Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: ByRqk6nw4ZYk8MlPntYvAEI9Jhi/4iGLRb5FAgSKJs4=
Subject key identifier: 91:52:C4:19:5C:81:2A:F0:8B:92:DD:DA:DF:10:5B:91:39:D2:76:28
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 019E1E6C3EFF9CF63380C0AC24082C32669C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 0FA3
Signing time: Tue 12 May 2026 23:01:10 +0000
Manifest this update: Tue 12 May 2026 23:01:10 +0000
Manifest next update: Wed 13 May 2026 23:01:10 +0000
Files and hashes: 1: 5t5_5MqWJNollBMPqdFua97XfMM.roa (hash: KTz9ZppQRmMMx9XPLOR36od8YyLkBIE5elG5FeL6i2Y=)
2: FSHrqYhJli1tSVyjlj_58RREeXk.roa (hash: uSCHyOKTAFU7tgMnLJvTfArI/447X68lLDwgFscWtJQ=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: p5DxZqQeXfjUXbBmlwFQFxa8dETCic5L31oI2+aDfSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:3e:ff:9c:f6:33:80:c0:ac:24:08:2c:32:66:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: May 12 23:01:10 2026 GMT
Not After : May 13 23:01:10 2026 GMT
Subject: CN=9152c4195c812af08b92dddadf105b9139d27628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:50:4b:b2:0f:9d:54:9f:a8:f5:67:96:c5:62:
97:a8:e9:99:b3:5a:05:32:f3:c6:c5:1d:01:11:3e:
a2:dd:61:ab:9e:43:57:8c:88:f5:64:77:ed:5e:94:
0a:c9:1e:82:8c:da:08:1a:3b:55:52:90:a4:60:d5:
0d:3e:bc:80:10:fd:b4:5d:d3:91:b9:65:63:b4:ca:
28:aa:40:ff:9c:fb:20:12:50:b0:00:b0:fc:ca:50:
e5:e8:57:0b:be:08:1d:ff:34:5f:3d:ef:f8:e5:5a:
7c:3d:5c:4c:32:b1:9c:73:fd:71:a6:a1:d4:ab:f1:
74:15:76:fc:66:48:07:cc:1d:4c:47:3f:d0:e0:cc:
a6:8c:68:a6:6c:12:04:01:a9:4b:78:c5:ce:9a:fe:
56:b7:09:79:84:b6:22:c1:c8:d0:c5:35:03:9a:29:
a5:4e:6a:e6:89:dd:e1:8d:a2:ee:44:fb:1c:07:7f:
da:13:ef:94:b6:42:cf:5a:cc:04:8d:45:97:4f:b8:
19:99:dd:60:30:7e:f3:37:f6:37:b1:76:8a:84:52:
d9:22:c6:66:a0:37:3d:6c:13:ea:b4:84:5f:9d:ba:
32:c6:1f:1b:89:31:fe:76:b9:d3:73:57:d7:b2:06:
31:c1:58:ee:d1:8d:61:84:cb:44:79:ab:d8:e0:82:
cf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:52:C4:19:5C:81:2A:F0:8B:92:DD:DA:DF:10:5B:91:39:D2:76:28
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f1:b9:3f:28:a0:01:d4:be:b1:ba:ec:d6:2a:c0:1c:a3:08:
e7:57:27:2b:92:0e:bb:e4:66:4e:68:d9:8e:1a:27:e5:a4:8e:
5e:1c:80:52:20:58:55:25:81:7f:9f:38:b7:7b:2d:1e:5e:56:
50:47:1e:84:ae:63:2f:cb:23:68:4c:1e:46:d9:d2:d6:e2:a3:
19:0d:c7:52:19:fb:88:84:19:2f:9f:ff:af:08:8b:75:b7:e7:
cf:1b:76:53:4f:f3:4e:f6:eb:fd:76:e6:e6:89:4e:14:dc:37:
8d:85:9f:15:ee:8e:d8:92:88:b3:b4:e3:cb:05:f0:c1:78:ec:
66:e3:10:fa:64:79:91:db:b1:1a:2e:d3:87:08:84:80:96:8c:
40:39:03:98:75:85:72:dc:8d:63:f3:ed:56:ab:da:81:83:7b:
f0:aa:2f:0c:3c:37:e5:ca:29:b7:5a:ce:10:8d:74:94:de:f2:
4d:90:7d:45:b0:5b:aa:77:2c:bf:33:fe:9c:a9:a2:94:bd:ec:
b7:83:3b:ff:c1:e2:6d:33:70:87:c2:68:aa:95:c1:e3:61:85:
1f:08:15:de:5d:e0:4c:ff:22:0f:71:47:8b:e7:be:21:21:50:
4d:60:4a:77:d1:85:c6:3a:27:fe:2c:f8:8f:d0:99:05:5b:af:
dd:fd:5e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:19 2026 by rpki-client