Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json)
Hash identifier: 9AP/dESsbZMfgDcaRBbaDcdnfr8+GavFzumVWBlYcOw=
Subject key identifier: 6B:91:73:4D:7F:A4:AB:99:9E:8A:C4:15:DF:50:FB:FB:AA:6B:B8:1F
Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95
Certificate serial: 019D27DF77C241CC0EB09ED920B7B8CD002A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 02:00:49 +0000
Manifest this update: Thu 26 Mar 2026 02:00:49 +0000
Manifest next update: Fri 27 Mar 2026 02:00:49 +0000
Files and hashes: 1: dNleK7oqqS4JYOVbb6S3XLVUiBA.roa (hash: eOgBYtYMR3J+l0721Hpv5YsWUbXa/qSUakud5H58TI8=)
2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: xrRHDCTq6/LftP+BWw5EpSf/57ItX0YwdzW9jBdswaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:77:c2:41:cc:0e:b0:9e:d9:20:b7:b8:cd:00:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95
Validity
Not Before: Mar 26 02:00:49 2026 GMT
Not After : Mar 27 02:00:49 2026 GMT
Subject: CN=6b91734d7fa4ab999e8ac415df50fbfbaa6bb81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:0f:35:60:03:62:99:cf:bd:8a:56:d6:c7:
31:0a:36:4b:81:af:ae:72:ba:18:76:22:38:e5:62:
90:9c:a1:f2:48:7e:0d:c4:67:5c:bb:e7:91:89:47:
8a:33:b6:aa:4c:c4:c4:a2:07:fb:ea:1a:a4:b8:ed:
32:42:5e:c4:8f:04:3f:4d:39:76:09:c1:69:4d:9e:
85:70:ed:6d:ea:a7:21:e6:ca:31:2a:ed:74:8e:14:
20:97:1c:d4:1a:86:91:d8:60:e3:f5:3e:8f:a5:bc:
bb:a3:b0:df:cc:48:de:ba:32:9a:91:84:4e:b6:76:
fc:b7:ca:d3:ec:84:87:95:7c:30:71:2f:a9:25:ae:
f4:6d:ec:09:d8:53:75:e5:9a:25:cc:df:fb:d2:f7:
a1:1b:6c:8f:fb:81:89:8e:45:21:0e:a2:48:e7:d2:
06:68:8b:c7:d4:ec:5b:d6:7a:ee:e4:fe:c8:5e:1c:
b1:df:dd:5b:0c:fc:ad:62:b1:db:62:91:0f:7e:45:
03:8f:b6:48:16:db:09:9a:46:0b:b9:f2:e9:2a:8f:
ce:5e:90:af:8f:80:96:bf:65:61:ce:c7:1a:f3:dd:
9a:ef:d2:94:ec:57:7c:7a:85:27:93:79:2a:3d:9a:
0d:64:6f:b6:81:c8:18:69:c0:a1:b0:ad:f7:a4:06:
8a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:91:73:4D:7F:A4:AB:99:9E:8A:C4:15:DF:50:FB:FB:AA:6B:B8:1F
X509v3 Authority Key Identifier:
keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:60:b8:3b:5d:b2:ec:ca:99:dc:2c:fc:50:e5:aa:c0:a5:76:
11:e3:5c:52:5a:9e:b4:fe:b2:65:6b:18:c1:a8:c4:2b:4c:ec:
f6:fe:45:84:b4:21:02:44:47:b5:98:cd:f2:a9:43:2e:7b:80:
57:2a:48:90:fb:96:c7:f6:97:e0:1e:f6:bc:94:a3:e6:d6:e6:
dd:9e:cb:75:c9:32:d6:0a:06:61:d5:2e:0d:5c:d4:00:a3:9a:
ca:98:c6:37:50:b9:3b:e6:56:6f:c9:bf:e8:f4:ff:7e:f7:00:
70:ba:7c:d4:af:c6:2d:62:81:31:71:48:5f:e1:45:4b:6c:08:
30:c8:15:24:17:4b:63:72:93:18:a8:11:3a:37:10:6f:f8:ca:
a1:d1:35:80:99:51:2c:ac:98:0c:e0:26:8b:2f:c7:62:57:5d:
e3:45:79:cd:33:58:74:f3:73:04:5c:9a:cb:68:a6:f6:ad:02:
2f:96:92:8f:55:44:d3:6d:a4:e2:1a:de:0e:b0:fb:58:82:b2:
0b:8d:10:20:71:70:71:68:d1:ec:ad:b1:98:87:3d:61:08:48:
d0:f3:c5:a3:ea:d5:d6:9e:22:f2:85:b2:02:81:b9:84:91:53:
fa:cd:5f:e7:ca:c3:c6:cb:1b:74:3b:87:42:00:5e:af:1b:47:
e7:4d:64:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:15:02 2026 by rpki-client