Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
File: RABxct-fwtSi3bupNM68nwKG08o.mft (raw, json)
Hash identifier: YjPMAj09aV3+KvF7KZc/rZnsGRKKBdPLqncpkzm7BGg=
Subject key identifier: 0D:0A:A5:8C:87:C9:CC:DA:40:6B:28:98:31:7E:59:C2:21:BB:C5:AD
Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
Certificate issuer: /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Certificate serial: 019D24DEF3123DACC50D53B0B06BFE234F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 12:01:23 +0000
Manifest this update: Wed 25 Mar 2026 12:01:23 +0000
Manifest next update: Thu 26 Mar 2026 12:01:23 +0000
Files and hashes: 1: D9L3F0MjFuI1mkGvBm8mGmwB0aE.roa (hash: d55W5CU5JP2xCsUj9oSlJV+ga7nmSkprH9KBPjXNOz0=)
2: Fn9mtyW8p7tf3NEs5ynDVX9fKWQ.roa (hash: Y3ktqWHPY4jaIf3oBnxCM/z1QkmvklY1/99J5dEJKUQ=)
3: JbYTcmeKPo3mOunx0Z-jMKOxz48.roa (hash: /zbvgZqj9ImK5wHvF50pz1/cbzu2MAYXngG5GwrR+io=)
4: RABxct-fwtSi3bupNM68nwKG08o.crl (hash: ecJpo49d3U3I197myICRF5RczHo3ppzNf6p2B3HL8SY=)
5: kKbHC__LJH-j0ex4EgJJmX98slE.roa (hash: FA7KYfTvFd4DkO8o/xkyqOnnhY/RKFo8GgvBljJcnfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:f3:12:3d:ac:c5:0d:53:b0:b0:6b:fe:23:4f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Validity
Not Before: Mar 25 12:01:23 2026 GMT
Not After : Mar 26 12:01:23 2026 GMT
Subject: CN=0d0aa58c87c9ccda406b2898317e59c221bbc5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:e5:99:92:53:d1:71:d0:7a:14:d1:ed:81:
86:ac:4e:97:56:64:99:b8:e5:97:2e:16:9a:e8:c2:
91:1e:f1:69:6a:de:65:eb:7c:37:0e:3c:3f:e5:ac:
41:54:a4:5f:9a:0f:f7:76:43:ca:7c:84:07:61:fb:
f3:43:c0:ca:fd:39:34:d3:b6:8a:8d:17:2b:8a:81:
39:6d:a5:a6:57:cf:f7:bb:57:f8:69:73:e3:6d:13:
f7:07:28:b5:54:fd:3f:0d:fd:36:c9:d8:13:87:98:
8d:17:da:5a:f5:ab:b6:f6:71:e7:52:2f:ac:ae:82:
33:15:2f:d2:76:af:52:84:db:00:b8:a6:d2:38:7a:
e3:ff:af:44:08:06:22:c6:a1:7d:ef:0c:98:8b:dd:
02:aa:4f:f8:fe:1a:69:98:ee:ae:94:1c:c0:9f:bd:
27:c2:b2:5e:8a:04:b2:ad:03:38:dc:01:df:39:1a:
7b:b7:b9:f8:66:5f:3c:ad:eb:dc:9e:57:b4:ff:2e:
cc:1c:8a:4b:7e:8f:5b:d2:79:0f:af:64:ad:96:01:
2c:19:ea:51:c3:74:99:06:a9:59:07:ba:de:14:ed:
46:8d:f2:1c:e2:51:51:f1:55:97:e0:00:9a:17:79:
af:4a:26:c1:3d:de:0e:e5:fd:04:1e:36:82:19:43:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0A:A5:8C:87:C9:CC:DA:40:6B:28:98:31:7E:59:C2:21:BB:C5:AD
X509v3 Authority Key Identifier:
keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:93:d7:c3:8f:76:03:ea:d8:a8:41:d5:9e:ab:29:ce:09:bb:
cd:b5:d2:90:d5:a2:ee:59:76:17:98:40:c5:3c:ed:e6:4a:a7:
ef:73:f5:f7:2c:18:f4:4b:d1:1c:0b:65:2b:fd:b3:6b:5b:f9:
ac:fe:df:14:d7:4b:41:5c:ae:53:9a:9c:93:13:fa:c3:9c:00:
9f:9b:61:fc:a7:fa:a0:85:6b:e1:dd:99:da:9b:cf:c4:1a:24:
56:9d:b0:50:bc:22:34:44:e1:c9:a6:6e:62:b0:d8:75:98:56:
57:25:aa:60:d4:89:12:cf:45:e7:70:93:a4:1a:b2:c0:4e:56:
a1:75:56:9e:26:7b:38:f9:d8:75:18:e1:03:4e:bb:d0:c5:8b:
44:38:2b:8f:b7:70:fe:e4:55:a6:bd:61:75:f2:a0:c6:94:11:
f6:2e:00:03:c0:e0:eb:c4:ce:e5:8d:13:54:b2:50:b8:66:5c:
67:0c:e6:8e:62:a5:e6:af:b4:8b:50:af:ec:79:16:75:a2:32:
80:d8:73:fe:d6:b3:f2:b4:cd:b1:86:bc:44:7b:e4:5c:74:e2:
c5:7c:a5:59:a7:c6:3b:27:c5:32:5c:5e:d5:c1:14:6c:1f:10:
6c:8a:57:24:a6:ae:b3:41:6d:71:10:72:48:d7:69:9a:f0:35:
4f:6e:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:14:37 2026 by rpki-client