Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
File: deqJTuBXdeDvBh0IbKJSFH9ckd4.mft (raw, json)
Hash identifier: uVBOhh/ES43UdgRzZXHm5LWoacz7j5yHE7ghMNYZbqU=
Subject key identifier: 0E:DA:7B:30:C5:45:49:A3:E9:79:04:66:7E:D5:20:CC:93:79:80:88
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Certificate issuer: /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial: 019D2816FABB254589A2703EEFCA404D691E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 03:01:27 +0000
Manifest this update: Thu 26 Mar 2026 03:01:27 +0000
Manifest next update: Fri 27 Mar 2026 03:01:27 +0000
Files and hashes: 1: 2_ip97ddlj1cQ2mlpG8VnnAhSa4.roa (hash: 6R1vvhI30TeNiE30+I3zfpPJroDLNETGICaQVhgLg/w=)
2: KoVt6Xy7gkv7j_38ctTdwANrLe0.roa (hash: f72VqLp88rf5xfXfyl+PJYk0ViN53QtQMBfU74Y077U=)
3: LMl6QCFGZ6NTfYGlowyafW63Beg.roa (hash: BhySL2ahxdsB2rFdsSzbUlZCzHf0m4FchHvGZ6v2dx8=)
4: deqJTuBXdeDvBh0IbKJSFH9ckd4.crl (hash: +qUuKjHUhN+ndLVlS7xnjde3VVz1E8oZnogMWD4vV50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:fa:bb:25:45:89:a2:70:3e:ef:ca:40:4d:69:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
Validity
Not Before: Mar 26 03:01:27 2026 GMT
Not After : Mar 27 03:01:27 2026 GMT
Subject: CN=0eda7b30c54549a3e97904667ed520cc93798088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2a:0b:b8:35:25:cf:2c:68:c0:f1:ff:27:78:
2d:cd:19:a9:78:2d:77:a1:24:b1:76:6e:53:01:80:
5d:08:22:c4:21:96:c9:c8:e4:61:59:95:37:cf:44:
75:6f:d9:e0:2a:05:f1:15:72:13:28:4b:d9:d8:87:
13:8f:6a:67:42:de:d5:39:f4:7d:cb:15:f8:ca:36:
ec:63:1e:46:1d:29:b1:2c:80:c3:a4:94:87:26:80:
b3:e1:d0:49:40:e3:3f:55:5e:5b:db:c1:64:d5:87:
d4:66:b3:2b:32:f6:83:b2:5e:95:96:59:c5:f3:65:
0f:98:55:a5:78:3b:9d:27:df:d8:82:0c:3a:7b:3a:
a6:62:c3:58:f8:81:3b:fc:51:73:df:b2:d4:2c:5e:
79:5d:83:a8:41:dd:3c:5e:99:01:15:81:f1:e3:d0:
3c:3d:20:4f:36:f8:e9:4f:71:f3:53:a9:9e:02:7b:
6f:3c:18:b5:91:90:4d:da:ca:36:23:be:a9:aa:f6:
09:32:ab:ca:27:ac:5c:c4:66:1a:4c:c8:86:d7:fe:
79:c5:c0:86:f0:f3:25:d5:f4:80:fe:56:b7:70:aa:
aa:84:19:23:a4:fe:b8:6d:f5:3a:ef:98:8d:31:47:
2c:d0:b3:4e:c6:87:21:4f:6f:82:ad:6e:60:cf:73:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DA:7B:30:C5:45:49:A3:E9:79:04:66:7E:D5:20:CC:93:79:80:88
X509v3 Authority Key Identifier:
keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:11:9c:1e:97:36:f1:e0:ba:f5:7d:05:90:60:eb:0e:91:3d:
f7:24:2f:2b:7f:28:35:5e:b6:a8:7c:aa:97:85:bf:03:aa:db:
e6:b7:ab:c7:f1:cd:12:59:b6:fe:5f:e5:37:7d:07:5b:8b:61:
24:cc:6f:62:0b:93:e2:cb:ef:4f:2f:39:71:f3:81:ad:85:90:
1b:56:7e:ba:9b:ec:eb:a4:73:4a:40:98:c4:d6:95:42:fc:bb:
32:ac:f5:3d:cb:3f:65:8d:da:3d:98:0d:43:32:fb:f1:93:2f:
5b:27:a5:4a:80:2b:a8:b8:b4:71:fb:f8:76:22:7f:9f:11:a9:
72:ae:54:3a:f2:c8:9e:6d:13:22:9b:4e:7f:6b:19:5f:ff:58:
f6:cd:74:2b:33:e4:ee:da:f5:53:57:fd:e6:7d:40:95:75:6a:
52:39:4b:6c:02:65:66:f9:08:d8:04:04:95:1d:f0:25:3c:16:
44:ab:dc:e9:61:a2:81:c9:98:e9:ea:6f:6e:76:e1:53:77:c1:
7e:bf:74:1e:bc:7a:b7:5d:bd:59:e7:33:0e:39:f7:e7:1e:0f:
69:3d:20:7f:9b:dd:c7:30:39:a9:5f:45:1d:3d:62:5e:e4:27:
38:78:de:b7:c7:eb:70:80:ab:87:36:ff:ba:33:31:05:8c:5e:
cf:d9:09:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:20:15 2026 by rpki-client