Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
File: rpPMjMqB-gDcU-e4B46RtcEbou8.mft (raw, json)
Hash identifier: 8NLGoZo8OHtqMKruOUTUE/mIUq4w4G4DPFbfscl9SwA=
Subject key identifier: F0:12:95:87:F4:EA:22:99:16:B5:F8:0E:B2:C2:F2:DF:4E:1D:15:C8
Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
Certificate issuer: /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Certificate serial: 019D273A926EEDA28D49CC176AD2A6FAE0D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
Manifest number: 138F
Signing time: Wed 25 Mar 2026 23:00:42 +0000
Manifest this update: Wed 25 Mar 2026 23:00:42 +0000
Manifest next update: Thu 26 Mar 2026 23:00:42 +0000
Files and hashes: 1: YinM9FZ7tYvDuQZElbcHdEksbHw.roa (hash: 8pZ2RgiQMW7t4pyoRKcJqD0BNRo6lf7CbatwYv4YjtM=)
2: rpPMjMqB-gDcU-e4B46RtcEbou8.crl (hash: fDkKfXaL1ICPHr4MdMKBdfgGMh4R1AGCs2YAoaWBFrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:92:6e:ed:a2:8d:49:cc:17:6a:d2:a6:fa:e0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Validity
Not Before: Mar 25 23:00:42 2026 GMT
Not After : Mar 26 23:00:42 2026 GMT
Subject: CN=f0129587f4ea229916b5f80eb2c2f2df4e1d15c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fe:87:96:16:3d:90:8c:a8:e4:94:cb:d3:ed:
84:bc:db:cd:a8:46:4e:1a:16:f7:1f:5e:36:0d:51:
76:33:07:d6:91:d0:b0:9e:bf:59:04:7e:19:b7:72:
6a:cf:25:57:16:38:8e:53:c4:62:46:35:9e:c5:f3:
38:39:d3:9b:04:51:b1:00:d6:70:6f:eb:a3:fe:c0:
b6:3e:05:83:93:10:46:ac:ab:51:ea:fe:ff:4b:8b:
7a:01:fc:fa:a8:45:7f:e7:75:e5:8b:20:fe:8a:da:
4b:80:78:cb:ba:bb:f5:1e:c2:93:4e:d7:24:ed:56:
1e:65:5f:0d:c2:8f:01:65:12:d0:71:32:57:7f:73:
10:ef:5e:ef:72:77:ab:97:d0:35:83:53:28:a6:15:
b2:34:0c:26:1f:4f:dc:11:a9:7a:29:8a:ad:e5:ab:
2e:97:03:f1:9e:43:d2:fc:47:7d:13:03:04:89:48:
82:e5:5b:51:30:6d:7f:21:7c:ef:db:3b:3e:9b:5a:
3d:b2:a6:33:8e:39:b0:9b:a7:85:99:dc:2e:0e:56:
5d:ae:81:11:df:ae:2c:01:90:36:ec:92:37:7f:53:
a0:48:30:e5:a5:34:44:bd:b4:8e:d8:14:b0:d4:0e:
6b:98:99:8e:9f:f3:d4:24:40:67:34:3e:1a:f0:c6:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:12:95:87:F4:EA:22:99:16:B5:F8:0E:B2:C2:F2:DF:4E:1D:15:C8
X509v3 Authority Key Identifier:
keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5f:fd:b7:8b:42:00:de:38:59:d1:cf:33:d8:b5:8b:1d:dc:
fe:3a:e3:14:2a:d8:95:85:ea:d7:5e:b0:64:d5:92:52:31:e5:
2c:e7:e7:dc:2e:f8:ad:e2:3f:6d:19:40:38:aa:6c:e5:93:27:
67:45:96:9e:02:43:6f:6b:3a:9b:6d:c9:6d:3a:84:09:16:17:
f4:a8:17:af:a4:12:2e:63:ae:30:4b:d0:8d:91:a7:a8:4f:12:
1f:d4:25:d1:cd:5c:17:ee:dd:3d:51:ce:4b:83:fe:5f:33:51:
19:c1:77:63:2f:04:61:9c:22:07:7f:19:3c:13:60:9e:dc:01:
1b:59:71:d2:34:fc:4a:f2:5c:2f:6c:fc:a7:6d:03:d5:0e:92:
06:e2:4f:24:15:f1:ce:24:64:02:cf:a5:d7:23:28:cb:6e:3d:
2a:43:86:54:6c:df:5e:09:a5:2c:13:1c:f3:99:6f:82:80:ec:
89:80:ef:ba:4d:c9:22:66:bb:05:09:1f:e9:ad:51:86:79:d9:
87:9a:e8:94:f7:fc:76:14:32:25:e7:e5:06:96:99:71:ab:0f:
62:1f:71:41:c2:dc:44:b5:11:69:91:a8:72:01:f8:c6:1b:da:
92:16:e0:84:04:aa:ef:8b:c4:eb:4c:2b:1c:45:69:0c:6d:bf:
7c:15:81:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:29 2026 by rpki-client