Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
File: x8H9uvmsDlre7GCgkjxN1KAektw.mft (raw, json)
Hash identifier: A0SOOq369R/qCIhDaodOGi72uAiwGlFXtMknix7dCNg=
Subject key identifier: FD:BC:21:CF:DC:FB:5D:8A:01:CF:45:B8:6C:C3:9C:A7:F2:B6:3B:09
Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
Certificate issuer: /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Certificate serial: 019D2996C6C432D2311BE8F5588E5DE36B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 10:00:40 +0000
Manifest this update: Thu 26 Mar 2026 10:00:40 +0000
Manifest next update: Fri 27 Mar 2026 10:00:40 +0000
Files and hashes: 1: D3nq83ikd9c0pXlVtbBwEPlHb0A.roa (hash: PQZpr7vE2U7ktPVrNV3Vo+4+rpfhAqmJVO4cr9eT0HI=)
2: x8H9uvmsDlre7GCgkjxN1KAektw.crl (hash: j6/GUMs+n5769F8+2IL4GVhcioMsLUxnG+xorAOkWQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:c6:c4:32:d2:31:1b:e8:f5:58:8e:5d:e3:6b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Validity
Not Before: Mar 26 10:00:40 2026 GMT
Not After : Mar 27 10:00:40 2026 GMT
Subject: CN=fdbc21cfdcfb5d8a01cf45b86cc39ca7f2b63b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:41:9b:71:87:71:54:ae:46:b3:60:32:77:
7c:87:a2:a1:4a:26:28:da:8f:8c:7b:b7:c3:16:10:
d6:41:8a:5a:b1:91:f7:e9:b2:65:62:be:f2:ca:45:
4f:e3:f4:12:03:b9:e8:ac:5c:c0:c2:10:ba:88:e4:
61:5d:12:03:d4:ad:4a:86:c1:96:90:37:14:7a:2c:
d6:e5:01:8c:dc:bf:db:b9:20:60:2e:23:a3:a5:8d:
0f:7e:a8:21:94:a6:37:4d:2e:fd:1c:09:42:a5:2f:
40:27:f7:50:d6:c7:ea:16:62:47:b2:49:ac:58:80:
fa:b2:fa:84:62:aa:19:d7:76:28:66:8a:f0:db:75:
b3:ed:61:15:4a:88:80:c7:41:9b:ac:70:3c:7c:b4:
2f:08:86:4d:f0:57:6a:4a:42:fe:a7:13:aa:e6:8e:
65:af:e0:0b:ec:e2:cd:da:bb:c6:76:f8:7b:3b:14:
c9:a6:3f:77:d4:b3:e7:9f:7c:f2:9a:45:b0:e2:be:
6a:7d:01:16:05:03:73:17:1b:18:59:a8:b9:9a:5e:
ca:af:a7:61:b3:7d:f1:fc:49:a7:23:04:b3:d2:77:
4e:52:91:c6:df:75:8b:1b:7d:8f:0b:f7:c4:55:f6:
f2:6b:b6:16:f8:dc:f6:24:25:74:20:c4:88:2c:4e:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BC:21:CF:DC:FB:5D:8A:01:CF:45:B8:6C:C3:9C:A7:F2:B6:3B:09
X509v3 Authority Key Identifier:
keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:af:84:20:fa:a0:96:c5:93:f4:97:a2:4b:a7:f6:9e:10:01:
0c:f4:4c:fa:aa:10:95:e7:e3:c7:c7:d7:38:5d:a1:06:e5:15:
6a:0d:98:f6:14:aa:b9:6f:ed:6f:50:1c:2c:77:7c:95:37:e8:
40:98:27:91:63:bb:f4:57:82:6f:ad:47:83:2a:ba:dc:be:6e:
9d:fb:31:c2:77:cd:19:e9:93:c2:15:25:cb:3d:77:98:55:07:
66:0b:73:e4:e4:97:26:9f:7a:16:e8:d9:62:ae:43:2c:c4:06:
e8:f1:13:09:f9:ca:01:e8:8e:8a:82:ae:c2:30:59:bf:21:92:
55:72:ee:3b:0c:57:a4:7c:64:d4:7e:50:47:55:a9:b2:64:50:
95:24:51:be:8a:c8:fb:03:e3:c1:de:93:07:60:d1:cc:80:74:
cb:1a:80:28:24:34:7a:0a:33:90:94:5b:d7:31:1c:23:6b:e4:
29:d2:6b:7e:a8:7f:a6:b7:d8:c6:3c:d4:8e:c8:65:94:64:6c:
a4:b1:39:3d:c3:b1:ab:a7:b2:dd:be:70:39:12:da:71:1b:02:
7a:53:04:7d:86:ae:a9:bc:a5:76:3a:9b:bd:9f:e2:0b:e3:46:
04:1a:fb:0c:ae:c8:f7:6d:c5:6e:82:3b:cd:01:35:19:73:17:
db:2b:cb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:01 2026 by rpki-client