Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File: 201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier: j6DbUWbfPY//dftR2D57JVVxsvVKeTTnOkvoSnHRMTo=
Subject key identifier: 66:5F:96:8F:B5:2B:1B:51:A3:6F:5F:13:16:F9:57:F8:35:29:16:6D
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial: 019D29CDD8D4CC9AEAE1D39ED0C452053518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 11:00:49 +0000
Manifest this update: Thu 26 Mar 2026 11:00:49 +0000
Manifest next update: Fri 27 Mar 2026 11:00:49 +0000
Files and hashes: 1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: 1OnmG63WOhxgOqVjc2lLCJvsye1a64vx3AI5jjpnAmU=)
2: DcpoOaI5WCtrBzEek9x3MtAQl4Q.roa (hash: LNpYxCyPAZU/q4OugE8iiZ5AnBZFDBNN2UC960my6+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:d8:d4:cc:9a:ea:e1:d3:9e:d0:c4:52:05:35:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Validity
Not Before: Mar 26 11:00:49 2026 GMT
Not After : Mar 27 11:00:49 2026 GMT
Subject: CN=665f968fb52b1b51a36f5f1316f957f83529166d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:80:5e:23:13:38:fe:9b:9c:8b:b0:30:ee:
38:9e:c8:e6:1a:61:0a:1d:34:30:05:26:7d:20:78:
db:33:f5:51:bf:73:6b:2d:f8:81:66:9c:47:01:c8:
28:c8:c4:b5:21:d2:2c:4f:bf:59:2a:c1:b2:4f:2b:
ad:e6:1c:8d:aa:73:57:23:08:c9:e4:11:41:8a:a7:
df:de:ee:b8:fd:e7:54:c4:a4:17:a4:89:9f:2e:3e:
39:3a:06:81:f2:0d:3d:40:db:34:5b:e3:6e:35:95:
9f:e5:99:c0:3c:9c:66:b6:e5:2c:b3:cf:cc:88:16:
d1:89:c3:da:4e:4b:08:57:45:f5:1c:4c:0c:a0:20:
89:44:14:37:b6:7c:0e:29:00:4e:a5:97:fd:8d:e5:
5d:90:d7:40:c7:91:b1:4b:ce:8e:44:33:f9:17:b3:
b7:ae:4f:36:85:68:d5:4d:d0:98:ed:44:39:a1:d0:
53:5f:79:87:68:b6:cc:c0:d6:54:4c:5e:1d:af:67:
17:ca:c1:cf:12:2e:77:bf:ae:38:a1:60:c0:14:12:
65:8c:26:ee:a3:f4:1c:ca:d1:88:af:af:a0:65:5e:
d9:e3:bf:2e:5a:bf:62:1c:0c:3d:86:d8:26:2b:51:
b7:b8:21:74:d3:87:78:73:35:c3:4e:1f:9b:7d:c1:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5F:96:8F:B5:2B:1B:51:A3:6F:5F:13:16:F9:57:F8:35:29:16:6D
X509v3 Authority Key Identifier:
keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3a:00:20:21:c3:37:3c:bd:a6:d2:ec:09:60:ce:70:28:da:
7f:05:55:79:63:b6:bd:be:59:fa:b5:aa:bf:f1:5d:2a:35:57:
79:5c:ec:2d:c6:3c:d3:6b:da:83:bf:7b:3d:4f:9d:e5:9b:8d:
97:fc:3a:8f:ed:ae:26:89:45:c1:e5:ce:6e:53:e0:ab:a8:8f:
e3:cc:a9:68:a8:fa:45:c9:57:f9:12:e4:57:2b:14:38:9b:f7:
05:94:25:c1:fe:c2:25:87:f5:f4:73:dd:91:de:70:23:ce:24:
60:6e:08:b7:40:a8:7d:a6:40:f3:8f:78:b2:2d:52:10:b6:77:
08:8c:96:b7:cb:a8:be:00:be:0c:be:36:07:84:ca:eb:57:39:
56:10:8c:07:fe:ff:a8:e9:8a:6e:9f:b6:24:b2:93:53:40:33:
45:95:1a:8f:52:b3:e3:90:91:7f:5c:83:e5:a8:5c:58:53:77:
07:d4:33:86:2c:d0:92:93:c1:d0:a4:63:0b:1b:58:8a:07:ce:
05:21:b8:e8:3f:ed:c2:21:12:72:1b:44:21:95:27:28:45:50:
99:22:71:ca:f0:82:70:b6:b6:6d:2d:e8:19:57:02:b2:20:72:
d0:f6:15:c4:75:05:28:a2:0d:48:e8:74:1e:19:70:24:f6:7b:
8b:0f:94:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:53 2026 by rpki-client