Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
File: 4ygMY1Kgv7t50knIh17RhuzOioY.mft (raw, json)
Hash identifier: VMeBF5Z0GwOkLVCoxRDo/P+HjfPOyaiyiK6hIdA8QUw=
Subject key identifier: E2:03:30:A9:4A:05:80:DA:6A:91:D2:B3:F3:A9:96:69:6D:4B:B9:13
Authority key identifier: E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
Certificate issuer: /CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Certificate serial: 019D27A8DDDAAC6EAB43F5E964318D684FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 01:01:11 +0000
Manifest this update: Thu 26 Mar 2026 01:01:11 +0000
Manifest next update: Fri 27 Mar 2026 01:01:11 +0000
Files and hashes: 1: 4ygMY1Kgv7t50knIh17RhuzOioY.crl (hash: 7Yfi9drlMUWIH+Qq3KWs6URCyT8lzdfZDGh6BF2uQT4=)
2: D3RzDDZgPLG3UCsxVx6Q8ZzLm1I.roa (hash: kVx9KqwTwAznM+coaQfniQbA9ErAhmA+cdao1OKFFKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:dd:da:ac:6e:ab:43:f5:e9:64:31:8d:68:4f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Validity
Not Before: Mar 26 01:01:11 2026 GMT
Not After : Mar 27 01:01:11 2026 GMT
Subject: CN=e20330a94a0580da6a91d2b3f3a996696d4bb913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6c:54:ee:d8:ed:78:79:09:fe:e1:2a:17:1e:
d1:91:4f:c0:b2:f7:d6:77:1f:6c:48:8b:08:4d:e4:
64:cc:52:40:fe:a6:d2:8a:00:69:77:34:fe:1a:e8:
c7:7f:16:84:a7:0f:e0:03:4d:c3:21:2d:53:49:05:
40:c4:fe:d0:9a:82:65:90:aa:56:6d:bb:3f:9e:26:
d0:5b:0e:33:6f:a3:58:de:ea:a9:3b:1f:55:b5:0f:
ec:56:05:27:39:34:ba:9d:1e:c7:fa:60:21:a1:31:
2a:2e:24:62:0f:a7:f8:f7:14:cb:cc:85:f4:2f:3e:
4e:2d:64:0d:80:a5:78:7b:b5:eb:ef:cc:9d:81:96:
8f:00:6f:0e:be:1d:2f:c7:8e:46:ae:3b:05:db:04:
97:d8:59:c6:e5:af:02:de:78:f0:95:35:7d:42:da:
2b:8e:33:b2:d9:2e:1f:0c:15:06:f6:5b:3f:76:fd:
6e:d0:c6:ae:4d:98:b9:a3:8e:04:38:48:db:aa:b1:
e0:67:b5:b8:f4:c3:7c:34:9c:4d:5c:a2:bf:38:4f:
84:af:ed:aa:25:c3:62:61:fb:f6:99:14:bb:66:b6:
ba:2a:e3:50:61:93:90:69:56:ec:84:f5:53:86:a1:
a4:85:b2:9f:86:1a:8c:f7:ba:27:0b:dc:2f:f0:0a:
58:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:03:30:A9:4A:05:80:DA:6A:91:D2:B3:F3:A9:96:69:6D:4B:B9:13
X509v3 Authority Key Identifier:
keyid:E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:53:80:24:5e:4d:de:6e:61:af:ee:76:36:39:27:76:7c:0f:
a5:7b:f6:0c:40:e8:be:68:89:15:b9:d1:3f:db:3a:06:56:d2:
a5:f5:91:6f:64:32:b3:28:c8:a5:a6:07:9e:de:b3:74:4c:a3:
87:db:ff:8b:ed:c1:c7:9b:da:e6:6e:05:09:71:b4:7e:9d:fd:
df:f8:f5:86:81:60:18:71:1f:f7:47:5b:21:9a:a8:e4:03:23:
1a:fb:75:1e:cf:03:52:54:68:32:f1:32:fb:49:d2:d9:e2:b9:
74:40:8f:62:7b:03:25:9d:9d:c8:c9:db:53:3f:d3:e5:59:ea:
4b:55:c4:00:bf:fc:a8:ec:d2:55:ca:b2:3c:6e:0e:5a:a2:30:
14:00:10:c8:1a:bd:0c:ef:ae:8e:ba:a5:35:20:2b:25:d6:e2:
b9:8b:4a:66:47:ef:00:4c:8c:c9:96:c8:2a:a5:6e:a7:c7:8f:
f8:6d:03:52:4d:9f:64:f4:49:c0:aa:46:70:fe:61:1f:29:10:
18:f7:c9:b1:67:eb:1e:02:a3:45:6f:7f:17:5c:d0:f2:a4:11:
80:f5:96:3b:74:12:3e:23:c0:e3:4a:d4:89:f3:eb:6f:9c:5f:
cc:18:2c:8d:39:bd:19:05:0c:96:8f:1b:a0:a6:c9:7f:6f:62:
f2:cd:92:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:05 2026 by rpki-client