Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
File: pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json)
Hash identifier: xXQzh/SygrvzWH4tp32bqVyPC/DsFqCRFYXf/qx/a48=
Subject key identifier: 92:DC:86:2C:C9:F2:0A:9A:95:C5:A5:FB:99:13:16:9D:6B:D6:54:7C
Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
Certificate issuer: /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Certificate serial: 019D27A8E6FA2D767B7C798505EF57933ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
Manifest number: 0F5D
Signing time: Thu 26 Mar 2026 01:01:13 +0000
Manifest this update: Thu 26 Mar 2026 01:01:13 +0000
Manifest next update: Fri 27 Mar 2026 01:01:13 +0000
Files and hashes: 1: 6qcrdhxsXntUBfmqIofqw1-iJPY.roa (hash: GiOc4UHObExccKeqBRzv/DUsn92kIZYjDxqeAxX9Y0Q=)
2: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: +XjfjZ5eBHW1/aIdZ30qnCpwqcXiK37rcxxnAt6uNnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e6:fa:2d:76:7b:7c:79:85:05:ef:57:93:3e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Validity
Not Before: Mar 26 01:01:13 2026 GMT
Not After : Mar 27 01:01:13 2026 GMT
Subject: CN=92dc862cc9f20a9a95c5a5fb9913169d6bd6547c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:cb:b3:97:0e:2d:e9:f2:df:4c:5f:30:6b:
7d:0c:4f:bb:41:db:65:92:9d:61:be:99:5b:05:3a:
5f:a6:0a:dd:3b:7e:19:53:48:47:e5:2c:14:60:7f:
9b:a1:d6:87:e5:23:b8:a1:b1:47:c8:33:da:7e:6a:
5b:c1:04:41:51:57:75:6a:a1:41:f0:72:79:89:e7:
1b:d1:96:c5:c0:13:0b:53:d9:ca:05:80:a0:16:9d:
44:bd:29:ef:ee:21:f4:bd:00:9a:26:2b:53:32:7b:
32:d5:d2:62:80:3b:20:af:f8:c1:07:2e:24:8c:5b:
ad:3d:b2:1c:29:70:82:d9:49:a1:69:0a:2a:c3:f8:
eb:cd:7c:0a:8b:b1:ca:55:36:a3:f9:88:b5:df:1d:
71:84:12:2b:95:17:9e:de:e9:f3:26:0a:77:b1:c1:
7f:e5:90:65:c7:39:86:89:f6:04:ef:8e:64:d8:d2:
b4:d4:ce:2d:fa:2f:6c:df:e2:ad:aa:8c:ab:a2:02:
66:5a:8e:3e:c9:83:c3:f4:a8:d0:52:7a:4c:08:63:
52:44:8b:31:fe:3e:d2:ce:3e:78:6b:0d:b9:df:6f:
07:7c:88:a7:98:ec:ac:f9:87:9d:63:8f:cd:8c:ab:
11:4b:e1:d2:69:36:55:5d:66:06:68:77:cf:c2:9f:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DC:86:2C:C9:F2:0A:9A:95:C5:A5:FB:99:13:16:9D:6B:D6:54:7C
X509v3 Authority Key Identifier:
keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:92:28:c2:2d:7c:7b:dc:b1:bf:ee:31:1d:e0:81:99:1b:c0:
29:db:8f:4c:74:c0:0b:8a:dd:af:b3:fe:0a:48:75:c5:3d:d4:
f0:39:25:36:8c:f4:e5:97:94:ac:1f:79:19:55:41:ab:30:1c:
84:63:d3:80:db:c7:21:c8:3c:fd:d8:5d:5e:b7:80:c6:2a:94:
10:e2:84:07:23:f5:40:bc:03:dc:08:c2:10:c5:1b:15:a4:84:
aa:02:47:79:92:51:87:99:43:d5:72:e6:d9:97:17:c2:83:2a:
48:8d:1f:cb:00:11:d9:5f:88:78:eb:85:3e:b4:12:20:55:ea:
fb:b8:dc:24:73:34:ae:46:d5:7c:50:a8:a3:89:8c:89:01:f6:
c5:4a:ba:b3:8a:af:a7:eb:6e:02:0c:0e:9d:69:b7:06:e6:4e:
e4:08:c5:83:fe:58:ec:9f:01:77:2c:b6:7a:d2:0f:1d:2c:b2:
c9:7f:9a:14:ae:9d:a0:6b:59:af:f7:fa:3f:32:40:a5:86:6e:
38:55:89:88:92:1c:81:c1:32:67:11:de:51:4c:cc:96:9f:8c:
3a:3d:d7:f7:43:99:c7:20:15:56:5b:ea:d5:52:13:e3:7f:9d:
0e:fa:85:f7:cf:fc:59:79:6a:25:19:5c:a2:0e:b8:88:91:17:
10:36:db:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:18 2026 by rpki-client