Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File: F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier: p2ifaXvp7pyo276/cvDygasfn7L/rK89GjgXeoYzR8w=
Subject key identifier: A0:60:78:2D:C7:8E:5B:24:63:EC:3F:DA:7B:74:2F:CC:E1:0E:AC:88
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 019D2695D09747DD5E0BD0E70BF8D56DFE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 20:00:45 +0000
Manifest this update: Wed 25 Mar 2026 20:00:45 +0000
Manifest next update: Thu 26 Mar 2026 20:00:45 +0000
Files and hashes: 1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: Oiv6Rvd6nW5SpezlS4lBWD9RbSrw3ii9iK9O+7oqGtY=)
2: YJGwIn3Hfn4CXGcIfF5Sqvh4L2U.roa (hash: bxowbJpolM8aC3Tyo8Qe1Sfr/zVg+4jTgjgqaAuFw7k=)
3: nSoKCh55lGMD-7gl54YUpZEK_XE.roa (hash: KtXsJGsRFXBW5jD73l5yCg/b8S+cXBnf2k08FtiPNjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:d0:97:47:dd:5e:0b:d0:e7:0b:f8:d5:6d:fe:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Mar 25 20:00:45 2026 GMT
Not After : Mar 26 20:00:45 2026 GMT
Subject: CN=a060782dc78e5b2463ec3fda7b742fcce10eac88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b9:00:b2:8c:eb:80:48:28:87:32:6d:59:e7:
42:5c:6c:f6:1e:f3:6f:d2:d0:66:a1:75:bd:c3:69:
88:77:c0:49:11:4d:92:29:07:e6:82:75:4e:5a:06:
3b:88:f9:59:69:18:67:37:48:32:1b:5d:91:ab:21:
c4:00:0d:11:63:79:08:ae:e0:3c:4a:07:a6:83:2e:
de:f9:f7:c6:81:94:4f:df:03:f1:4a:fc:39:a0:21:
90:c2:72:3e:f5:ce:7b:c1:91:0d:ec:9c:6a:58:b8:
8b:96:4f:91:58:a9:2b:15:07:a1:8c:6e:80:e3:15:
5d:f9:dd:2f:f0:37:ea:43:bc:73:de:9b:5f:22:4e:
2f:a3:c0:7e:5c:0e:48:7e:b4:c0:82:09:f9:e1:fe:
1a:df:f1:84:2c:5c:77:c1:24:58:5d:1f:cb:94:4e:
f3:e2:b1:f7:c2:be:dd:39:2c:d4:30:db:93:ea:39:
76:71:5f:93:64:36:13:93:d8:7e:c6:5f:35:66:af:
f7:82:af:35:42:5c:8a:c3:6f:87:f7:e6:01:5e:91:
ed:f5:ea:5c:7a:f0:7a:65:9b:67:8c:6b:27:14:b6:
bf:c3:92:6c:47:0d:8b:ba:c2:bc:f8:7d:4f:b6:55:
38:78:2d:68:11:9e:fc:48:9e:1e:05:4d:4c:32:3d:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:60:78:2D:C7:8E:5B:24:63:EC:3F:DA:7B:74:2F:CC:E1:0E:AC:88
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:08:84:62:03:c8:c6:c3:31:a5:4e:5f:16:d8:7a:b7:7c:c7:
35:25:b9:e0:b4:5e:ee:af:9e:99:a1:44:84:01:36:af:96:57:
2c:04:ee:93:ae:52:87:c4:ef:a5:6c:e8:81:97:65:6f:51:1c:
e4:1d:b9:25:7d:02:f6:31:14:a0:ef:92:3d:95:2d:10:87:96:
74:15:dc:dc:18:1f:ad:13:73:51:34:b6:c7:7c:35:aa:7c:d1:
25:58:ae:b9:8b:fa:dc:ca:5a:3c:13:3c:d4:c0:44:c5:f5:c0:
61:b2:2f:2e:c7:1f:71:7b:e2:1c:5c:27:12:19:42:96:e7:88:
36:61:72:5d:83:2b:ef:dc:41:da:a7:54:a8:40:3c:ab:5e:db:
bf:e1:d8:9c:0a:2b:9c:fe:1a:af:a4:48:0f:d3:19:01:eb:70:
de:4f:cc:78:74:b8:2d:c7:07:ff:77:1e:2a:4d:df:40:2c:2a:
0e:25:9c:d6:a1:ab:a8:74:2a:34:7b:80:70:bf:b9:f6:36:2b:
ef:e5:db:f1:5e:94:eb:21:bc:6b:35:11:7e:58:b2:81:37:5a:
e5:70:bf:1c:b2:5b:a4:66:f0:a5:23:f9:bc:3e:1d:cb:57:7b:
92:9d:c4:49:11:55:8b:83:98:a7:bd:3d:22:30:26:62:9c:f5:
ef:5d:d0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:09 2026 by rpki-client