Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
File: 0YHQxAlRpPkA5NndnCDkhWNQkg4.mft (raw, json)
Hash identifier: qmKFDJ3tM/N+otAyDDd8jp0la/YwGhuqI0qbsWlN0tE=
Subject key identifier: 25:BE:E4:BD:F0:E8:E5:5D:FD:47:11:43:20:BD:48:EE:89:5C:C5:84
Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
Certificate issuer: /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Certificate serial: 019D27E0607EAD894AFD428CD4BA4BA70EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 02:01:49 +0000
Manifest this update: Thu 26 Mar 2026 02:01:49 +0000
Manifest next update: Fri 27 Mar 2026 02:01:49 +0000
Files and hashes: 1: 0YHQxAlRpPkA5NndnCDkhWNQkg4.crl (hash: kaiKwZF1P+G3KNioundPgxBL1dnjnV30bHdHKwwjw60=)
2: 6twj1FNGbSdC6GwrHJCaAlK97kQ.roa (hash: ZXy5hFs9BRqqonUgm00rE7vHIrD50csuYB7WxmR/ZMA=)
3: BfkIMDedHvkhA2THdLsjdvt92Lg.roa (hash: ltzWWyb9KbJKCS0qvZNQB+aDHpJjbdvCT6eRcpViW3Y=)
4: coJoVPwD-NPH-ETwi5cG_7WPcf8.roa (hash: GKRZPbLDmw4jESIu5RvOoK1/PXU2kw57mn7Q0tZcbW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:60:7e:ad:89:4a:fd:42:8c:d4:ba:4b:a7:0e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Validity
Not Before: Mar 26 02:01:49 2026 GMT
Not After : Mar 27 02:01:49 2026 GMT
Subject: CN=25bee4bdf0e8e55dfd47114320bd48ee895cc584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:da:7f:3e:18:95:b3:f3:fa:5b:2e:72:50:
e4:b0:27:e9:37:62:31:7d:92:9f:ad:3a:da:e8:5c:
90:41:fb:8f:a2:07:bf:54:23:f8:82:5a:5b:b2:a6:
3a:f8:80:ca:88:8d:1c:b6:24:0b:19:cc:2e:0e:db:
6b:23:8c:a4:e3:b5:9c:fc:47:25:a8:1f:c0:15:fa:
57:cf:77:51:31:2c:3f:b1:b3:b8:af:a5:d9:d6:2f:
17:f1:78:63:90:9f:0d:b5:24:35:f7:ec:85:86:73:
b2:7a:d5:d8:67:fa:3d:db:3c:ae:25:b6:75:d3:cc:
06:4e:42:56:7f:ab:2c:91:7e:99:37:83:00:e6:7a:
a5:e3:1e:fe:98:d0:19:49:c8:32:ae:e9:18:f1:e9:
34:b3:85:f5:15:3c:1d:79:d5:4d:76:83:2e:16:43:
36:15:7e:ae:fe:a0:f3:4d:4e:5e:68:73:b6:52:83:
13:eb:f7:17:48:84:0d:bd:0b:0e:01:d0:06:b8:ca:
e4:a8:90:aa:c1:1d:46:90:1c:7b:d5:f1:15:33:73:
a1:22:b8:ec:46:e9:6d:76:5d:33:0b:35:23:4e:66:
99:a8:16:6f:4a:9b:6d:66:4b:ae:77:d4:e0:a7:2b:
a3:f5:40:3a:2c:2c:a9:a2:61:c0:ec:0e:81:93:32:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BE:E4:BD:F0:E8:E5:5D:FD:47:11:43:20:BD:48:EE:89:5C:C5:84
X509v3 Authority Key Identifier:
keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:5c:e6:59:c7:51:3a:28:5c:fe:ff:9e:fc:f2:e2:c1:90:0b:
47:6b:1f:91:1c:02:b4:1f:5e:85:fb:c6:7b:23:5e:0d:3e:c5:
90:2b:a3:da:d5:95:70:27:7b:74:82:1c:82:e1:b4:04:5b:12:
45:49:65:f4:2a:88:a6:56:f7:db:4e:5a:c4:a1:6b:f6:66:58:
e1:a0:91:79:cb:0a:55:77:b7:c6:38:9f:c1:82:04:a1:bc:6b:
f3:6d:7f:2d:5b:85:71:03:17:6f:93:20:a2:42:25:7c:f4:23:
f7:ff:64:b0:87:1c:c4:ed:91:81:3c:a1:06:e2:05:af:1f:74:
32:f6:b6:47:ac:22:08:34:a3:d7:51:e7:46:c3:0f:58:aa:bc:
7b:b9:96:6d:f1:a0:25:ed:a1:68:3e:9c:f8:dd:1b:c2:48:cc:
29:7e:63:93:68:72:0c:c6:cc:ba:62:4e:55:f0:02:78:8f:aa:
b6:4a:23:a1:94:a2:d7:21:75:5e:f1:0e:b8:d5:3d:9c:19:32:
bf:79:83:b4:0e:76:86:f4:69:cb:1a:8a:e1:44:2a:8f:2d:13:
8b:ed:46:67:d2:17:1f:6b:d4:18:76:4b:b5:8b:3d:50:25:de:
b9:7c:d5:3a:eb:e9:27:b7:08:cb:e9:db:b5:df:42:b9:37:5e:
28:7f:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:38 2026 by rpki-client