Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
File: p4wD9FkI30xFw_B9KkssQCRdUTI.mft (raw, json)
Hash identifier: f4z9A6C3QQ+Pe2RRRo4GmPTII2q5iWn0xiuqPDiYWwo=
Subject key identifier: 06:09:65:52:43:59:2E:C0:D0:60:95:70:17:9F:54:28:AD:85:08:DC
Authority key identifier: A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
Certificate issuer: /CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Certificate serial: 019D2816D8EB751CAE6FD6129A521FD034F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 03:01:18 +0000
Manifest this update: Thu 26 Mar 2026 03:01:18 +0000
Manifest next update: Fri 27 Mar 2026 03:01:18 +0000
Files and hashes: 1: mNwkS1qi0XHbCO-C3fAjXeIuQSo.roa (hash: 76qYQmBj5fTGwqCZ0h8a/Bab0EeZxD7iG9TSaybvW9s=)
2: p4wD9FkI30xFw_B9KkssQCRdUTI.crl (hash: ZDuugBryZR0s+DAIGaIpghkBnqMLWUx1i+0yuObPRH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d8:eb:75:1c:ae:6f:d6:12:9a:52:1f:d0:34:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Validity
Not Before: Mar 26 03:01:18 2026 GMT
Not After : Mar 27 03:01:18 2026 GMT
Subject: CN=0609655243592ec0d0609570179f5428ad8508dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4a:08:97:fa:85:fd:c7:ff:6b:c7:75:2d:89:
60:15:38:81:8a:cd:4c:d2:cd:dc:83:51:c3:b1:78:
cf:96:f1:44:6a:e1:01:6e:79:66:48:13:65:5a:be:
de:2f:ab:13:0b:74:8c:54:41:a1:98:fc:22:28:4c:
54:66:45:70:38:45:2a:47:41:44:1d:a9:14:e1:f3:
a9:cc:a5:0a:23:6e:86:bb:82:c2:1e:a3:21:45:c0:
c6:db:d0:d8:ce:43:de:07:28:bb:ae:18:3e:4d:a8:
25:d2:7c:ea:bb:1a:dd:45:7e:f0:8c:1e:aa:e7:6e:
14:f1:de:44:b3:44:aa:f6:e3:f0:45:4d:88:7f:6e:
65:97:c5:9e:aa:61:db:02:d4:fe:fd:ad:c3:9a:3f:
24:6d:8b:85:6c:02:02:ae:e9:ba:6a:10:66:83:f6:
f9:7a:f8:25:0b:6c:5f:12:10:f2:33:8a:42:0b:16:
b2:ae:9e:a0:2f:32:88:41:f4:0d:0d:91:fc:e5:db:
c9:2d:a5:a9:95:8f:35:68:89:4e:05:81:b0:4f:27:
83:d3:5b:de:c6:1f:0d:2e:19:18:b0:6b:5b:52:a1:
59:00:de:c5:5c:ce:8b:56:a7:af:77:5d:06:e9:51:
18:47:98:44:e2:51:20:63:73:cf:78:a5:d1:04:6d:
fa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:09:65:52:43:59:2E:C0:D0:60:95:70:17:9F:54:28:AD:85:08:DC
X509v3 Authority Key Identifier:
keyid:A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:51:79:f5:84:9a:39:cf:a1:88:c1:f5:33:95:5a:bf:01:16:
ad:6d:52:53:02:c9:ca:50:9d:51:53:6d:3e:b2:60:eb:54:9d:
48:f6:5c:fe:9d:3d:db:d8:1e:b6:d9:7e:45:32:3d:6a:a7:6b:
01:75:c3:a9:53:39:ce:66:e0:c3:39:cc:ae:1e:c4:4c:6f:1a:
c5:bd:fb:a6:44:14:e2:63:d1:09:9e:d9:28:59:5b:ec:9a:da:
d4:8f:85:3f:e5:37:4c:9a:ee:c7:92:17:bc:88:85:19:7d:65:
b3:99:bb:96:8f:bd:87:62:4e:2d:fc:21:38:07:00:bd:d3:de:
ec:2b:0a:a8:40:66:c7:2f:1d:62:89:9c:19:10:e8:4f:83:aa:
d0:39:42:3b:b9:7f:88:10:c8:ba:0d:b5:e1:8c:61:16:90:03:
af:e1:dd:0a:ef:7d:08:4e:e1:d3:02:48:5f:84:09:8b:37:25:
e5:0e:bf:11:0a:59:40:e9:84:e2:e9:17:50:de:2e:60:cd:b5:
bf:30:db:5a:49:4f:fc:c3:f2:a6:73:40:5b:b0:3c:ff:83:e5:
cd:ef:75:76:1e:82:a0:53:af:52:27:57:8d:df:5f:1d:73:52:
31:a9:c5:73:09:57:57:d9:0b:9e:cb:c9:e0:7f:4a:bc:2b:cd:
72:82:11:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:05 2026 by rpki-client