Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
File: fruIjyuZ3ply4kRuugWKuOLNez8.mft (raw, json)
Hash identifier: nfoSmVuuClstPrvutVEN0qiuu2wSPTkHBNR7qF5ggzo=
Subject key identifier: 15:68:41:A5:E2:01:EB:FE:0C:36:88:48:47:5D:19:34:9E:38:39:15
Authority key identifier: 7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
Certificate issuer: /CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Certificate serial: 019D2929147E3BE057AC5A14F5562EBAD205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 08:00:51 +0000
Manifest this update: Thu 26 Mar 2026 08:00:51 +0000
Manifest next update: Fri 27 Mar 2026 08:00:51 +0000
Files and hashes: 1: 1-aCnSCh2k6EoO6v8K8YGH6-ZFag.roa (hash: TXqm016RQPYqrirzt4ClgfgwS79aUK1qbegI6yBDVqc=)
2: fruIjyuZ3ply4kRuugWKuOLNez8.crl (hash: 6SRMZE0BHUQe/XDLY8RjzulKBZFakSFVqN6jZmSK6nI=)
3: uhXgdMnU2sK7rATt-_JTycGnweE.roa (hash: oOHRvsricrI0IDhV5HO6fjuBbrjUqImOQ3QUZQn7MEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:14:7e:3b:e0:57:ac:5a:14:f5:56:2e:ba:d2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Validity
Not Before: Mar 26 08:00:51 2026 GMT
Not After : Mar 27 08:00:51 2026 GMT
Subject: CN=156841a5e201ebfe0c368848475d19349e383915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:76:ae:50:85:d5:40:f4:a6:fd:b7:fd:31:
46:9d:eb:20:44:5f:63:ee:43:e1:47:65:3f:f8:fd:
6a:ff:70:0c:73:3e:e6:84:76:30:73:9d:fb:fb:f1:
8e:67:b2:c4:e2:67:d1:a9:19:f7:2a:7e:1c:8a:3f:
e0:93:8c:60:93:a5:88:b7:a9:52:4d:cc:a2:2b:20:
42:3c:78:62:bb:a7:a9:46:c4:29:c5:eb:8a:01:04:
0f:dd:98:9f:03:cb:ff:24:ef:0a:1b:83:07:3d:e0:
c5:77:0d:55:f3:52:b3:2f:d7:bb:fb:80:99:3d:9d:
7c:f2:6e:c9:2a:dc:a6:02:60:d2:a2:bc:aa:35:61:
02:3f:2a:e8:b2:a1:99:63:d7:c4:e6:b0:5d:99:8e:
27:f2:2b:e4:4b:35:0a:bd:7b:56:fc:78:e4:fc:72:
09:35:58:54:0d:8d:1e:2e:93:f9:79:27:98:28:57:
7f:02:83:29:10:0c:08:95:63:73:d4:b7:b3:ca:d8:
47:b9:f0:d3:40:f7:33:3a:7b:53:9d:26:c3:9e:3e:
88:8d:39:e8:d2:d8:70:de:4e:e9:e1:2c:7e:b2:74:
f0:16:e4:8a:fb:43:d4:96:83:57:93:25:8e:7e:5e:
e3:05:48:62:60:fa:7e:9a:00:4d:28:c8:4c:d4:19:
3a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:68:41:A5:E2:01:EB:FE:0C:36:88:48:47:5D:19:34:9E:38:39:15
X509v3 Authority Key Identifier:
keyid:7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:fe:64:6c:f3:35:7a:8d:56:89:9f:d1:91:94:cd:df:77:af:
6e:bc:9b:5b:ac:a6:00:d2:b5:21:19:ab:6b:a3:d3:a9:4a:d9:
67:e3:1e:e8:a6:02:8d:b8:b2:b0:36:6a:49:1c:dc:f3:35:6d:
9b:87:1c:22:96:52:b4:95:ed:e1:df:1f:08:9d:df:1c:78:4f:
65:3d:80:87:f2:e7:e1:15:76:0a:d0:dc:da:3f:89:e0:15:1f:
63:cf:db:70:1f:64:04:39:5a:e9:62:cf:93:5a:be:ca:9d:ad:
c8:38:48:1f:d1:aa:e3:a5:ef:3b:4f:d5:9d:cf:a1:4f:2a:04:
df:1d:39:6e:0d:f0:98:9b:ea:39:1d:92:eb:bf:cd:e0:78:44:
c3:eb:a3:be:e8:94:4b:53:b0:a2:95:23:26:95:8b:3e:0d:2c:
59:14:43:68:1d:1c:4d:a4:63:4d:ce:7b:5a:34:a8:28:2f:62:
da:59:f2:2d:a1:24:fb:41:3d:4c:0e:d3:f6:ce:7c:25:cb:d3:
8b:0e:12:bd:77:0f:84:96:62:f6:61:37:f5:df:4e:b3:41:54:
40:56:db:2f:b9:a4:12:ec:13:20:62:ae:36:29:87:42:d9:40:
5a:b0:1e:25:bc:1f:46:32:23:9e:ff:89:53:3b:74:f4:f8:ba:
20:7b:63:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:58 2026 by rpki-client