Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
File: rF6twAMoUCNv7nVutY-_BeExa14.mft (raw, json)
Hash identifier: gaKKFwbqaHckWa86znV6wRR3sPnbs8jY0wGGem44x/s=
Subject key identifier: 9A:CF:CB:0E:5C:FF:D9:87:D3:6A:D1:80:2C:93:7B:57:0A:DC:CC:6B
Authority key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
Certificate issuer: /CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Certificate serial: 019D2704BE4AC4950E5C8905C81B8F3C2081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 22:01:55 +0000
Manifest this update: Wed 25 Mar 2026 22:01:55 +0000
Manifest next update: Thu 26 Mar 2026 22:01:55 +0000
Files and hashes: 1: HtxMXqqhzKqnM-81Q366LSa5VRM.roa (hash: lOeWJNKuBfP6Er8Y1VwMR1oQUbvjX1dy4GlVvc3GRBU=)
2: SmT1BUT7BtnuZLJ6_6jIBBoQ70s.roa (hash: RYBd7FR6OZyKgfNBGxNgxiTa308oNZjB95Z8XVN3KKA=)
3: rF6twAMoUCNv7nVutY-_BeExa14.crl (hash: gdzBL563ueICXdTT5ZIQd9b+If72YosOUEJjLQqcL10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:be:4a:c4:95:0e:5c:89:05:c8:1b:8f:3c:20:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Validity
Not Before: Mar 25 22:01:55 2026 GMT
Not After : Mar 26 22:01:55 2026 GMT
Subject: CN=9acfcb0e5cffd987d36ad1802c937b570adccc6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:c5:7f:e0:47:83:67:0c:90:64:e2:69:60:
ac:b6:f6:82:44:b0:e7:9c:a5:a5:0f:d7:da:54:1b:
e5:e9:ec:75:4d:bb:df:82:95:03:f1:a8:3c:a4:f7:
89:8d:ef:d1:82:cd:34:49:ad:f8:e6:61:31:25:88:
4c:be:d2:bb:59:04:b6:20:47:26:93:38:be:dc:fe:
d1:be:35:b1:fb:d3:44:bf:1f:42:5a:c9:c3:00:17:
ac:8a:ad:fc:f6:68:68:43:83:e4:0a:ab:01:67:11:
0d:2a:8e:02:00:7c:e3:7c:4a:0f:2b:cd:40:4f:a3:
38:ce:30:d3:da:f5:46:ee:17:e0:22:28:57:82:3f:
69:c6:30:c3:c2:e4:79:ee:a3:d7:c3:d3:92:1e:5a:
ec:90:63:e4:a4:bd:29:b6:d2:ca:25:0e:de:7f:b3:
48:a9:ba:e5:53:1c:84:10:7f:8d:ba:5f:e5:bd:a3:
d1:e0:31:5d:e7:81:b2:8b:f8:f3:70:83:2a:9c:4c:
ee:e7:d0:68:6d:2f:e2:91:22:82:63:af:37:7e:e4:
85:72:d4:c9:de:93:4a:fe:2c:88:4b:6c:fb:a1:28:
47:4e:2c:01:79:31:cf:19:48:5b:55:24:12:4c:8c:
2e:a4:e2:eb:46:c3:01:05:22:a7:28:52:fc:25:fc:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CF:CB:0E:5C:FF:D9:87:D3:6A:D1:80:2C:93:7B:57:0A:DC:CC:6B
X509v3 Authority Key Identifier:
keyid:AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1a:dd:eb:9e:9e:c2:e3:ed:50:c3:7f:39:eb:00:e6:11:aa:
1c:6c:58:3c:92:b9:aa:43:95:63:46:1a:a8:a9:93:eb:84:12:
71:e5:d7:77:6c:ed:e9:5b:13:7d:76:0d:ef:4e:d2:fb:64:9e:
03:2d:e2:08:2e:97:61:61:69:e1:52:4d:16:71:02:42:92:48:
67:79:26:60:1a:15:98:dd:71:44:db:b9:3e:47:36:6c:86:ae:
d8:c7:8c:13:3f:07:25:bf:8a:d5:50:fc:6f:3c:fb:fe:1b:7f:
2c:43:70:f9:c4:f4:4a:52:00:7d:20:de:1d:60:17:6a:5e:11:
cb:90:0a:80:33:25:c6:5b:d6:26:0e:0d:29:e5:77:d4:cd:38:
87:d8:27:8c:8d:75:47:9f:03:9b:ef:2e:cf:aa:3f:41:13:c7:
e9:7d:08:b4:1e:6d:a6:4f:d6:74:47:e3:4c:76:52:ee:15:d2:
65:8b:2c:ca:17:4e:83:f2:52:b3:91:7c:47:f8:c1:89:ed:ef:
b4:b4:43:f2:56:5f:aa:e9:47:a0:77:da:17:1b:a5:73:db:e7:
e8:08:76:26:8d:47:c7:4d:64:7b:0f:2d:0c:26:52:e7:df:c8:
94:e5:9c:d4:53:e1:be:6b:da:a9:c2:a3:68:cb:d7:f0:86:37:
30:85:9a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:43 2026 by rpki-client