Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
File: pQHIn0SCnHLyqVPSorpK4Le1DYo.mft (raw, json)
Hash identifier: jbqREdLDngNOEtFcqBQ4ftyfmLVhVmLsf3ybcaG5LUA=
Subject key identifier: AE:96:53:D4:91:D2:58:95:0C:86:D8:E9:86:96:F2:F2:74:3B:9F:EA
Authority key identifier: A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
Certificate issuer: /CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Certificate serial: 019D25F18A11F119AE5B4478D26E746061B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 17:01:19 +0000
Manifest this update: Wed 25 Mar 2026 17:01:19 +0000
Manifest next update: Thu 26 Mar 2026 17:01:19 +0000
Files and hashes: 1: a1cD9EYlmG13NxBr90ciEvptuWA.roa (hash: v81TOP+ZC2LYKrsgbz1s/Hzy51XQ6ECnroV1P/ElVCU=)
2: pQHIn0SCnHLyqVPSorpK4Le1DYo.crl (hash: WLGeMYssLE2TXuHk6+QmZ1GwuVV1j1RRUe3u7xXPAOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:8a:11:f1:19:ae:5b:44:78:d2:6e:74:60:61:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Validity
Not Before: Mar 25 17:01:19 2026 GMT
Not After : Mar 26 17:01:19 2026 GMT
Subject: CN=ae9653d491d258950c86d8e98696f2f2743b9fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ea:f8:70:f7:ce:46:60:41:df:d4:fa:92:69:
cd:7b:d4:2d:8d:a3:5a:79:cc:09:60:79:3f:42:25:
14:c2:81:1f:a3:b1:9e:f8:18:27:70:71:4e:9d:70:
34:79:3e:46:db:d7:b4:71:6d:bc:70:ac:22:0e:ae:
9b:73:88:fe:e1:1e:74:53:32:c7:04:c1:8a:f2:fc:
4b:e0:38:f2:8e:12:80:d2:34:fd:8e:89:40:64:8f:
97:fe:63:f4:c4:ca:4d:39:33:72:d7:15:c9:17:39:
73:5f:53:0d:59:69:93:d1:5a:c6:75:be:9f:98:13:
16:55:a0:02:38:7c:0f:23:fd:e6:35:ec:76:09:56:
f0:f8:ef:bc:11:ad:6a:44:aa:0d:04:b2:21:62:2d:
17:e8:72:14:fb:6e:56:8b:de:94:78:ac:b6:e0:d8:
5b:80:e9:e7:7b:06:17:1c:ed:13:7d:e7:e6:ca:01:
8d:02:9a:26:cc:43:d6:20:3f:66:9e:e8:11:d5:3e:
5c:f2:34:d7:92:b0:da:a8:56:1d:75:67:52:55:61:
30:7f:7d:cf:0b:07:d6:50:6f:ee:c5:ee:86:1c:03:
0d:57:95:55:7f:22:67:d9:5c:11:88:89:df:19:0e:
ea:0e:f4:50:cd:a2:a0:72:31:64:61:13:b2:91:dc:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:96:53:D4:91:D2:58:95:0C:86:D8:E9:86:96:F2:F2:74:3B:9F:EA
X509v3 Authority Key Identifier:
keyid:A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:72:31:0e:3c:d7:9c:73:08:bf:b7:d7:d7:24:53:3f:c3:39:
8a:2b:76:84:48:a6:4f:25:09:ae:4f:c0:85:72:fc:a0:e2:5a:
d3:0a:61:c2:da:ca:1a:28:ae:4d:30:27:c5:4a:e6:ba:e7:b7:
4c:62:85:c7:bd:f8:24:32:a9:6e:83:82:7e:15:ed:8d:42:fd:
8c:0f:37:7e:e0:64:22:12:73:fc:9b:ee:0b:ff:05:c6:f2:dd:
2d:e5:f4:45:8e:25:0a:ef:10:4f:b7:33:0d:a4:77:48:02:65:
9c:e2:00:28:d2:af:1e:9f:75:50:41:e5:c6:7b:aa:34:50:81:
e2:ac:81:e9:af:26:f5:f0:17:5b:13:22:e9:56:49:27:78:b0:
a7:18:b6:21:15:0e:8a:1f:cc:55:6a:0c:16:76:85:15:7c:c1:
aa:fb:d5:36:25:86:42:6b:dd:61:9b:6e:cd:b4:e3:6e:38:5b:
ff:18:48:e4:04:8c:40:d4:3a:4b:a9:05:82:95:4e:00:bc:6b:
28:3e:ca:49:33:d9:e7:76:c8:5d:c3:60:c6:8f:d9:fa:99:d7:
b3:f7:53:2a:90:10:7f:77:c3:46:c6:95:ca:bd:29:13:16:8b:
54:61:82:26:17:5e:1c:1a:73:d8:9c:40:12:e3:32:20:65:bb:
da:03:95:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:16 2026 by rpki-client