Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier: wIXBXRfBsUWMfjuwhBzGs6tv0mmmx4VsCFgcMNPB0h0=
Subject key identifier: A1:AC:C8:47:6D:C0:B0:3C:2A:E4:F7:35:CD:BA:E6:B2:B7:12:9C:13
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 019D28BB5B0BD8FBCAE32281C02477F02567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:01:00 +0000
Manifest this update: Thu 26 Mar 2026 06:01:00 +0000
Manifest next update: Fri 27 Mar 2026 06:01:00 +0000
Files and hashes: 1: 0-4nqiPOGteiK9VP6x_sLK2mkJo.roa (hash: D/G/NyWtohGa+4A1yzgQpS5Fkg8In30pL4ywg6qyHJ4=)
2: Z3v-SAm3fw6NnIHtD6dU5VOCOP4.roa (hash: v7j7LyN9QjPmbnKNeQyhNxvVR/InX3nLJAUhm3ToZRw=)
3: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: /vjtKXFibrWye0l+7yGbKGrhBqhIdBBhv7YwIyFObJ8=)
4: rHP4WUAqcSQvgCZtg8_htfcNuko.roa (hash: Mb29TkYRCVH9g/5FuCaCpqq3Nrrav/iSJCN1hGSFHTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:5b:0b:d8:fb:ca:e3:22:81:c0:24:77:f0:25:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Mar 26 06:01:00 2026 GMT
Not After : Mar 27 06:01:00 2026 GMT
Subject: CN=a1acc8476dc0b03c2ae4f735cdbae6b2b7129c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c0:a3:d3:c6:b3:c2:78:59:e9:b8:70:30:1c:
6f:3a:e0:31:a7:77:2b:54:1c:93:a0:e7:07:09:c4:
7d:53:ee:5d:d8:0f:0d:97:cf:53:62:b5:b5:c2:aa:
b3:70:95:b0:b4:b8:c3:40:ac:ae:07:b7:c8:fc:79:
b9:79:74:a7:e3:81:23:4b:02:d2:2d:88:83:ff:db:
9d:39:9f:92:fd:1b:18:0b:ce:d9:f9:3f:47:c1:82:
d9:fb:8e:33:22:45:8a:16:ea:d7:f9:3b:24:d3:75:
0a:8f:75:3f:1b:86:48:5c:9a:5b:5c:e8:9b:4c:80:
30:3a:f0:0b:5e:c9:c7:da:c1:64:4e:fb:49:1b:21:
fc:ea:d8:0a:19:94:d1:a0:40:83:1e:27:16:8a:21:
f0:0f:0c:57:c3:32:53:8a:04:d2:01:56:0d:a8:8a:
77:5f:fa:62:1b:23:c4:7d:b3:12:96:48:7f:ef:c0:
c2:be:90:64:04:dc:01:09:ee:c3:1c:0c:40:17:0e:
a1:e4:82:1b:b0:18:d8:a8:75:85:ce:d5:6c:ab:b3:
d7:60:1d:aa:a7:eb:47:01:b1:47:8f:e8:99:64:34:
1f:a9:aa:f4:7f:cd:76:55:e4:e4:12:1e:77:e7:46:
0e:61:9c:59:63:da:d7:7e:55:0f:3a:c6:95:47:50:
9e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AC:C8:47:6D:C0:B0:3C:2A:E4:F7:35:CD:BA:E6:B2:B7:12:9C:13
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:32:4e:95:af:58:ad:23:a5:65:3d:91:e2:1e:83:9e:a1:d4:
e9:f8:85:9e:d7:ad:25:6b:b0:f8:d1:52:7b:dc:3a:ec:fb:1d:
c5:c3:b7:c1:3d:22:26:19:68:5f:e7:78:57:a6:c2:8c:fe:b3:
66:e8:2a:c5:48:96:ab:fd:c2:88:ef:75:ed:75:04:20:7b:a8:
f2:61:2c:15:eb:af:fa:b8:c3:58:86:79:fe:05:8e:1d:a5:51:
d0:3a:97:aa:d7:01:26:b3:eb:0f:f6:b1:b9:e6:32:d6:a2:66:
c9:d4:31:5b:19:43:94:1c:c4:82:81:ac:49:60:d9:e8:60:4c:
10:de:3f:53:7d:a3:ee:0e:b6:ad:17:75:43:e1:d9:e5:ec:b2:
cc:65:04:b7:45:b9:7b:4d:a4:25:2e:70:62:ad:86:0a:49:81:
22:a8:03:3b:ff:b1:eb:90:9d:fa:1e:e3:82:2c:f7:75:cc:7b:
bf:f4:c6:c9:8d:38:22:81:97:6c:49:76:99:7d:24:35:16:7d:
74:2b:34:08:f5:e5:ea:c8:bc:bc:8c:7d:80:5f:95:05:fd:1c:
4d:bb:c1:d4:54:4b:c3:d8:9a:05:19:fe:e5:1e:47:8d:83:d7:
f2:d9:10:3e:58:19:8f:00:38:ab:59:5a:15:31:9e:f3:b6:e6:
4c:01:92:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:47:58 2026 by rpki-client