:9e:1e:3f:b7:dd:32:9b:48:f4:54:43:b2:93:a5:
2b:9e:29:46:6e:2d:25:e7:a5:28:71:83:3d:25:28:1d:0b:01:
f7:76:1e:d1:43:ba:ea:15:d4:df:19:c7:7b:37:e8:9a:11:fe:
1e:3d:83:87:8b:78:ec:af:e0:35:95:17:05:31:e3:5f:ab:99:
71:29:68:96:0f:48:50:e9:0e:54:38:f1:c4:14:ab:b1:23:5c:
ed:df:63:49:26:ba:79:06:46:1a:1a:5a:74:e2:de:e9:51:d1:
52:3a:76:6c:01:b8:af:87:4b:9e:28:91:fb:c9:c6:9b:6e:18:
8e:fc:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:00:21 2026 by rpki-client