Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier: KJSUn2mVsxKc7Egpkd7lrarHuBOZ75WXPUJay6Jpwko=
Subject key identifier: 4A:A0:88:4B:CA:D6:1D:20:C9:D7:87:64:33:6A:B0:F3:BC:37:1E:54
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 019D284D3EAE46895BCBADCC7F92D92F4982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 04:00:44 +0000
Manifest this update: Thu 26 Mar 2026 04:00:44 +0000
Manifest next update: Fri 27 Mar 2026 04:00:44 +0000
Files and hashes: 1: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: qhHxeQUIfbwhhaFzwymyvt4eAhAHpHspyyHZz3YW9kQ=)
2: anGfaLD7Sw-uBHUL7ZCjm1E0Zuo.roa (hash: odjCBhO2fg7tVXSaHs+W/QeZyJocuWu2JrcGva0i788=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:3e:ae:46:89:5b:cb:ad:cc:7f:92:d9:2f:49:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Mar 26 04:00:44 2026 GMT
Not After : Mar 27 04:00:44 2026 GMT
Subject: CN=4aa0884bcad61d20c9d78764336ab0f3bc371e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:cc:7e:c4:83:a9:5d:6e:6b:f8:4e:45:a6:
ab:6c:53:2b:5d:1c:9c:98:44:75:a9:73:fb:f0:c5:
4e:00:52:88:49:1f:44:f9:21:08:07:d5:27:db:96:
d3:66:70:3a:fe:49:cf:d6:12:52:f7:c5:71:66:7c:
f5:94:a2:04:37:9e:5a:c5:fa:30:fc:6f:84:6f:c9:
55:16:8f:5c:79:a6:b0:78:f3:56:de:e9:40:ab:ec:
f0:20:a4:81:17:1b:85:da:9e:5e:3c:e7:a5:d9:71:
b5:a4:67:e7:20:5e:a1:87:d1:52:44:2f:cd:db:59:
17:04:93:f6:30:c2:96:05:5a:17:38:5a:51:fc:72:
8c:41:86:e4:00:20:f9:5b:aa:07:0b:4c:ef:2e:12:
71:90:15:26:35:34:f1:cb:6e:12:12:4f:6d:23:50:
54:a7:ef:1a:d0:6d:5f:0f:0e:17:6f:97:8a:e7:51:
41:ac:03:0e:22:1b:32:17:d2:bd:3a:f1:ed:7c:e3:
3f:1d:78:6b:0d:3a:80:36:4d:f5:cd:5e:80:b5:f0:
b5:97:77:2f:4d:5b:b3:b4:ae:37:4c:e6:94:6a:95:
aa:36:6a:02:66:5d:54:14:2f:b8:7e:e5:58:40:80:
63:6c:f2:d4:89:d6:f1:78:98:16:53:06:38:0d:9f:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A0:88:4B:CA:D6:1D:20:C9:D7:87:64:33:6A:B0:F3:BC:37:1E:54
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1a:c8:30:1a:d5:82:aa:0d:69:d2:8a:60:68:32:c7:f7:70:
c6:76:0b:3f:54:9a:1e:c6:fa:55:d2:43:2d:2f:7b:5e:d8:72:
93:4d:db:ba:ba:23:59:36:94:95:69:cc:c3:57:39:91:83:95:
30:0c:c4:a1:74:46:2f:03:a8:ec:48:49:18:4c:1a:9c:82:82:
8a:b8:45:36:b6:e3:3d:83:1d:00:bf:4c:ef:0f:9b:3e:72:29:
06:0e:be:66:22:c7:44:ff:dd:7f:27:a1:39:eb:52:c2:93:ae:
96:8f:f3:57:c0:ff:53:0d:8c:8a:59:65:b2:06:7c:e3:c8:3f:
94:b4:4d:aa:e2:ed:db:88:82:f3:82:06:1e:93:98:13:d5:10:
aa:46:a2:a5:8c:9b:65:ed:78:3c:98:10:62:73:16:5b:be:a9:
e5:6d:2b:b0:71:df:07:1d:4c:64:c8:90:d1:4e:c2:1c:c1:06:
a3:72:c1:70:78:08:75:fc:89:8d:24:76:46:35:b6:4a:06:bf:
f7:a9:cf:fe:72:6a:3b:29:04:ae:19:77:08:53:17:44:9c:9d:
c9:9f:95:0e:19:23:d5:fe:77:18:14:66:6f:6a:83:9b:9a:11:
13:89:ab:53:4d:8f:2c:3c:a2:7c:94:5c:fc:cd:c2:95:51:97:
dc:b3:51:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:26:00 2026 by rpki-client