Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier: /bzBoNrHPFTXJWhRIlf559ze5q1BoEbLEwNIdhCxAgU=
Subject key identifier: 32:CE:83:CE:27:48:80:BB:7B:2F:B2:63:89:6D:0E:01:E9:85:AC:55
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial: 019D24DED4CB458D23B577A982B6F11622FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 12:01:16 +0000
Manifest this update: Wed 25 Mar 2026 12:01:16 +0000
Manifest next update: Thu 26 Mar 2026 12:01:16 +0000
Files and hashes: 1: Lh1w2stJ270Gej9xnTdwoInIgKA.roa (hash: o+GwhLAcoD1EMh7vyC4YZpvJmieyScRxzeQPPXDHKzo=)
2: mXT_95G0hHnwfzwy9GHCGff03us.roa (hash: MURLfvQpANHzg+d3efhUAoTh/8FNUBv5Zb/aAOYp3OU=)
3: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: SADexeaFkG5e2evbLjRRVziZBogXQ+nf+XS8Ohpzscs=)
4: x7mbec4cpv5N8U0_JFOsofDdp9k.asa (hash: xc6esLHJMBzAKQI4ygNtC8Fx32gcjy+TaKUBFG2ujWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:d4:cb:45:8d:23:b5:77:a9:82:b6:f1:16:22:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Validity
Not Before: Mar 25 12:01:16 2026 GMT
Not After : Mar 26 12:01:16 2026 GMT
Subject: CN=32ce83ce274880bb7b2fb263896d0e01e985ac55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:d1:93:15:ef:7e:82:65:15:1a:42:ce:cb:
78:b6:2b:91:71:43:8f:2c:52:d5:24:69:56:bd:62:
b0:79:8e:8a:a3:c2:2d:1c:a7:0c:61:90:02:3a:10:
58:c7:2c:e7:e7:5e:cd:e3:5a:75:14:2f:66:94:b0:
63:36:4c:77:9a:24:ac:f1:c9:03:6d:00:51:d5:ab:
b5:23:62:7b:d4:52:c0:ed:09:a0:3b:ca:10:ca:2f:
16:81:68:d6:dc:0e:fd:86:cb:fd:ce:7b:ee:ad:25:
77:56:c7:ab:c1:17:0f:13:65:bd:e1:e5:a1:8d:98:
a8:a6:1d:01:b6:fb:f4:0f:bd:00:69:42:d2:cd:50:
43:af:70:5d:a4:7e:25:e1:17:78:b9:ef:2c:65:a2:
4b:30:df:6b:e3:d3:6b:09:58:1b:44:b2:c9:66:73:
f2:bb:79:c9:cb:65:68:fd:6e:17:79:1d:8b:e0:52:
96:d0:b9:83:c2:f2:03:c1:3e:1c:a0:95:3e:f3:8b:
d3:8a:be:4f:65:b4:67:23:1f:49:54:ee:46:a9:86:
c4:19:f5:9c:17:40:5d:4a:da:9f:27:59:d4:4e:fb:
b6:10:45:d3:ea:cf:e9:37:cf:90:ee:0a:0a:98:69:
da:43:60:45:10:61:62:49:58:d9:a9:40:2d:01:ee:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CE:83:CE:27:48:80:BB:7B:2F:B2:63:89:6D:0E:01:E9:85:AC:55
X509v3 Authority Key Identifier:
keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:f4:9a:39:b0:30:00:8f:d6:91:e3:4e:f1:74:fb:4a:f3:f2:
cd:62:ff:49:85:b9:2d:32:e7:85:bc:73:57:92:c5:a9:37:7e:
55:9f:db:ab:d7:e3:be:80:3b:ae:0f:dd:34:87:d5:e4:d0:91:
52:48:fa:c0:7b:b2:cc:47:34:5f:12:e5:6a:b8:52:2b:bb:42:
df:c0:95:29:47:e7:ae:d3:2b:0c:f0:7d:19:16:59:e8:ba:12:
8f:03:ce:2e:1a:56:6a:34:07:d7:d3:b5:de:37:0b:bf:fc:1d:
9a:25:a7:aa:61:00:d1:e4:62:94:49:d5:27:9a:3b:78:81:35:
e4:4a:9c:79:c7:c7:7b:0a:27:ad:e2:71:16:d4:98:99:05:af:
53:2e:d1:54:c2:94:5d:29:fb:ec:f0:c6:cc:22:46:98:dc:52:
bc:63:f2:11:99:7b:24:f6:64:b4:30:74:ae:42:5c:67:c0:b9:
66:14:cc:b7:3b:5e:af:29:35:b8:c7:31:41:30:f5:70:ea:eb:
33:c3:7f:f6:4b:52:cd:ef:1f:84:18:a0:13:95:cf:d5:69:44:
fb:af:a9:07:81:18:a5:93:67:d2:2b:db:6f:6c:37:4a:ad:5c:
b9:95:23:4b:bc:51:97:51:f3:0b:fc:e3:c6:a5:46:81:74:de:
23:18:0f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:55 2026 by rpki-client