Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
File: PKap1LWSRrTjNhThpLWRthGOihU.mft (raw, json)
Hash identifier: jlV9G7bLkWBzW7t4n4fyPzjsBx9Fc0tBpnu/5Jh6bkI=
Subject key identifier: 97:35:AD:79:6B:5C:5B:9C:17:1A:7B:9B:6E:4A:7B:72:B5:D7:C2:75
Authority key identifier: 3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
Certificate issuer: /CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Certificate serial: 019D2996F2D701C0D1C3791D0273F8370122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
Manifest number: 142B
Signing time: Thu 26 Mar 2026 10:00:51 +0000
Manifest this update: Thu 26 Mar 2026 10:00:51 +0000
Manifest next update: Fri 27 Mar 2026 10:00:51 +0000
Files and hashes: 1: MoHvjFVhkl8HU6ePjT49rhVwjYg.roa (hash: 2eLzVr3a7Kd+bh+gySuGFEV4/gbUAwjuFtVGSZR/wAk=)
2: PKap1LWSRrTjNhThpLWRthGOihU.crl (hash: qNz09xMvFKhv4lKm/RYZ4tohGHdV8/YJ3y0ulSqU63E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:f2:d7:01:c0:d1:c3:79:1d:02:73:f8:37:01:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Validity
Not Before: Mar 26 10:00:51 2026 GMT
Not After : Mar 27 10:00:51 2026 GMT
Subject: CN=9735ad796b5c5b9c171a7b9b6e4a7b72b5d7c275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9f:11:f6:5f:74:6c:5b:ad:2d:45:93:69:a1:
56:6c:34:ff:10:69:93:7d:65:2c:41:17:7c:89:e9:
3f:ed:1c:3f:01:3d:9c:31:73:8c:77:20:6a:38:81:
2c:79:d9:fd:5a:e6:6e:46:a9:4b:ff:73:a1:e1:7c:
86:f1:78:a9:a2:06:75:83:f5:83:1c:72:b8:a6:76:
09:5c:5b:8b:ef:ff:a9:9c:9f:9b:30:e5:41:0e:23:
df:d1:42:df:4b:97:dc:62:73:14:01:ad:05:d3:d7:
2e:42:b7:28:f6:6e:6c:42:2b:6c:e8:1d:5d:57:2d:
40:db:fd:c7:2b:85:ac:e7:65:e6:b8:53:81:6a:19:
0b:23:ab:07:6e:2b:7f:47:5c:99:b7:27:2e:c7:42:
2b:0d:02:a2:a8:f3:dd:92:96:2b:eb:a6:55:80:83:
ac:90:b0:5c:fe:90:37:87:ea:40:6f:bf:2c:1f:6c:
c6:9e:2b:e2:63:98:6c:12:b0:6f:d0:86:93:b6:1c:
71:e7:c0:14:47:5e:4a:bb:a2:61:75:bd:42:ec:dd:
c3:46:88:57:9d:77:8d:de:71:ca:47:44:40:49:81:
77:cf:af:47:dd:ba:ca:2b:cd:89:23:1a:89:ce:65:
67:7c:46:c5:f8:b9:59:44:09:8b:0d:e4:ad:35:56:
25:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:35:AD:79:6B:5C:5B:9C:17:1A:7B:9B:6E:4A:7B:72:B5:D7:C2:75
X509v3 Authority Key Identifier:
keyid:3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6f:f4:a0:0d:4e:f4:85:9f:68:8e:cb:43:58:37:b8:e0:ba:
80:19:65:c0:5a:c0:05:d8:fd:2f:4f:63:50:9d:92:c4:e9:4a:
14:85:d2:6f:35:af:e5:b5:d6:40:1b:15:ed:bd:a4:e8:25:33:
85:27:54:13:e8:c2:2c:55:1a:8d:5b:9e:6a:84:77:77:3f:6b:
ad:d5:e8:1d:76:53:63:5c:71:57:54:23:22:68:13:f4:cb:ac:
20:08:ba:59:f3:21:40:4a:a1:24:a1:34:4e:5f:db:2e:90:af:
01:3d:e5:35:8c:88:ff:b8:d8:c8:19:21:d1:9e:be:5d:b0:fc:
26:55:62:b8:09:ab:12:07:17:f9:1d:37:9d:19:d9:8f:02:19:
98:bd:e6:0e:cb:7b:ec:c6:ab:fd:fc:c0:da:50:52:86:01:8f:
46:88:0a:72:c1:70:41:6f:6e:4f:8d:c3:cc:d1:5d:af:01:7f:
21:31:84:05:e2:fd:d9:a2:cd:d9:e6:bb:96:5b:bb:e9:c8:ed:
5a:ac:dc:3a:3f:09:02:07:dc:05:da:a0:46:8d:ec:0a:22:37:
dd:62:26:41:7d:aa:94:dd:b5:29:b7:c8:d3:c8:9d:d3:ab:c2:
20:eb:fa:27:4a:ee:f6:c1:c5:dd:9d:8c:65:df:8c:47:dd:91:
3c:c4:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:04 2026 by rpki-client