Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json)
Hash identifier: rBOzFaGb8jWKbfpo6t+4FJOGZf58p7n4XBo5MKHyVuo=
Subject key identifier: 7A:6A:09:82:21:22:36:3F:A7:A2:18:0A:2E:B9:F1:88:5E:DB:18:62
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 019D2703A62BA33E9D1DA89F25C4570AB8AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 22:00:43 +0000
Manifest this update: Wed 25 Mar 2026 22:00:43 +0000
Manifest next update: Thu 26 Mar 2026 22:00:43 +0000
Files and hashes: 1: X50-n9cVU2Zq24SDbQ05Dv_q5v0.roa (hash: S7zmoSUIsI4P7LLg9xapiyTzbeO1NkyzmEJQWzWpHOE=)
2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: anfbTtiKqEsFaA2uUL9kPMOZQpiKNMzJc4YzctoV/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a6:2b:a3:3e:9d:1d:a8:9f:25:c4:57:0a:b8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Mar 25 22:00:43 2026 GMT
Not After : Mar 26 22:00:43 2026 GMT
Subject: CN=7a6a09822122363fa7a2180a2eb9f1885edb1862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:ae:b9:78:ba:61:05:47:03:cf:96:a5:7c:
12:ce:e9:64:42:25:14:59:22:b3:4d:8a:4f:fd:3d:
22:b6:83:c4:9c:f9:b4:22:72:7e:dd:60:6f:32:4e:
db:2b:1e:1e:4b:1d:33:11:1b:fe:16:40:bc:c3:55:
ba:e3:05:44:31:a5:f4:97:f6:94:e7:b2:e5:08:ee:
82:dc:7c:2c:c5:e3:b2:4e:9a:d2:8a:87:95:30:87:
df:eb:ab:d4:ee:97:74:19:be:59:7f:fa:8f:50:e6:
a2:c9:c0:51:b4:bb:a8:01:42:3a:30:22:ba:82:f4:
1c:02:44:76:07:fd:2c:b4:46:ce:60:05:d2:eb:be:
81:6c:a9:4b:c6:db:ef:59:03:ca:7b:05:69:3a:a4:
4f:22:25:58:dc:df:b9:c8:8d:0a:30:42:aa:28:ce:
c8:bd:a0:b5:9b:db:69:c4:23:83:a7:fa:cf:1d:b5:
04:d9:3d:b2:11:32:18:70:b8:4c:58:03:a5:04:c6:
ae:a6:05:1b:5f:42:87:bf:3b:bb:fa:bf:0d:45:cd:
19:da:e6:e7:ed:62:86:4f:5b:7d:2d:da:4f:f4:04:
71:85:51:75:15:3f:82:c1:fb:b3:c7:f1:f7:68:99:
6d:6f:52:ce:b4:cb:ce:dc:a8:54:bc:84:cb:cb:17:
54:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6A:09:82:21:22:36:3F:A7:A2:18:0A:2E:B9:F1:88:5E:DB:18:62
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2f:9a:1c:07:f3:5f:0b:58:0a:16:66:9d:40:df:a9:e3:e3:
8b:ce:45:ed:97:d1:fa:44:96:b4:e2:5e:2b:7f:fd:d6:5f:b8:
d7:6b:ac:41:1d:50:59:96:9b:98:e3:5e:8f:19:fa:54:c4:66:
dc:40:00:65:98:a5:cd:e2:4b:23:79:69:27:ac:60:fb:fb:65:
b7:3d:3c:f5:49:61:e1:12:9d:88:67:68:6c:61:96:e5:9d:59:
9e:69:c3:3e:a5:46:e5:0c:0c:3b:f5:f8:47:a4:94:6c:24:0d:
00:dd:06:7a:59:21:0b:bc:4e:40:01:04:d1:31:dc:ad:3a:4e:
26:db:7c:e2:ab:88:05:5f:a1:0c:ec:76:bd:dd:18:76:20:89:
88:96:b2:e8:75:6e:2e:a9:34:b7:d9:31:03:66:a8:3a:2b:e2:
d2:80:52:ad:2d:f6:2a:9d:80:05:88:28:13:dd:40:f8:8e:25:
63:62:96:d9:87:f8:4b:84:86:ef:f6:5e:41:d4:ba:24:16:b8:
0c:55:0a:e2:b9:6d:21:5a:9d:2d:13:d5:50:91:a3:42:00:31:
27:c5:76:84:5f:45:cc:64:dc:c6:0f:0d:a5:be:47:61:09:18:
42:19:f9:24:5f:f1:97:98:27:7b:b7:61:2d:ad:b6:83:96:46:
8c:c9:ac:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:25 2026 by rpki-client