Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json)
Hash identifier: 4bEr43WV+m1wRIRQ5mFsKwhiJGD0SsFOeAnfgYLQPV4=
Subject key identifier: 96:20:19:49:60:D3:A5:1B:FC:85:F7:5C:B2:1F:B2:AF:CA:D2:D9:AE
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 019D2A048A6E140B283E628FE77CF02BA498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 12:00:33 +0000
Manifest this update: Thu 26 Mar 2026 12:00:33 +0000
Manifest next update: Fri 27 Mar 2026 12:00:33 +0000
Files and hashes: 1: 4g2KoICvRhAlF5rUzbxNV7SMp8U.roa (hash: Ctanikf8U9Sdy0xnpwf0T9RlsG+za8SDalPfgQYX/Y4=)
2: Ff-FE_841YKkM3pTxc9IBAIW24Y.roa (hash: DJoJ2bsSXRYjcv8lRsV6GjC25VZGryCw4Oz9ykQkgwc=)
3: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: oUmfsZJc3S//kGEfw8Kdz+vgC8xOEPBzd/yfY4bpgNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:8a:6e:14:0b:28:3e:62:8f:e7:7c:f0:2b:a4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: Mar 26 12:00:33 2026 GMT
Not After : Mar 27 12:00:33 2026 GMT
Subject: CN=9620194960d3a51bfc85f75cb21fb2afcad2d9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ae:6a:11:a7:df:8f:e1:09:75:1a:0e:61:2b:
e5:7f:c7:74:84:3f:99:d8:17:9a:6d:29:2d:c4:a9:
83:68:7b:39:8c:a8:85:18:a6:8e:5d:83:43:c6:e2:
da:dc:99:61:10:0a:f0:bf:a3:81:6b:6b:f7:82:84:
fb:78:ec:f5:80:1d:34:15:c8:ea:3d:4f:45:f7:4d:
e2:32:05:be:1b:ff:a0:f8:f5:33:ce:9a:6e:63:77:
56:67:dd:c4:09:63:94:72:94:09:52:ca:50:7d:af:
31:47:95:21:33:f4:a0:da:04:2a:16:42:35:ad:f1:
41:57:04:2d:88:0a:f8:c4:62:dd:23:74:da:53:5d:
bd:55:c8:4e:b8:8a:d6:f1:1f:b2:b8:49:e9:f1:6e:
cd:9b:89:63:fa:fc:7e:00:5d:66:df:3d:ea:bd:21:
20:fe:2a:ee:3f:15:82:26:b5:0a:f7:e3:a6:b8:e4:
4d:99:64:3f:6e:ef:ac:42:ed:f5:73:27:70:2e:66:
ca:d0:7d:2a:9e:f9:67:a0:7e:5f:00:48:73:58:c1:
9d:ac:9d:87:e0:ae:61:c6:eb:ce:83:a6:2b:63:bd:
c5:1f:4a:72:85:07:ec:46:2e:76:bd:fb:2a:ca:2d:
6a:2a:5a:96:f5:f9:d3:13:74:a0:63:07:e5:73:42:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:20:19:49:60:D3:A5:1B:FC:85:F7:5C:B2:1F:B2:AF:CA:D2:D9:AE
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:43:f2:34:0c:d7:4d:4c:15:74:79:50:fc:97:03:2d:a8:56:
c9:5d:60:33:0b:b3:e0:f7:75:69:1c:95:e0:bb:ec:8b:37:7e:
89:bc:81:31:d3:1d:62:ac:28:8e:d3:16:23:4f:d5:af:1c:e4:
4b:2e:d9:db:e4:86:11:a9:f5:ce:9e:06:eb:7f:a5:88:13:fa:
4b:fe:66:ec:c6:b5:a6:f5:d8:8e:86:e5:fb:35:ef:fd:ba:21:
ee:15:df:f4:8a:b4:4f:dd:55:71:c4:3d:b1:6f:99:a2:23:e9:
e8:b2:34:91:5b:c0:1f:4a:c8:e0:11:32:6a:b6:42:d1:e4:21:
69:d6:0c:27:ff:5c:92:7d:1d:6d:fd:6e:3b:e7:cc:cd:38:88:
7c:52:f2:7f:5b:48:9f:38:2a:cd:29:df:16:ff:80:da:8b:8e:
e0:3b:40:c8:ca:f3:de:ed:fc:b3:80:1d:81:b3:89:95:3c:3e:
87:14:d1:71:f5:fd:67:52:6b:af:1c:26:21:57:52:0d:e8:93:
53:37:cc:68:51:9d:38:0e:70:52:92:9a:c0:3c:cb:b5:be:b1:
06:93:df:bd:50:dc:e6:bf:3e:38:a9:3e:bb:71:f8:4f:e0:21:
72:d3:de:72:43:5a:19:7c:40:e9:49:ef:b8:4c:48:a9:a1:0f:
b0:0a:be:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:00:54 2026 by rpki-client