Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
File: PidqxRoTJAHbTNdB2GalRiKg0Vw.mft (raw, json)
Hash identifier: Wr5S2mQKJ2h5wEprVGIPHrhDJzbiq2rrQqPNXD4+1XU=
Subject key identifier: 50:17:A7:51:BC:B3:16:CD:2F:43:25:90:88:D0:24:91:63:39:F3:37
Authority key identifier: 3E:27:6A:C5:1A:13:24:01:DB:4C:D7:41:D8:66:A5:46:22:A0:D1:5C
Certificate issuer: /CN=3e276ac51a132401db4cd741d866a54622a0d15c
Certificate serial: 019D288480B62FA9F7C81729A17490F20B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
Manifest number: 15AA
Signing time: Thu 26 Mar 2026 05:01:05 +0000
Manifest this update: Thu 26 Mar 2026 05:01:05 +0000
Manifest next update: Fri 27 Mar 2026 05:01:05 +0000
Files and hashes: 1: PidqxRoTJAHbTNdB2GalRiKg0Vw.crl (hash: yVOLxRt/w4/w+b7SyHeqm4Ous9FByeE9Pup1fwuVA8U=)
2: vTL1N_H41HNiNtowQy-zm9gl9aY.roa (hash: JtmrUvutZdfTDVqTi1wCPoFHIXdZTWrvXh0P19O7xN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:80:b6:2f:a9:f7:c8:17:29:a1:74:90:f2:0b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e276ac51a132401db4cd741d866a54622a0d15c
Validity
Not Before: Mar 26 05:01:05 2026 GMT
Not After : Mar 27 05:01:05 2026 GMT
Subject: CN=5017a751bcb316cd2f43259088d024916339f337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:70:9d:99:b4:6e:a0:b8:6c:c8:31:07:84:
0d:25:69:35:89:ef:31:8f:cd:bc:74:4d:e1:b5:1d:
88:08:a7:5f:7a:4f:68:8e:ab:f7:ae:6d:8f:58:53:
77:62:ba:29:02:c3:6f:b8:d7:5c:66:9d:21:d8:cf:
5f:8f:37:98:9f:50:38:3b:03:1a:12:3b:56:27:0a:
45:e2:65:84:5e:da:45:34:e0:1e:55:cc:d6:13:79:
3e:6b:7f:f8:56:d8:b4:d0:c6:60:ca:37:d3:63:f5:
4d:00:58:62:8b:d7:e6:d5:d0:77:63:b2:16:4d:1c:
45:a0:09:37:9d:53:2d:e7:62:86:62:2b:b1:de:19:
e9:82:ed:4a:bf:e7:7b:e5:0e:59:f5:ce:29:1e:0d:
7a:52:b9:c4:eb:0a:ae:79:49:2f:f5:6c:cf:93:36:
c8:10:7c:72:b7:4f:37:1f:71:9c:10:3b:7f:19:58:
3f:4a:8a:3a:43:c0:ae:13:8a:2f:40:4a:3a:16:03:
c4:18:71:e2:6e:44:bc:e2:e1:17:c1:44:20:d2:d7:
6d:11:9f:ee:7a:22:35:fa:30:3f:85:72:22:4c:05:
a8:42:98:59:92:33:95:72:22:ba:fd:41:30:2c:04:
82:e0:c2:83:b0:21:9c:36:63:e1:c0:87:a3:85:ac:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:17:A7:51:BC:B3:16:CD:2F:43:25:90:88:D0:24:91:63:39:F3:37
X509v3 Authority Key Identifier:
keyid:3E:27:6A:C5:1A:13:24:01:DB:4C:D7:41:D8:66:A5:46:22:A0:D1:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f7:82:60:9a:0b:d2:57:cf:b6:31:4a:f0:4a:69:7a:f8:7f:
22:92:73:cd:09:b0:6b:5e:55:3d:31:13:0e:f3:21:e3:ef:6a:
a0:10:fc:72:e1:80:0d:57:a4:58:27:62:c9:43:58:bb:6d:2e:
c8:c0:64:d1:b6:91:b7:12:42:18:fb:3b:57:a1:6b:e0:81:80:
b6:03:6d:e0:8f:fb:1f:8e:c3:fa:cc:1b:c0:26:7e:0b:f0:c9:
2c:f3:eb:16:da:7c:85:56:d4:7f:b4:26:f1:d0:59:dc:5e:e6:
83:14:53:0c:3a:a9:34:cc:3f:f2:41:b4:f7:45:2f:bd:da:1f:
20:f8:3e:91:1b:bf:dd:34:9d:f2:09:b4:d0:ec:13:bb:4c:ca:
2d:1f:5a:90:90:31:be:15:ca:93:16:f5:4d:4f:ef:44:33:98:
a2:79:d7:8b:3e:e2:61:e6:b2:fb:a5:0d:3e:ec:72:5d:5d:8d:
f0:a6:22:ab:fd:2d:fd:17:bf:f7:67:2e:84:83:39:b8:37:92:
c5:a7:6a:cf:45:cd:d7:49:2a:33:ea:09:42:3e:69:24:75:d8:
c2:8e:9c:a6:40:dc:20:06:29:ec:12:51:8c:ef:9b:19:50:1d:
f9:c8:3c:a0:00:06:e0:d5:78:e5:c1:0c:79:45:39:34:1d:23:
21:e9:58:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:30 2026 by rpki-client