Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
File: lDbagFrtoKOlD_xmJR3L-0Lw814.mft (raw, json)
Hash identifier: fJet77sgy1QPPpIWwC0vmiIxXP4PpOFXwn59v8P2qno=
Subject key identifier: F3:93:1A:7B:AA:CA:1D:94:3D:77:FE:15:CD:5F:86:4B:1E:76:72:62
Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
Certificate issuer: /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Certificate serial: 019D33087E3BD8AA6E9DA81624E7A146606A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 06:01:27 +0000
Manifest this update: Sat 28 Mar 2026 06:01:27 +0000
Manifest next update: Sun 29 Mar 2026 06:01:27 +0000
Files and hashes: 1: GyhIX9G7ssewah6bDhgNQPrqbwo.roa (hash: kljqR0c8WAPsE2bmcYrTdPFXyOSyujcjC+p/sprv0mg=)
2: lDbagFrtoKOlD_xmJR3L-0Lw814.crl (hash: ioe9ReHjTHPQ7HJRlWtXxR7nTqLgBZ3VqQGr4uwy9OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:7e:3b:d8:aa:6e:9d:a8:16:24:e7:a1:46:60:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Validity
Not Before: Mar 28 06:01:27 2026 GMT
Not After : Mar 29 06:01:27 2026 GMT
Subject: CN=f3931a7baaca1d943d77fe15cd5f864b1e767262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f5:ee:83:be:eb:dc:85:65:a9:75:8c:49:9b:
7f:d5:57:e8:d3:ad:81:97:48:b3:70:73:94:97:17:
16:96:05:c9:23:bf:25:6b:9d:cd:2a:d6:93:d1:16:
f8:43:99:7c:31:3a:77:76:a4:93:05:24:c7:68:2c:
76:8f:d5:80:96:e3:01:63:7c:c1:3c:b9:c3:1f:40:
29:0c:55:0f:cf:de:9e:2f:19:54:ce:8f:f7:8b:29:
05:d6:12:c1:c1:b4:c4:3d:8c:95:41:b4:dd:2a:1e:
d2:6d:9b:0a:5c:b5:24:08:62:d4:91:b3:09:7a:a6:
bd:a2:ee:cb:8e:d4:8f:53:ad:ab:cd:c7:72:9b:42:
1b:61:6b:9d:c5:67:39:5e:81:c8:90:cc:75:ce:dd:
c3:d8:46:0d:c9:e0:31:bb:a2:5f:1d:19:4b:26:eb:
77:4b:8a:76:7c:b3:a3:ad:dc:96:46:90:d8:e4:fc:
43:b9:ac:31:2b:2a:ec:66:e8:52:b5:9c:b7:77:cc:
24:d4:72:7d:56:5b:8f:5e:04:80:a6:a9:66:cc:f7:
1b:4c:d6:31:ed:76:c0:bc:83:e2:c8:19:3f:2d:07:
e5:1d:1c:71:cd:29:99:67:bc:ed:fe:d8:83:38:84:
f5:a9:71:2b:1d:00:85:38:bc:97:ed:b4:df:13:42:
99:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:93:1A:7B:AA:CA:1D:94:3D:77:FE:15:CD:5F:86:4B:1E:76:72:62
X509v3 Authority Key Identifier:
keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:62:09:61:e7:37:df:77:16:02:a8:7c:56:13:41:5c:18:b9:
15:c3:af:dc:03:d4:57:de:72:6b:71:db:02:82:5b:9b:5b:88:
ea:fc:d7:1b:c0:58:e9:96:bd:ee:9f:33:af:28:b1:79:31:87:
8b:71:05:e3:13:b1:0e:39:d4:09:67:e3:23:03:10:bc:2e:49:
56:15:12:ac:7a:5a:b5:ec:d6:62:c2:7d:25:e8:64:2c:79:e2:
b7:f1:93:9b:66:fd:ba:e5:9f:8e:27:9e:c5:1c:f8:b7:30:dd:
3f:5a:b9:c0:62:0b:7a:b2:9d:78:53:0f:0f:a0:c5:f5:4f:a0:
02:84:65:9d:21:eb:69:6d:09:2d:78:f0:aa:fb:77:b4:48:ad:
19:26:3e:a3:5c:fa:6f:94:2a:25:47:ea:5a:73:43:da:7d:25:
46:d9:eb:b6:d3:6d:5c:5b:aa:31:dc:b4:e8:30:dc:a2:a3:be:
cb:3f:c5:ee:2a:b7:9b:a4:1f:2a:c6:ec:38:42:04:e9:c6:b6:
cb:bd:be:8f:3f:58:8a:2b:75:7d:ae:0f:9e:44:2c:a5:5e:e0:
6e:19:2f:8a:3c:02:cd:96:c8:94:e4:cf:47:f3:c4:b9:d0:0e:
63:45:0f:76:0a:f7:19:9e:bf:e2:28:ed:05:c3:0c:9a:38:bd:
33:b2:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:28 2026 by rpki-client