Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5d4ae1-16e8-4fc4-a81a-13fd2ccf8790/1/pQE9aytVPeF23W7IHOe5AyU5y7o.mft
File: pQE9aytVPeF23W7IHOe5AyU5y7o.mft (raw, json)
Hash identifier: Q72LZpwKhy/Fbdd6/HetIL9KhIplGTozVCj4uEK3yCg=
Subject key identifier: 50:0D:EF:31:5C:FE:88:E1:8E:5D:7E:BE:14:39:45:82:4C:5D:3A:59
Authority key identifier: A5:01:3D:6B:2B:55:3D:E1:76:DD:6E:C8:1C:E7:B9:03:25:39:CB:BA
Certificate issuer: /CN=a5013d6b2b553de176dd6ec81ce7b9032539cbba
Certificate serial: 019D2884BD94112A2785321C8B250B687356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQE9aytVPeF23W7IHOe5AyU5y7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5d4ae1-16e8-4fc4-a81a-13fd2ccf8790/1/pQE9aytVPeF23W7IHOe5AyU5y7o.mft
Manifest number: 0201
Signing time: Thu 26 Mar 2026 05:01:21 +0000
Manifest this update: Thu 26 Mar 2026 05:01:21 +0000
Manifest next update: Fri 27 Mar 2026 05:01:21 +0000
Files and hashes: 1: 0JKJErErT3c5yGsDABKWandhVXg.roa (hash: LqnDDTfQ4i9/DFwQQhZWC7hGQfTU/0ibBIuHY+9l1Co=)
2: pQE9aytVPeF23W7IHOe5AyU5y7o.crl (hash: 2ndts3XmC83Om0DbjirR7wInRWzI8q5uszXjhfkibKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5d4ae1-16e8-4fc4-a81a-13fd2ccf8790/1/pQE9aytVPeF23W7IHOe5AyU5y7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5d4ae1-16e8-4fc4-a81a-13fd2ccf8790/1/pQE9aytVPeF23W7IHOe5AyU5y7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQE9aytVPeF23W7IHOe5AyU5y7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:bd:94:11:2a:27:85:32:1c:8b:25:0b:68:73:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5013d6b2b553de176dd6ec81ce7b9032539cbba
Validity
Not Before: Mar 26 05:01:21 2026 GMT
Not After : Mar 27 05:01:21 2026 GMT
Subject: CN=500def315cfe88e18e5d7ebe143945824c5d3a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:5e:20:5d:6a:f5:0e:e8:8a:21:d8:1b:a2:
05:49:47:3b:e8:1e:cb:63:19:0d:b9:17:64:d0:f1:
cb:1b:75:8f:bc:66:b4:a7:86:26:5e:eb:53:85:04:
9d:32:bc:56:db:88:92:f2:d4:74:08:24:d6:74:10:
1b:59:98:01:ac:c7:82:c9:f1:cc:28:fc:d1:ce:cd:
c9:7d:e8:53:a4:1a:3c:92:4a:57:34:62:d5:34:69:
40:61:1a:4f:e5:e7:4b:3d:97:36:f0:44:b5:f4:d3:
5f:9d:df:47:e4:78:31:78:18:90:fd:4b:a7:7b:89:
b6:7f:4c:5f:b5:07:75:26:0e:72:36:8a:40:1f:a1:
a7:cd:25:9f:9e:1c:fc:5b:2e:8a:3a:03:2c:29:28:
11:96:32:e4:89:c1:ee:ff:f1:8c:c0:5d:c4:42:98:
30:5d:b2:7d:2a:2b:6b:3d:89:67:12:37:b5:61:09:
dd:5f:5d:65:e8:ab:bb:af:54:04:99:a1:83:18:7e:
7d:e1:ff:0e:f8:81:a0:33:4b:7d:49:d8:67:87:fe:
55:9a:57:ad:dc:99:1d:e2:c1:f7:98:0b:81:92:4e:
15:44:e0:cc:5a:6c:ee:c4:4d:46:5a:a0:15:93:17:
01:f8:46:ff:79:4a:6b:50:c6:3e:2d:c6:fc:2b:1a:
69:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0D:EF:31:5C:FE:88:E1:8E:5D:7E:BE:14:39:45:82:4C:5D:3A:59
X509v3 Authority Key Identifier:
keyid:A5:01:3D:6B:2B:55:3D:E1:76:DD:6E:C8:1C:E7:B9:03:25:39:CB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQE9aytVPeF23W7IHOe5AyU5y7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5d4ae1-16e8-4fc4-a81a-13fd2ccf8790/1/pQE9aytVPeF23W7IHOe5AyU5y7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5d4ae1-16e8-4fc4-a81a-13fd2ccf8790/1/pQE9aytVPeF23W7IHOe5AyU5y7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3e:84:20:07:ed:8f:0c:3b:c3:9d:08:b6:5c:d2:84:c6:17:
d5:4c:a2:cd:b8:24:fa:3c:56:93:09:e8:a0:e6:e9:68:1a:9b:
e2:f1:76:84:95:58:b1:9c:d3:34:be:ce:87:f7:60:e5:a7:e5:
fd:88:73:29:db:59:eb:0f:3c:59:20:1f:05:fc:50:df:b3:44:
0a:2e:35:b8:03:f6:8c:dd:bb:f7:d7:2d:59:15:ba:50:97:7f:
dd:02:52:6e:f7:30:3e:f2:fd:6a:c5:35:a9:8f:a5:a4:6b:8d:
d7:40:82:95:d3:d9:87:72:39:ff:24:03:39:d5:f2:bf:ca:1b:
1f:de:cc:37:6a:0c:3a:b0:b2:92:94:34:b2:88:18:05:b6:0d:
27:19:41:1d:3b:13:aa:7e:00:b5:76:61:14:e0:00:b3:3f:0d:
4d:f8:ac:82:4e:f7:93:bc:24:29:20:9d:6b:aa:4e:b2:35:be:
d3:a8:d1:9d:fd:57:ae:51:41:e6:2b:2b:71:b2:85:1b:8b:fb:
70:58:6b:18:d5:a7:f2:e1:16:bf:ba:45:13:57:c0:b8:e3:fb:
34:46:e3:7c:21:95:7e:50:12:ff:13:46:0c:21:fb:fe:70:fb:
c3:1c:35:95:95:86:7a:9e:78:2c:51:41:d3:7c:f5:7a:ef:ac:
72:b4:38:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:52 2026 by rpki-client