Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
File: pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft (raw, json)
Hash identifier: rPrKjCUFiAXXxX9LR2zCT9J3OYYr9xg/jahZqaSH2WU=
Subject key identifier: AF:30:21:6D:81:28:C7:A6:F0:DD:20:C4:2E:1A:98:78:11:AD:B1:88
Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
Certificate issuer: /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Certificate serial: 019D25F1A0BF68DDD586DE218ED603783525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 17:01:25 +0000
Manifest this update: Wed 25 Mar 2026 17:01:25 +0000
Manifest next update: Thu 26 Mar 2026 17:01:25 +0000
Files and hashes: 1: C0jIgMcLTHgqOBjTV2Pk_I0UXpE.roa (hash: Vnmpnxzb5d888xy3LtJLua3mvD0ti0N+tPvmlqaYeqw=)
2: pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl (hash: sAeczWijtn9s+omMdjewIw5R9njI61WWUXwH2D6yWO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:a0:bf:68:dd:d5:86:de:21:8e:d6:03:78:35:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Validity
Not Before: Mar 25 17:01:25 2026 GMT
Not After : Mar 26 17:01:25 2026 GMT
Subject: CN=af30216d8128c7a6f0dd20c42e1a987811adb188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b8:4d:60:9b:ea:ee:bc:67:a1:02:0c:9b:12:
d8:35:80:c4:d8:f7:66:6b:c5:54:c9:04:fd:33:0a:
80:e8:0d:16:eb:50:32:12:29:8d:08:4e:5b:df:c4:
37:60:c7:d3:3f:ae:da:fe:b4:fe:9a:da:73:9d:9c:
cb:a1:ea:c9:61:f9:56:d9:80:17:e7:ad:4d:69:9e:
e9:73:ff:eb:97:37:08:4f:96:ea:f6:a9:8a:45:ce:
cf:0e:e5:a6:7e:8b:28:ad:f6:ee:cd:00:0b:77:cb:
1f:59:89:8f:c6:4e:85:bd:33:41:ca:00:7e:e1:fb:
43:7a:0e:ec:ec:65:2d:1b:81:5e:a9:a1:97:8c:3c:
15:0c:45:94:ce:62:10:95:1b:bc:d0:2d:44:57:24:
9d:41:c2:e8:05:55:85:4c:ad:08:97:2c:98:26:8a:
1e:4b:49:ca:dd:2a:13:96:22:71:e5:a1:52:c7:26:
98:e4:b5:7d:20:2f:01:6a:54:82:40:a3:57:68:75:
72:27:64:c0:b6:83:c8:36:fa:c9:e7:f1:3a:a5:ce:
72:07:37:fd:d5:e1:c3:51:52:81:90:6f:e0:c7:f7:
10:44:69:3d:7b:f7:20:24:9d:c5:45:37:7e:3c:18:
43:b6:bb:ce:a7:b2:77:d1:7a:0d:6c:a4:df:a8:34:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:30:21:6D:81:28:C7:A6:F0:DD:20:C4:2E:1A:98:78:11:AD:B1:88
X509v3 Authority Key Identifier:
keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c2:e6:ee:57:f0:14:a8:c9:bf:33:4b:b7:11:92:53:20:ee:
01:63:f3:8f:4f:83:11:ef:20:f0:5e:d8:45:23:cf:13:11:15:
e8:df:cf:a1:35:ca:63:f4:cc:2e:eb:4d:14:73:82:bd:3b:e3:
c7:e9:de:d4:23:8c:5d:8e:40:36:0c:29:06:e9:4b:67:4d:e8:
8c:8c:fa:12:64:63:7d:84:95:d5:2e:10:7d:b5:a1:b4:a3:70:
08:9c:b9:36:72:38:49:bd:25:36:14:1e:13:c0:5e:44:b6:ee:
81:cf:d2:03:e7:ea:0c:2a:9d:5b:23:dc:6b:68:4c:4f:90:20:
e0:0c:4b:e7:d1:7e:d5:13:38:fc:15:df:0f:70:83:cf:51:f6:
65:38:7b:6d:17:6c:fa:96:61:12:4e:9a:31:77:26:47:bd:f5:
9b:0a:ad:fe:43:32:69:b7:3a:a0:91:65:ac:d2:b6:83:67:79:
d1:79:55:46:1f:33:d7:85:bb:4c:06:a9:99:f2:ac:6e:29:19:
30:54:48:fa:3d:ab:c2:9c:ac:1c:dd:65:fd:25:c4:d4:68:7e:
71:46:de:8d:81:27:df:fa:7e:92:0b:94:15:e0:e7:43:c9:38:
6f:2a:c8:bd:85:4c:a2:98:43:1b:38:39:63:47:ec:02:17:9e:
41:1b:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:45 2026 by rpki-client