Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
File: rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft (raw, json)
Hash identifier: lgucg5Ho1ODHO7cx0aydvYV8jpbMWqOq7/G+hyTLPes=
Subject key identifier: D6:CA:5D:5C:C6:4B:9C:11:93:52:41:80:6D:A6:CC:6F:89:C1:0F:CA
Authority key identifier: AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
Certificate issuer: /CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Certificate serial: 019D329AD3106B33D44942660F986F8AE234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 04:01:40 +0000
Manifest this update: Sat 28 Mar 2026 04:01:40 +0000
Manifest next update: Sun 29 Mar 2026 04:01:40 +0000
Files and hashes: 1: PWOIsM1RgkYVqSbqLsT7k73pFWQ.roa (hash: 9bdrQrsfFHUHU7k9g9RNN8b9Hzrdzx2GE2UfmdhgdoI=)
2: rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl (hash: mfrbeaBuFsdAGa/uYPzZcfNNZMQ3a+t6ss9nBfFIZDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:d3:10:6b:33:d4:49:42:66:0f:98:6f:8a:e2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Validity
Not Before: Mar 28 04:01:40 2026 GMT
Not After : Mar 29 04:01:40 2026 GMT
Subject: CN=d6ca5d5cc64b9c11935241806da6cc6f89c10fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:52:c9:6a:f8:99:aa:9d:30:b3:af:88:2a:bf:
dc:fa:fe:e7:c2:dd:26:b0:f6:41:00:51:bc:0f:c4:
20:a4:37:7f:3e:bf:10:c3:f2:e2:66:b2:46:da:d7:
13:8a:85:04:68:62:7c:74:3f:bf:a5:53:59:e1:05:
64:ba:13:88:74:6a:8d:58:92:1c:56:7c:22:9a:28:
5c:58:ce:6e:10:ac:ab:ae:1a:83:7a:06:fe:dd:7d:
72:bf:98:98:89:19:10:a8:0a:d3:c1:00:c2:2a:8f:
7c:8d:b2:19:5a:87:d9:23:58:2d:63:47:44:0b:99:
2a:bc:0c:ef:9b:2f:cc:2c:fd:39:ed:ba:ff:b0:1a:
a1:78:63:2b:1b:04:36:66:2f:20:97:06:8f:c5:33:
ab:8d:6d:1f:14:41:b0:fe:7c:2b:6d:20:8b:4a:2b:
58:42:25:67:0b:6b:8a:95:39:ba:1f:73:aa:76:ba:
d4:ff:b4:6e:7a:c4:e4:1d:93:74:1c:f0:2e:e5:dc:
93:81:5f:90:a4:b1:97:ea:61:13:7f:32:19:32:41:
84:12:1d:ad:cf:7e:cf:56:a3:d4:4e:1d:74:63:ab:
fd:b5:d2:bd:00:24:8a:9e:3e:9d:65:bf:f9:b7:89:
98:7d:20:52:90:0a:5f:5f:e4:5d:7d:8d:90:79:e8:
95:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CA:5D:5C:C6:4B:9C:11:93:52:41:80:6D:A6:CC:6F:89:C1:0F:CA
X509v3 Authority Key Identifier:
keyid:AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:83:35:2b:25:31:97:79:62:31:c9:fb:67:d2:45:1e:22:cb:
24:27:c3:e0:87:30:eb:53:be:55:a3:93:aa:6d:cb:ed:fb:d1:
6f:33:4b:ff:dd:15:24:cf:25:15:33:34:fa:57:f8:8c:96:a9:
be:93:48:2d:a3:c9:09:d4:67:43:97:65:97:fe:7a:1c:76:b7:
34:5e:30:bb:e9:ef:6f:86:72:d2:58:50:fa:1b:ae:cb:e7:bb:
7f:39:f2:0e:ec:ce:a3:e9:ba:fa:69:4b:ab:e5:48:70:19:d8:
c7:34:f1:f3:40:59:d1:d4:99:83:5d:84:6c:88:d6:26:44:b9:
b9:89:a3:e7:d8:b3:a6:68:ef:e5:46:03:e4:b4:46:05:83:34:
49:d8:71:db:15:92:90:98:58:58:53:c1:eb:d7:45:d9:91:59:
44:d7:ff:14:16:52:d6:c5:d4:13:e0:c8:89:a3:8a:26:d2:e8:
09:51:4b:d3:7a:3f:23:69:b8:42:fb:4c:1f:28:ac:0b:f9:f0:
41:b0:1c:eb:aa:5b:a4:9e:3d:b0:f5:09:70:3b:13:62:2e:66:
ba:7e:c4:a3:32:cf:0e:64:bb:4b:19:c0:2e:d4:c3:e9:eb:af:
ef:40:ac:da:c2:f0:31:4f:9c:1d:7b:f7:16:2b:bd:d5:1d:0d:
02:35:e3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:08 2026 by rpki-client