Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
File: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json)
Hash identifier: RUWTMTSWy6t+5T9bnVG50PqU5DU67LqynQYB6qnc4Ok=
Subject key identifier: 39:43:AF:7F:5D:AF:17:96:EF:93:3A:6A:E2:2F:A9:73:7E:B3:0A:F8
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial: 019D273A98FB043B88AE554562CF94FAADC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
Manifest number: 0B69
Signing time: Wed 25 Mar 2026 23:00:44 +0000
Manifest this update: Wed 25 Mar 2026 23:00:44 +0000
Manifest next update: Thu 26 Mar 2026 23:00:44 +0000
Files and hashes: 1: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: 3r3c8bzcgmGRFH8kS+xcqSziSlzuU94uIAXBjHaBQC8=)
2: wqM2HbHUAexqGRCIytvhP-Jzu4U.roa (hash: HC7KYLDVfK5o/bx0neagw4IbqR4rFwFVqDH+H7VDweY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:98:fb:04:3b:88:ae:55:45:62:cf:94:fa:ad:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Validity
Not Before: Mar 25 23:00:44 2026 GMT
Not After : Mar 26 23:00:44 2026 GMT
Subject: CN=3943af7f5daf1796ef933a6ae22fa9737eb30af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:4a:3e:a0:a4:28:3d:ed:8c:f9:81:c1:5e:
9e:c4:aa:fa:40:bd:ca:fd:7f:53:2f:0b:82:45:1a:
50:9a:e0:8a:05:99:5c:da:1c:f5:59:ba:21:1b:fb:
13:11:2c:da:a7:24:a8:a8:41:04:c2:db:f6:57:2d:
37:0d:61:a2:be:33:89:27:c2:b7:a2:a5:51:7d:a0:
28:63:3a:5a:80:09:26:42:af:9b:47:af:57:d8:53:
e8:18:42:49:06:ab:b9:9c:22:07:71:68:82:bd:b4:
93:00:25:0c:6b:f9:b1:4b:a6:46:20:2e:a7:46:92:
7f:a7:ca:5d:fe:2d:06:67:fe:76:9e:b0:27:67:4c:
90:a6:1e:c2:b3:ec:94:19:4c:d9:59:ff:be:1c:bf:
f3:d1:6f:02:2f:c0:b4:f4:7c:70:25:c3:e0:4f:c1:
31:a6:f8:d8:a5:29:ee:68:bc:ce:18:96:2f:3e:03:
a6:0b:7d:1e:2b:3d:2e:2e:4a:72:0b:f6:37:67:6a:
94:59:ec:3d:06:56:7a:55:6d:98:4d:f5:fb:44:88:
50:7f:07:53:2f:4f:a0:69:a0:2b:bb:b0:3e:71:cb:
44:e4:24:1a:4c:e3:d3:b3:d1:79:82:1b:59:68:20:
25:1b:4c:45:91:2c:cf:6b:cd:ac:1a:a9:c7:6f:19:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:43:AF:7F:5D:AF:17:96:EF:93:3A:6A:E2:2F:A9:73:7E:B3:0A:F8
X509v3 Authority Key Identifier:
keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d7:f8:4b:42:ca:77:00:0f:55:96:05:13:f7:a5:13:6d:2a:
aa:7a:8f:38:34:b8:dc:76:38:ae:50:b6:23:38:5f:dd:43:23:
ca:aa:63:ab:a1:83:a2:89:96:8d:ab:77:32:93:d7:f4:56:2f:
d0:10:21:2f:33:1f:d8:16:4e:98:26:19:55:4e:a4:7f:da:a0:
e6:d2:fc:40:2a:bb:33:c5:a4:69:7c:f7:b6:bd:86:6a:c8:95:
22:3c:67:d8:35:47:61:05:38:21:84:e8:32:35:ce:17:54:47:
9f:74:3f:2f:2a:6d:7f:19:92:d2:cf:9b:96:9e:c2:45:3d:a7:
1e:76:e5:56:09:b1:f5:1e:db:52:5a:0c:02:44:06:33:03:6d:
73:fa:aa:aa:29:25:6f:90:a7:10:2d:02:a2:a0:c6:67:41:e1:
d7:ad:5c:a7:d3:45:71:49:d0:72:51:ab:7a:76:03:b0:61:46:
c8:89:76:0d:44:dc:c8:64:a4:e0:f4:73:c0:f9:33:d5:86:7d:
d3:bd:bd:37:6c:3d:d4:04:07:cf:a8:62:53:4d:b2:14:6b:3e:
f7:79:b7:52:36:68:0d:32:61:6f:80:a9:42:d3:f2:e7:6b:8e:
02:ce:48:ce:8a:9a:04:15:32:a0:80:94:41:36:67:b5:81:24:
37:3e:fc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:04:23 2026 by rpki-client