Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
File: b_sPm9w6L65HtH5wIYmTyRnxD7A.mft (raw, json)
Hash identifier: GJMb6JyzKKRdYIlERaU2+AnybkZO+KRpC7xScf9Seak=
Subject key identifier: 5A:93:07:BE:3F:0C:AC:5D:F3:7F:8A:09:09:8B:7D:00:A0:0C:07:F3
Authority key identifier: 6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
Certificate issuer: /CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Certificate serial: 019D2A04FB9F3EF6D5637ADA55C8765E89F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 12:01:02 +0000
Manifest this update: Thu 26 Mar 2026 12:01:02 +0000
Manifest next update: Fri 27 Mar 2026 12:01:02 +0000
Files and hashes: 1: b_sPm9w6L65HtH5wIYmTyRnxD7A.crl (hash: 4TFBvm6UVoTeGgXngHOQgMFfIwcJCPZcRfs5T2f9Jrs=)
2: vtqrOQMXBai6QzwK8HtUu3lk1tk.roa (hash: R/9zXnOjxEKuBNOTBqrUyM5GM+gLe/nwCCt/j1bgmlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:fb:9f:3e:f6:d5:63:7a:da:55:c8:76:5e:89:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Validity
Not Before: Mar 26 12:01:02 2026 GMT
Not After : Mar 27 12:01:02 2026 GMT
Subject: CN=5a9307be3f0cac5df37f8a09098b7d00a00c07f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2d:27:a6:18:09:3d:12:2a:ce:54:fe:0e:05:
11:c9:12:0b:fe:d6:41:03:f1:fa:b5:bf:94:ba:a7:
f8:4e:66:84:d5:bd:8a:e4:db:17:13:4b:86:07:52:
80:78:ae:4b:a6:d1:a7:1d:f3:41:3d:74:ed:b1:4a:
15:9f:f8:df:f9:9a:1b:a8:fc:eb:4a:7e:35:62:85:
ab:78:ba:e5:0b:cd:e6:5d:b8:04:eb:42:0f:c1:c7:
2f:52:12:22:c9:e2:af:37:f3:df:61:0f:28:2f:f0:
06:fe:a1:fd:9a:cf:b2:4c:94:56:15:3f:5b:e8:c0:
c8:a6:98:c7:bf:96:d7:90:34:81:74:5f:65:9e:36:
42:92:ee:f4:3e:76:6c:c9:7b:f7:d9:ea:a5:46:ca:
8e:98:44:fc:74:8d:cb:e6:a2:76:8c:32:90:94:54:
4b:b1:c4:ed:66:fa:42:52:fe:74:f7:6d:c9:51:81:
18:d3:9f:8a:e6:35:d3:81:12:fe:4c:9a:b8:ab:18:
54:57:b9:73:3a:ae:f8:87:e3:d3:3f:c2:40:0f:c2:
68:1e:07:b3:71:07:ef:05:c8:a0:f5:90:31:cb:46:
69:8b:52:40:17:a6:cf:9e:f1:85:16:8a:36:b7:d4:
7b:1d:40:da:d9:0f:cf:cf:32:62:9f:26:40:89:b1:
35:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:93:07:BE:3F:0C:AC:5D:F3:7F:8A:09:09:8B:7D:00:A0:0C:07:F3
X509v3 Authority Key Identifier:
keyid:6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5f:7b:6b:4e:e5:3f:06:17:9b:89:40:ed:73:13:64:f3:25:
af:d4:2b:34:65:60:3b:3b:c5:d5:ba:7c:7c:cc:25:df:30:8b:
a5:80:2a:bb:d7:c6:de:c2:c3:5c:20:8f:a4:e5:dd:bc:74:42:
0f:87:9d:43:71:67:83:20:f7:c3:09:a1:e3:49:63:3a:4e:70:
6c:67:18:a4:66:26:13:bf:d7:56:7e:85:f4:f7:2e:c7:a4:77:
8e:c6:b7:2c:73:4c:cd:c1:1a:eb:ea:c6:78:88:f5:e3:d4:84:
d1:bb:d9:9e:89:3d:4c:f8:3f:2c:5d:13:a4:a1:dd:d6:03:16:
61:f1:eb:3d:97:a3:b8:5e:e0:e9:0c:85:d5:12:9e:21:c1:fa:
cf:92:b9:3a:6e:c1:d2:7b:c4:83:83:f3:e7:e2:00:9f:90:50:
87:d6:01:41:4a:c9:9c:e1:54:66:6c:9b:31:61:96:d6:07:7e:
34:c6:f7:04:62:b3:25:40:db:d2:ea:4e:bb:cd:0b:c6:68:36:
57:3c:2e:90:94:87:48:d3:8f:e4:bf:55:aa:cd:c2:a0:33:a4:
a4:ed:53:ed:dc:34:34:2c:55:4b:c0:70:35:69:de:29:b2:f4:
f5:f1:6f:98:88:b6:07:d6:50:cf:5c:b6:e6:5d:35:17:31:2d:
52:e2:bf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:56:19 2026 by rpki-client