Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
File: _h0Y2aIic226wjERC4jerI2wM20.mft (raw, json)
Hash identifier: Njfs/cqT44WG0mTo0Ny1R2iklAcq7Lc4WSBzsOHVIUc=
Subject key identifier: D1:83:90:67:93:E7:14:C3:5B:E4:A5:48:CF:EC:91:12:F8:99:21:AC
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 019D2A04F4B0DD0A809293F4676037348603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 12:01:00 +0000
Manifest this update: Thu 26 Mar 2026 12:01:00 +0000
Manifest next update: Fri 27 Mar 2026 12:01:00 +0000
Files and hashes: 1: BGnG6gtmJf9oXbmJn6G8to3OAXQ.roa (hash: 7lUuJCGm6EGdC4KlGNBvD3jQRgoMt2XAzy3kEwKql7A=)
2: GRQeTTIlDXdek7LI3xSxbyP0wko.roa (hash: /36LNNo/X3fjiRfzW93svxxPJpEouDboCXaZzVepsY0=)
3: QIkShXbbHThv1aeU1a-peKPDkSs.roa (hash: VjCUy/EF7Rus5PhS1elNAKUIyC4Ng0/nopkU975oiO4=)
4: _h0Y2aIic226wjERC4jerI2wM20.crl (hash: wopquxBXfgqzWObfXSmdLN9slT1VeasrupOftFCvi98=)
5: iYHzEnXzX7Ri36tD7aub9iMoOmA.roa (hash: 1jW4is5cwWCDH+AJEWg+glpxZJwRIEFEPAYxOuttUh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:f4:b0:dd:0a:80:92:93:f4:67:60:37:34:86:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Mar 26 12:01:00 2026 GMT
Not After : Mar 27 12:01:00 2026 GMT
Subject: CN=d183906793e714c35be4a548cfec9112f89921ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:a8:61:61:ea:00:92:b0:05:a3:a4:76:e3:
d5:dd:e6:8e:0c:f6:b0:64:08:f3:a1:66:79:a2:31:
0d:4a:d5:32:fb:61:7b:e8:3d:47:69:0b:97:33:31:
18:f2:5f:12:94:03:6b:12:24:ba:51:40:da:28:ed:
35:9f:36:1b:e4:80:9b:f2:e0:ea:ab:c7:90:92:a5:
76:9f:89:b0:05:6e:14:d2:9d:fc:f4:ff:1f:e8:49:
7f:c0:26:1d:ac:47:47:79:65:75:c2:07:3c:34:09:
4f:ce:cf:46:2c:b8:de:e2:b7:ee:03:e1:a3:4d:67:
3a:7d:72:3b:18:95:80:0c:77:e2:fe:29:bf:87:01:
ca:83:dd:7d:cd:c6:c2:60:82:3e:db:95:58:7a:01:
06:bf:81:67:10:7e:56:61:89:a7:6e:04:99:a8:0a:
4a:81:8c:34:ad:02:ab:be:fb:93:ac:c7:0e:0d:d3:
36:8b:c7:ec:c9:23:95:d3:60:59:e0:7d:32:e8:63:
c8:1c:7b:db:94:bc:f1:09:32:7e:a1:cc:7c:3f:f5:
cc:00:2a:cf:8e:87:1f:00:70:9b:47:71:b4:76:6c:
a7:a6:ae:63:b2:51:03:72:6d:60:34:27:dc:ba:df:
a5:c0:26:1b:70:a8:fb:eb:bd:79:52:4f:b8:1a:5f:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:83:90:67:93:E7:14:C3:5B:E4:A5:48:CF:EC:91:12:F8:99:21:AC
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d2:d1:b1:de:62:47:fc:70:f0:f3:54:36:b3:6c:6f:e0:97:
2c:13:4c:b8:a4:60:e1:bc:9e:6a:0c:c4:b1:30:c2:29:f3:c2:
bf:ad:ca:f8:07:7d:cf:50:83:84:99:58:fa:1a:b9:1c:bc:dc:
89:36:ef:3f:7e:4c:32:b3:ff:27:c0:5b:c4:74:6a:0b:f3:c0:
e3:64:4e:11:be:91:fe:56:ad:05:e8:ea:9e:7b:63:38:0f:1f:
a2:a2:75:ac:27:a6:ea:f1:7b:ed:52:83:1c:36:5c:cc:c9:9c:
78:57:99:e2:70:26:3e:3a:ce:73:4a:32:18:38:36:3b:d9:57:
86:cb:1e:cc:37:31:6e:39:b2:e1:b3:81:e0:e7:39:9f:25:92:
30:d1:96:9d:51:94:51:c5:d3:81:6e:da:5e:45:d5:9d:e5:44:
bc:c8:e6:1b:0f:68:19:f7:a7:76:0e:06:d5:c0:03:9c:be:dd:
24:c7:50:e2:14:d6:12:20:91:97:83:52:30:d1:f5:e6:50:be:
1c:d0:5d:f6:13:57:cf:34:10:c8:a0:b3:52:ff:9e:c5:57:eb:
b7:ec:88:4c:90:23:97:8c:e7:08:1f:3d:bd:9d:dd:fe:0e:ca:
50:29:7f:6d:7f:3e:8f:55:a5:9e:f8:1b:88:25:c1:f2:19:0a:
80:e9:0a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:38 2026 by rpki-client