Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
File: 88q2j7sMl5R2WUvfxWwZIEK43t8.mft (raw, json)
Hash identifier: i+07WCpjgcEnvD8zF0bc8bVK1ACbIlbRsiCGSWzKGSc=
Subject key identifier: 46:79:D2:47:35:B1:83:9E:1E:3F:A2:1B:04:71:42:BF:EF:9C:94:B0
Authority key identifier: F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF
Certificate issuer: /CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
Certificate serial: 019D28846CDB91D39428773C443652E09F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
Manifest number: 13CF
Signing time: Thu 26 Mar 2026 05:01:00 +0000
Manifest this update: Thu 26 Mar 2026 05:01:00 +0000
Manifest next update: Fri 27 Mar 2026 05:01:00 +0000
Files and hashes: 1: 88q2j7sMl5R2WUvfxWwZIEK43t8.crl (hash: D9MlKY44DqxkWXQ6r99Ch+G8B4ve0KwDxCFL2HTkPpE=)
2: zRLI_XnW-YoHiodpzhxfbCWkVZo.roa (hash: I8VTCVMtI4awNqhceNYMKEzYn52i5zIhYy/GzccL/RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6c:db:91:d3:94:28:77:3c:44:36:52:e0:9f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
Validity
Not Before: Mar 26 05:01:00 2026 GMT
Not After : Mar 27 05:01:00 2026 GMT
Subject: CN=4679d24735b1839e1e3fa21b047142bfef9c94b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d9:2b:03:1c:71:97:e1:6d:fa:96:59:05:2c:
76:19:9f:9c:ea:92:c5:5e:7d:62:54:43:f2:b9:76:
e8:e9:cf:ce:1f:e3:a8:a0:95:da:84:69:a7:43:cb:
ca:6f:f9:27:ca:79:e2:c9:28:8e:e2:47:f7:0c:e9:
08:8a:5b:9d:ef:1b:5c:e7:36:42:be:75:ce:63:f2:
16:c6:5d:05:4e:a7:e5:cf:c3:53:bd:cf:1c:3c:cb:
f0:c2:c9:7d:d7:cd:55:9b:d0:30:fd:5b:fb:5a:6d:
b7:e6:60:86:4b:2f:e3:45:9d:b9:7b:56:14:d6:20:
59:8e:0f:9f:eb:6f:dc:59:eb:a5:56:a0:13:9a:35:
dd:c5:f6:d1:d4:3b:43:56:07:11:d8:c8:a0:bf:25:
2e:97:3f:0a:67:0f:db:9d:61:bf:23:9b:2d:db:16:
56:18:a2:17:51:7c:29:89:0d:d7:25:28:ff:0d:52:
73:b7:0e:91:4c:94:f0:1d:03:4f:4e:a9:f7:25:54:
81:e6:d1:73:c0:a6:20:1b:3f:66:c4:03:5b:4b:24:
e0:39:60:bf:54:f9:96:0d:02:b3:a6:7c:c7:8e:e3:
aa:8d:06:8d:49:87:90:39:cb:eb:96:e5:f3:60:f1:
f3:6e:c8:6d:97:77:d1:72:06:ce:47:0a:41:0e:43:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:79:D2:47:35:B1:83:9E:1E:3F:A2:1B:04:71:42:BF:EF:9C:94:B0
X509v3 Authority Key Identifier:
keyid:F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:29:29:ee:99:ef:ca:f2:26:88:f8:66:04:62:a3:77:15:9a:
71:02:93:d3:99:e3:97:5c:28:c1:6a:37:b8:fe:e7:e7:60:68:
e3:58:e4:ac:07:27:43:aa:45:12:0e:d4:b6:82:9f:00:0c:87:
61:c8:7c:55:83:2f:8c:ce:28:84:0f:0f:08:6e:9c:bb:9c:e0:
4a:9c:ac:66:b8:07:d6:3d:ea:f1:b3:55:b6:c7:41:de:80:af:
fb:03:b2:89:f2:12:2a:c9:e8:35:cc:25:c0:39:4e:e7:21:db:
fb:0d:71:75:fc:e0:e8:44:1c:6e:6a:b6:19:69:ee:5e:de:e0:
a6:7c:55:05:09:b4:57:f7:48:32:33:09:b5:38:be:dc:f6:da:
3a:3d:29:49:d8:0d:68:11:cb:12:45:16:97:3c:2f:6d:5e:ff:
3d:8e:9b:fb:48:ca:03:b3:3a:ff:d9:01:3f:23:38:b7:a6:21:
b4:cb:97:1f:41:87:57:cb:1b:8b:b9:4e:b6:e0:66:6a:54:8d:
4c:7e:af:38:85:9a:07:86:92:67:eb:a0:c6:67:37:2a:1b:8c:
a9:a5:f7:72:19:40:ad:cf:e4:e9:27:f7:6f:d9:a6:49:01:6a:
c6:b8:3c:6f:a0:f6:e0:44:e7:63:2a:87:c5:10:43:35:bf:50:
9f:80:9b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:14 2026 by rpki-client