Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
File: x8H9uvmsDlre7GCgkjxN1KAektw.mft (raw, json)
Hash identifier: GkmH+sBsK+eGbDQDkFmhUReHnFyZ1NKYWwmn7eM+ZXk=
Subject key identifier: 11:F8:64:41:6B:2D:A0:5E:1C:49:F8:84:73:27:B2:F9:F7:A7:75:F4
Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
Certificate issuer: /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Certificate serial: 019D2B84DD2270474B367493C4FB9EDDD3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 19:00:20 +0000
Manifest this update: Thu 26 Mar 2026 19:00:20 +0000
Manifest next update: Fri 27 Mar 2026 19:00:20 +0000
Files and hashes: 1: D3nq83ikd9c0pXlVtbBwEPlHb0A.roa (hash: PQZpr7vE2U7ktPVrNV3Vo+4+rpfhAqmJVO4cr9eT0HI=)
2: x8H9uvmsDlre7GCgkjxN1KAektw.crl (hash: vbRcca0Mf+L5t4bcIfIdExfBzMyFddYF/n242wIqXck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:84:dd:22:70:47:4b:36:74:93:c4:fb:9e:dd:d3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Validity
Not Before: Mar 26 19:00:20 2026 GMT
Not After : Mar 27 19:00:20 2026 GMT
Subject: CN=11f864416b2da05e1c49f8847327b2f9f7a775f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:63:84:e5:d7:e9:96:db:fa:f1:5c:dc:41:
8c:9f:7a:05:57:49:ca:4c:c0:a9:4e:56:17:8d:ec:
0c:b9:66:c1:d5:aa:ef:d0:71:86:c2:a0:73:b7:fe:
31:c1:e4:d7:c8:42:de:45:5f:66:60:30:b2:a0:28:
6c:6d:82:f0:d4:7b:3c:96:c2:64:6d:62:ce:ad:ae:
77:d0:d9:19:68:51:81:39:d3:ec:48:89:be:f9:07:
a7:19:53:ae:c6:07:2f:01:51:ab:70:e8:0e:7c:59:
27:bc:1a:01:9e:a5:fd:05:73:2e:9c:87:b0:bd:7f:
ce:dc:e8:a8:17:59:17:6e:13:6d:83:58:f3:8d:da:
46:67:92:c2:1a:00:db:4f:79:68:5f:5f:ef:9b:40:
28:c5:91:c2:6c:f4:dc:07:83:2a:58:c0:2d:07:b8:
73:bd:5f:30:50:ab:3f:e7:13:fb:bd:83:f9:b2:30:
18:9c:c5:76:cc:db:f3:ae:d4:ea:61:15:a9:73:a8:
45:fc:18:72:f4:21:58:7a:12:39:cb:df:e1:a6:60:
56:0e:e0:5f:26:36:85:ad:58:6f:08:1e:f0:a8:e7:
cd:87:08:24:d8:40:a5:c6:c6:4d:a5:97:c8:30:63:
3f:9e:38:75:b6:2a:6e:92:3b:65:3c:64:49:8f:e3:
81:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F8:64:41:6B:2D:A0:5E:1C:49:F8:84:73:27:B2:F9:F7:A7:75:F4
X509v3 Authority Key Identifier:
keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5b:1b:77:2b:11:38:45:7a:6d:06:f0:92:b0:99:15:b7:61:
d8:12:cb:c2:a5:ea:e9:87:01:fe:e9:0f:28:b6:e3:78:30:21:
74:2e:d6:a5:80:c8:75:0e:c5:f2:00:73:eb:f9:03:3d:4e:6e:
65:82:17:31:13:31:4c:db:63:00:b5:6f:39:35:17:42:77:4d:
98:d8:90:8f:e7:53:f1:c1:3e:a2:23:7b:ef:78:3a:07:d1:19:
79:78:c9:f6:73:a3:47:67:b3:78:27:04:55:bb:c1:64:aa:61:
89:90:f7:24:ee:e7:70:be:8b:2b:7b:39:64:1e:9e:f2:9a:73:
9b:ae:55:95:1f:2b:fd:9a:74:73:e1:7e:bf:83:fb:7a:2a:3f:
33:c6:31:7a:b2:a8:df:b6:62:aa:5b:bb:be:8e:36:63:e0:46:
0a:77:02:9c:75:42:87:18:db:63:9c:e2:e6:d7:40:f4:c9:d7:
54:10:5c:e1:33:35:27:c9:df:be:1e:2b:0a:64:3d:05:df:cf:
40:36:69:07:a8:67:b1:a8:b4:01:2e:60:dc:07:fa:3f:9e:7f:
95:1e:d9:cc:79:ea:5e:c0:8e:f4:f3:07:27:67:84:47:6a:41:
69:f2:22:ce:2e:00:de:6a:2c:2f:cd:a6:a8:01:31:2c:6d:07:
19:2d:64:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:55:04 2026 by rpki-client