Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: qQ4wU2Sq9Sb96eksYwGG9OCqg6fHMuDTDkeKOKuCm/4=
Subject key identifier: 21:EE:79:A7:D4:51:1B:0D:A7:DB:C0:6D:EC:DC:3B:C3:00:DA:06:0A
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 019D281668007F76D137A9E272431ED938F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 10FD
Signing time: Thu 26 Mar 2026 03:00:49 +0000
Manifest this update: Thu 26 Mar 2026 03:00:49 +0000
Manifest next update: Fri 27 Mar 2026 03:00:49 +0000
Files and hashes: 1: SvxwS_lV784DW9bPgSuJYXAnLY4.roa (hash: cRLgycuUHIOemfVnKATCpToT+Luf3V15E0LKGchaIIs=)
2: TfDpwnkDY9DTlAsJc9Iqnduzj8A.roa (hash: XbrnUGWje15/NR9HfumBox3YZkdHMNSMKy7Az9ObxUM=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: pAUfye8BJbZ6Lj2JxNb4uoU0tSvP7Qs7AeeH124P8fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:68:00:7f:76:d1:37:a9:e2:72:43:1e:d9:38:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Mar 26 03:00:49 2026 GMT
Not After : Mar 27 03:00:49 2026 GMT
Subject: CN=21ee79a7d4511b0da7dbc06decdc3bc300da060a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:c6:6d:18:e5:1a:0e:43:85:1f:cc:f6:04:
e6:e8:e6:3d:ee:26:0d:c5:75:23:8f:10:0c:0f:8f:
58:8e:22:9f:b0:67:2a:b8:fa:a7:27:f5:b6:df:9e:
6f:d5:ba:a3:64:86:31:33:49:00:29:8e:8a:3e:6c:
f3:74:0c:3a:86:b7:81:a4:d1:b3:04:a9:ea:ad:da:
82:e3:e0:11:cb:93:b4:d0:50:b4:28:76:39:11:10:
9e:63:ec:17:33:f9:26:9e:a5:b9:18:15:f9:2f:ba:
10:4e:ad:0a:7b:83:af:b8:9c:26:96:48:7b:01:19:
2e:5c:b1:a9:b0:d3:cd:74:cf:a3:4d:ef:12:3d:70:
54:1a:12:51:6e:c9:d7:e1:15:b5:32:38:94:d4:35:
a4:ac:4d:5f:70:fc:b6:d1:76:80:75:bf:3e:ed:01:
d1:33:a7:43:71:6f:cf:3d:32:2b:ea:8a:4d:e7:63:
76:94:37:84:69:da:e1:0e:72:c0:4b:69:b6:6a:c6:
87:15:07:44:e5:5e:98:a9:c3:38:ef:a9:e1:de:57:
c5:14:c3:60:33:b1:44:81:c8:b0:68:73:13:18:06:
fa:c0:79:92:c1:f1:19:23:00:5b:0f:ca:e9:6a:4f:
07:86:e9:4d:a6:51:4c:60:c2:7b:9a:fc:79:cd:d2:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:79:A7:D4:51:1B:0D:A7:DB:C0:6D:EC:DC:3B:C3:00:DA:06:0A
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:88:24:88:6d:6d:82:ba:02:a5:aa:b1:23:85:a8:de:48:2b:
00:dd:f8:8f:1b:78:5e:c8:c2:69:dd:3a:aa:61:87:4c:1a:80:
fc:02:29:e6:f5:55:aa:e4:69:af:0d:a0:46:6d:f0:f7:d0:62:
3f:1f:51:b3:16:9e:6f:10:08:69:23:66:88:47:91:db:1f:ab:
f5:bb:1f:50:64:d5:09:92:ab:c0:a7:56:de:c9:5b:ec:b9:6e:
a4:16:ee:2b:8e:39:33:ac:1d:7e:a9:28:15:e9:1c:d5:20:3a:
b4:09:4e:c3:18:a3:58:42:ff:ff:0f:1b:3e:5b:66:ad:b4:16:
8b:b2:50:c0:97:57:f1:c1:78:60:de:95:22:b2:fb:f0:9f:90:
57:63:93:85:2a:90:6d:99:f8:1d:ff:2e:9d:3f:57:e4:6e:79:
9a:92:95:6c:63:20:f5:fe:ed:12:41:8e:04:f0:38:ec:43:af:
5f:10:34:36:97:b2:97:cd:35:bd:d8:6d:86:14:dd:6b:4f:15:
8e:3c:43:0c:7b:13:f4:9b:b5:b2:cf:93:e1:c3:2e:fa:d8:c2:
ec:80:90:e4:f4:d9:c8:e4:82:80:88:76:b3:5a:c8:01:df:77:
b7:7c:aa:48:75:5e:5f:33:b8:fe:ea:2a:93:7c:88:69:11:0e:
c9:da:9b:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFmgAf3bRN6nickMe2Tj4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZDg1YWRlMmIwZDRlYzFjYTA5MmE4ZTI3MDNjMTkyMDBj
NzJmMzIwHhcNMjYwMzI2MDMwMDQ5WhcNMjYwMzI3MDMwMDQ5WjAzMTEwLwYDVQQD
EygyMWVlNzlhN2Q0NTExYjBkYTdkYmMwNmRlY2RjM2JjMzAwZGEwNjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtLGbRjlGg5DhR/M9gTm6OY97iYN
xXUjjxAMD49YjiKfsGcquPqnJ/W2355v1bqjZIYxM0kAKY6KPmzzdAw6hreBpNGz
BKnqrdqC4+ARy5O00FC0KHY5ERCeY+wXM/kmnqW5GBX5L7oQTq0Ke4OvuJwmlkh7
ARkuXLGpsNPNdM+jTe8SPXBUGhJRbsnX4RW1MjiU1DWkrE1fcPy20XaAdb8+7QHR
M6dDcW/PPTIr6opN52N2lDeEadrhDnLAS2m2asaHFQdE5V6YqcM476nh3lfFFMNg
M7FEgciwaHMTGAb6wHmSwfEZIwBbD8rpak8HhulNplFMYMJ7mvx5zdK8NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHueafUURsNp9vAbezcO8MA2gYKMB8GA1UdIwQY
MBaAFKfYWt4rDU7BygkqjicDwZIAxy8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYt
MDRiMGJmNjBiOWI3LzEvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYtMDRiMGJmNjBiOWI3
LzEvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYgkiG1t
groCpaqxI4Wo3kgrAN34jxt4XsjCad06qmGHTBqA/AIp5vVVquRprw2gRm3w99Bi
Px9RsxaebxAIaSNmiEeR2x+r9bsfUGTVCZKrwKdW3slb7LlupBbuK445M6wdfqko
Fekc1SA6tAlOwxijWEL//w8bPltmrbQWi7JQwJdX8cF4YN6VIrL78J+QV2OThSqQ
bZn4Hf8unT9X5G55mpKVbGMg9f7tEkGOBPA47EOvXxA0Npeyl801vdhthhTda08V
jjxDDHsT9Ju1ss+T4cMu+tjC7ICQ5PTZyOSCgIh2s1rIAd93t3yqSHVeXzO4/uoq
k3yIaREOydqbjg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:39 2026 by rpki-client