Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
File: j75VTMOkMzzW2uRAdo6cO4M0S44.mft (raw, json)
Hash identifier: Mc4WvPXEIFRyyH4lL3geUYrC6xiF3e9d5S6cSdqoPPM=
Subject key identifier: A3:E1:23:18:24:B4:49:4C:9E:B3:43:B2:23:5F:FB:B1:6C:B1:B0:AD
Authority key identifier: 8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
Certificate issuer: /CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Certificate serial: 019D99D01898B507E02DF0FEE6614F549634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
Manifest number: 188F
Signing time: Fri 17 Apr 2026 05:00:44 +0000
Manifest this update: Fri 17 Apr 2026 05:00:44 +0000
Manifest next update: Sat 18 Apr 2026 05:00:44 +0000
Files and hashes: 1: j75VTMOkMzzW2uRAdo6cO4M0S44.crl (hash: ACoK0ILfExDw4OOD/ZywLme/za9030aYzqG8oTPabJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:18:98:b5:07:e0:2d:f0:fe:e6:61:4f:54:96:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Validity
Not Before: Apr 17 05:00:44 2026 GMT
Not After : Apr 18 05:00:44 2026 GMT
Subject: CN=a3e1231824b4494c9eb343b2235ffbb16cb1b0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:2b:90:24:00:3d:73:0f:5c:91:f1:ce:33:
fa:79:30:0b:38:b3:87:d5:0e:a1:3d:d2:2b:25:2c:
28:b5:8e:76:b5:59:ee:ca:a5:3b:36:71:6c:eb:99:
8d:14:bb:fb:a0:58:ea:d3:14:a6:07:7d:c2:0d:ed:
af:28:44:37:08:a1:3c:cb:21:50:31:5a:13:14:ee:
97:ff:1c:65:b9:8e:46:15:2c:0f:53:6d:c1:fd:5b:
73:d2:33:32:b3:a9:7f:8e:6a:69:d4:17:96:30:35:
1d:74:31:0a:96:d0:53:b9:41:d7:29:f4:5b:18:43:
3c:78:0b:ae:27:24:7e:99:40:c7:c5:51:9b:71:54:
9c:f3:57:6c:fa:98:c4:09:e4:41:83:2d:fc:f6:6d:
ec:02:a1:a5:a0:66:ed:1d:bf:2d:52:aa:9a:fa:37:
9a:ad:c6:16:1a:e4:87:43:32:90:fa:66:af:98:74:
ee:6f:76:3d:df:09:29:3f:33:85:76:47:e1:f9:f1:
e4:0c:22:b9:6e:2b:8e:8c:dc:45:44:9e:2e:5e:cf:
44:1c:65:79:13:4e:40:53:65:33:aa:30:70:15:9c:
8d:c7:c7:25:4f:6b:10:8f:8d:a0:ee:58:27:e6:dc:
77:39:5c:62:c2:8a:42:a9:53:71:0c:3b:ba:1d:9f:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E1:23:18:24:B4:49:4C:9E:B3:43:B2:23:5F:FB:B1:6C:B1:B0:AD
X509v3 Authority Key Identifier:
keyid:8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6d:9e:ae:93:4d:30:39:e7:fd:ca:e0:53:3c:03:ae:82:0e:
1d:da:1c:b8:eb:a8:b1:d0:78:ec:7f:ea:bb:95:43:bd:17:c9:
a4:64:fc:3c:5e:99:63:24:51:28:90:5a:00:5a:2d:e9:69:9d:
49:9b:f9:46:85:eb:7e:8c:be:74:6c:67:ee:bb:b0:cd:22:77:
a5:74:1b:64:97:b7:b0:90:56:e3:fc:45:f0:83:71:f3:31:9c:
8f:ae:6c:43:47:ee:ae:f0:8c:e7:81:eb:89:91:b2:0d:55:79:
c2:03:ce:38:8b:32:bb:c1:d6:4b:3e:0e:36:ed:ec:60:d4:7d:
f9:42:53:5c:0f:6f:eb:c9:16:ba:21:2e:7c:b9:d9:ba:ac:3b:
9b:be:9b:bb:51:0b:2c:1c:ce:ee:47:a0:37:55:93:40:ee:49:
3d:29:26:18:84:1d:7b:af:56:52:c5:a5:ce:50:dd:ef:fd:e5:
d5:f4:46:59:1d:03:3e:ae:7e:93:58:92:31:7f:87:e7:4e:d6:
cc:8d:36:d9:01:11:bf:57:75:9d:0d:52:a7:b2:5c:88:10:d1:
1c:9c:79:12:f2:e2:d6:e8:f5:bf:ab:c8:ed:0e:31:8f:f7:38:
bf:d9:96:83:3f:1e:5e:91:26:47:fb:f3:c4:27:b3:83:8f:24:
11:69:02:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:44 2026 by rpki-client