Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier: r96OYdbrCL9zwfCAvPOeiXtX3/rsS1UY8HxAoqylwJk=
Subject key identifier: 88:4D:73:23:38:DA:C9:10:E5:DC:6B:C4:DA:12:22:91:90:97:76:0C
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial: 019D2960FF6E8BA78F79901EED53E969DC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:01:55 +0000
Manifest this update: Thu 26 Mar 2026 09:01:55 +0000
Manifest next update: Fri 27 Mar 2026 09:01:55 +0000
Files and hashes: 1: 6Ie5sPRwouKDZ63tHw4hyjJqq10.roa (hash: XieQfcrAZvNQQrTrpSeqvq6G/q8IwApTZ6vvc3HLXb0=)
2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: Qx3rAFtcF+jSkT/z94UwTECB3EavoY9uP044ZlFrxl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:ff:6e:8b:a7:8f:79:90:1e:ed:53:e9:69:dc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
Validity
Not Before: Mar 26 09:01:55 2026 GMT
Not After : Mar 27 09:01:55 2026 GMT
Subject: CN=884d732338dac910e5dc6bc4da1222919097760c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:90:da:aa:6b:a8:74:67:14:aa:20:88:5f:5f:
ba:ee:9d:fc:77:e9:6e:48:62:c3:0e:40:cf:59:0b:
b2:bc:60:7b:35:e6:96:6b:64:65:02:de:a3:3e:e9:
32:78:b6:25:27:3d:7b:9b:08:39:17:04:b3:df:19:
0e:b5:28:15:f9:94:34:3d:53:1d:ee:86:e1:95:f8:
03:4e:58:a1:94:91:12:22:91:db:c2:70:22:f5:41:
65:ff:1e:d6:06:9d:59:2f:c2:d8:17:e8:17:e1:66:
37:ca:64:b7:52:62:65:bc:bb:f3:f5:5c:e0:86:06:
15:47:3d:3e:f3:8b:14:f6:21:31:af:d9:8c:db:3c:
70:63:e0:6b:b9:22:6e:c7:27:27:92:60:ef:f0:a6:
cf:32:53:34:c5:cb:09:f7:ad:5e:08:05:b1:ce:6e:
ca:d3:61:5c:ba:4b:a2:0c:06:7e:e3:05:e1:96:8f:
f1:90:f1:e9:81:8f:a1:a1:ef:a8:01:35:4c:bb:ec:
83:04:82:ca:ad:24:7b:6a:fd:ed:9a:ab:50:b5:2d:
30:fe:40:cc:cf:16:d4:7f:3e:a1:8c:5a:83:0d:44:
ea:f6:89:ef:83:fb:48:fe:52:b1:cd:a4:11:a5:92:
bd:9b:78:41:4f:73:ac:6d:4c:a2:7e:bf:f4:77:70:
2a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4D:73:23:38:DA:C9:10:E5:DC:6B:C4:DA:12:22:91:90:97:76:0C
X509v3 Authority Key Identifier:
keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1b:85:b6:31:ae:68:40:aa:de:91:db:71:71:70:b3:68:8a:
5b:e9:4e:10:73:37:3f:46:33:3f:1e:7e:3e:4e:09:9d:27:d5:
d2:ca:c3:a4:2e:61:d4:c4:5c:f3:07:44:6f:ee:f3:7d:f8:55:
c7:71:a8:a8:3d:94:b7:7c:71:b4:20:c9:b5:15:69:08:5c:96:
2b:56:2f:45:f8:70:29:4f:05:b6:ea:87:09:ec:40:3b:06:72:
fd:37:02:6d:2c:82:49:19:77:41:5d:31:b9:aa:78:c9:28:f4:
c7:56:9b:ee:fc:25:3b:ea:a4:5b:0c:46:d1:c9:4e:63:e2:f8:
28:5c:ea:17:6c:51:c1:15:d4:a5:01:0e:f8:9f:27:29:be:72:
41:3b:60:d2:f6:6b:fd:53:93:fc:b4:aa:09:1b:71:0e:b4:22:
34:56:20:f0:a2:b1:a9:f7:80:68:8a:4a:b4:4b:0e:44:37:4a:
7d:79:53:b0:02:08:ad:df:d0:85:28:09:c3:71:ce:92:53:74:
27:a4:e9:ac:c7:ae:d5:fc:26:82:dd:b8:b0:5f:cf:9b:74:43:
84:25:ce:34:0b:cb:a6:e2:ed:db:86:3b:d4:81:bb:5f:1b:30:
a3:63:3a:45:b9:a1:3c:91:02:a9:6c:10:63:47:92:5c:d7:12:
d0:e4:03:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:27:17 2026 by rpki-client