Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
File: 6f383DJhtXr63-1zD7Le2yhkn88.mft (raw, json)
Hash identifier: Nazg+8rPUb1PgzdT7cZiqsx/bPxIJ+/tJjsLMVMOMYY=
Subject key identifier: 92:05:42:0D:74:75:08:16:15:FB:98:4A:4B:38:43:27:83:24:03:23
Authority key identifier: E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
Certificate issuer: /CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Certificate serial: 019D26CCEBC1C5897FF9DF0F27617D7DD49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 21:00:57 +0000
Manifest this update: Wed 25 Mar 2026 21:00:57 +0000
Manifest next update: Thu 26 Mar 2026 21:00:57 +0000
Files and hashes: 1: 6f383DJhtXr63-1zD7Le2yhkn88.crl (hash: RLU2uXUgkUM7uodCBHwxzNlFFtwOh3MnJxgl0DM7UOs=)
2: z8QPDmNfQ0U5nDiOWR6fhTlT5bY.roa (hash: JpJdMydt2d4jsczclhW+ZcOFIoTDZoU5V9xzlSAiVrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:eb:c1:c5:89:7f:f9:df:0f:27:61:7d:7d:d4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Validity
Not Before: Mar 25 21:00:57 2026 GMT
Not After : Mar 26 21:00:57 2026 GMT
Subject: CN=9205420d7475081615fb984a4b38432783240323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:fa:f6:f1:d6:d1:40:72:c2:8c:d5:40:50:
0c:6f:ee:95:00:08:de:94:78:83:51:5e:73:7a:14:
24:a2:a1:d3:c4:b2:e7:c4:b9:80:03:3e:7f:4a:8c:
87:ed:16:f2:68:53:88:e6:1e:6a:5d:58:76:f1:23:
c5:2f:53:a3:a4:58:5b:68:8d:a7:b0:42:65:9d:b8:
b2:4b:cb:6d:41:49:98:16:c7:d6:0c:79:60:31:3f:
c1:5a:76:fb:41:14:a5:de:ad:6d:7e:92:15:57:c7:
42:bf:57:36:21:f9:cd:2e:6f:50:f3:47:f4:2b:5d:
3e:b3:49:39:aa:5a:c0:32:4b:7b:1a:8b:03:cc:43:
c1:28:4e:3e:40:41:ad:55:cd:04:de:0d:8d:02:a4:
2e:b6:b8:f8:8b:e0:8e:b2:e4:08:d6:4a:6a:b8:2f:
3a:fb:dc:81:de:78:51:67:cc:4f:c5:ca:ec:16:9b:
81:cf:e2:51:10:c0:fa:94:15:9d:59:3e:ea:5a:c7:
2c:36:19:30:8b:d0:bc:3c:11:00:5b:12:e0:53:a8:
ba:42:8b:fc:3e:cc:10:56:0f:1f:c0:f9:2f:56:6a:
48:79:8f:5b:b9:62:98:49:92:01:d7:8b:af:5d:1d:
ce:fe:50:be:e1:f6:48:93:fd:b3:8b:e5:db:5a:d6:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:05:42:0D:74:75:08:16:15:FB:98:4A:4B:38:43:27:83:24:03:23
X509v3 Authority Key Identifier:
keyid:E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c9:66:1e:48:ad:b6:bb:6e:88:de:8f:0e:a6:c2:11:b9:da:
2b:9d:51:62:7b:49:88:4b:6c:56:1f:fa:9c:f9:2a:c1:22:57:
83:9c:e3:bf:13:8f:8c:0c:ee:4c:33:fd:93:7c:75:b6:e6:3a:
d5:e6:5f:a9:4e:09:09:82:a1:94:46:b9:5b:4b:fc:fd:6c:16:
78:46:51:ef:db:cb:61:f0:f8:1d:0c:0f:85:36:dc:fb:d7:26:
a2:70:ce:a2:f8:6d:16:72:77:0a:4c:86:ba:4b:72:cb:92:30:
8a:f4:2f:02:9b:4f:bf:6b:a4:d2:ad:65:84:15:98:c1:e6:dd:
08:44:3b:d7:c6:9c:c8:22:3e:f3:ff:97:d3:2c:a1:88:26:0f:
7d:e7:ae:5d:b8:76:bc:24:a6:c2:1e:5d:52:9d:bc:fe:22:48:
e5:23:44:2d:5c:1b:b6:d1:f2:4c:67:9e:47:71:f3:c5:a4:8c:
1c:d3:b8:7c:7e:4f:dd:e0:a1:76:69:5d:3c:89:04:14:42:23:
63:e3:dd:6e:86:c2:16:3d:ec:01:41:9d:5d:60:75:38:13:2c:
2e:33:d9:cb:6b:2f:8d:d2:ae:cb:ae:8b:0c:23:97:49:c1:7c:
b0:94:d5:b1:ae:62:fe:af:fa:12:6d:d4:4e:f6:5c:2f:f3:cd:
33:89:6b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:32 2026 by rpki-client