Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
File: pRA1bcClIYlc5h-FSV4G2vehKzs.mft (raw, json)
Hash identifier: mOgXjS3jYM7B/m+FpWWLJZKENBePs9VLHB6uCGOXv3I=
Subject key identifier: FD:C5:00:27:31:FB:60:BA:DD:43:93:D5:DA:D6:74:36:E6:84:6B:DA
Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
Certificate issuer: /CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Certificate serial: 019D2960AE458CB5FDAF76874FD5DF841F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:01:35 +0000
Manifest this update: Thu 26 Mar 2026 09:01:35 +0000
Manifest next update: Fri 27 Mar 2026 09:01:35 +0000
Files and hashes: 1: A9Bi8Cx9s5eBAL60l2qMt4h9sE0.roa (hash: AC4LzrIhV3YAzRN5mHN75qp4tUeiM+KW6TE9bEVKoxI=)
2: pRA1bcClIYlc5h-FSV4G2vehKzs.crl (hash: bzNgzDPr/wl9pIt9mbQG7hoo6A3ec5uRYX0POPg5POE=)
3: vdQ8Xor9Vehtiv0Bg_9ca6wd1w8.roa (hash: s2e/NrFq+wqQKph1EQxPVpjpr6FbDPVVUYvD7GykSEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:ae:45:8c:b5:fd:af:76:87:4f:d5:df:84:1f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Validity
Not Before: Mar 26 09:01:35 2026 GMT
Not After : Mar 27 09:01:35 2026 GMT
Subject: CN=fdc5002731fb60badd4393d5dad67436e6846bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:a6:43:43:b9:59:94:c7:e6:28:7b:8d:fe:
ec:c5:09:a2:27:52:db:6b:ad:26:35:f7:69:44:ca:
3e:e8:d9:ef:5c:cb:00:a0:fc:e1:9b:c9:af:ca:cb:
c0:1a:bb:61:8d:69:53:a4:fa:0c:b9:22:86:37:08:
da:4d:bb:9e:ee:80:ff:3a:b4:4f:fc:0c:f3:21:20:
15:77:e3:5f:25:56:a6:8d:e9:fe:b0:7c:1b:fc:c9:
31:d1:aa:a6:50:d6:3f:88:34:d3:ac:2b:2f:94:a6:
62:7b:24:a7:5b:af:30:80:ea:b2:ea:b1:33:78:93:
72:29:27:ca:5a:d8:bf:ad:4c:28:05:db:d0:97:8a:
2d:91:8e:5f:bb:12:03:89:d4:fb:5a:db:58:a6:0a:
9b:39:ed:ad:29:75:95:bb:ff:4e:84:8a:23:d7:a8:
a2:b7:d2:2a:e4:e2:58:92:01:a1:45:cd:05:00:b5:
74:8b:cf:b4:02:61:24:6d:c4:8a:43:f6:6a:24:db:
02:e2:56:50:d7:40:69:2d:0a:f5:c6:8c:36:0a:08:
1a:d0:2a:15:e6:0f:5e:92:ea:2f:69:eb:20:aa:70:
15:0a:4d:91:99:70:79:02:37:11:64:9b:82:6b:b0:
e6:98:65:14:d4:c9:47:0d:94:53:6e:de:cd:a3:7f:
d0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C5:00:27:31:FB:60:BA:DD:43:93:D5:DA:D6:74:36:E6:84:6B:DA
X509v3 Authority Key Identifier:
keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:36:ef:6e:2b:ce:1d:e8:8e:14:3b:de:0e:7f:a2:e8:6e:4c:
15:34:98:c4:b4:b8:14:00:12:0d:43:b9:c4:81:59:51:e3:db:
94:8e:56:36:6e:5e:2d:55:81:99:1c:bb:9a:ab:b2:31:fb:7d:
62:69:fb:fd:0f:b8:85:73:a0:eb:f1:d4:89:db:ee:ed:69:35:
99:73:a8:09:18:93:b1:97:75:4b:5d:a3:b5:6e:e8:6a:10:32:
ba:a0:b7:80:67:26:4d:5e:68:48:af:e0:74:02:5a:58:0d:6a:
6a:7f:3e:48:05:93:76:52:fa:20:84:ad:93:5f:f9:d4:30:c7:
6b:ba:84:31:54:8e:97:7b:af:81:69:83:fd:79:52:86:63:b8:
25:45:7c:d8:24:86:0e:ad:31:dc:89:8d:48:4c:b5:51:39:84:
0f:ff:0f:4c:62:b9:3c:8d:dd:c9:3c:c2:9a:dd:e6:01:05:54:
e0:30:52:3b:ed:44:6e:c7:45:02:94:7c:10:3f:0d:f8:38:74:
0a:04:e0:2e:8e:93:4c:ac:bc:01:27:f2:cf:6b:bf:8b:19:c0:
cf:e9:55:c6:ee:8d:ed:18:19:b6:9f:7e:92:39:6f:4e:fd:87:
39:9c:c3:ef:55:9c:b3:91:81:a0:e1:ba:91:52:d4:c1:2c:20:
66:bf:26:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:51:33 2026 by rpki-client