Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json)
Hash identifier: 1KJOZ2P7OI5p4IY9wIVX8l33onaXlTAlgnCD8/bw8AQ=
Subject key identifier: 33:CE:26:9A:BD:E3:EC:53:53:B1:20:C5:34:AE:9D:05:BC:7A:FD:68
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 019D28BB2272E1AF1B20F874BCF3243E9A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
Manifest number: 1818
Signing time: Thu 26 Mar 2026 06:00:45 +0000
Manifest this update: Thu 26 Mar 2026 06:00:45 +0000
Manifest next update: Fri 27 Mar 2026 06:00:45 +0000
Files and hashes: 1: RI1PUJj0Q_MD3P8uweukuXuYhlU.roa (hash: Udb4Yel6QV6x+EojTVD0SPU2vkANJh/DkSOzlaEFuOQ=)
2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: UDFOkTfhN7pZmnnyuAQk6mbvtsv+pZGfeQA678vI0Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:22:72:e1:af:1b:20:f8:74:bc:f3:24:3e:9a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: Mar 26 06:00:45 2026 GMT
Not After : Mar 27 06:00:45 2026 GMT
Subject: CN=33ce269abde3ec5353b120c534ae9d05bc7afd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:ff:23:6d:c5:f1:18:3f:ad:8a:6a:0b:cf:
f5:9c:17:a7:59:9b:01:bb:6f:09:6f:aa:e9:45:01:
38:9f:97:29:ba:bf:34:6c:41:1a:0e:7e:ea:41:a4:
d7:a9:33:0b:01:e2:bb:d1:47:04:40:a4:c1:a3:62:
d3:76:ca:61:91:fe:be:18:b2:20:f7:d5:4a:3a:33:
59:83:65:23:b3:be:2f:77:7a:51:60:f7:56:99:50:
21:48:36:96:63:63:1c:ee:1c:2b:61:9f:4e:a9:64:
39:76:ea:9f:7c:6a:3b:b3:5d:7e:e0:9e:97:13:e1:
00:dd:e9:56:5a:dc:b8:9b:23:54:66:65:37:27:a1:
8e:80:d3:0d:31:92:9e:61:cd:2f:ff:df:fa:4b:3c:
78:2c:5b:e1:0f:31:60:2b:aa:c2:65:c2:72:e0:53:
71:bf:d5:08:d0:5c:60:79:ed:cc:ae:ee:e7:82:50:
ec:71:2c:c7:02:97:70:38:d1:d5:cb:21:bb:e8:b0:
8b:48:7d:38:31:24:22:42:f5:8b:a3:1f:68:44:67:
67:27:08:2d:64:28:4d:b5:34:4c:8b:32:28:03:d6:
96:23:e2:b9:26:93:ef:fa:ee:50:47:84:c0:45:31:
f0:f5:22:d0:5e:f1:d8:ed:be:3f:c7:d0:bd:e0:47:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CE:26:9A:BD:E3:EC:53:53:B1:20:C5:34:AE:9D:05:BC:7A:FD:68
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:73:a3:5a:b9:29:d0:4e:fa:32:3d:e4:c4:52:60:77:e5:24:
bf:2a:d6:57:df:ba:1e:9a:66:b9:9d:c9:6d:9c:aa:da:dd:7f:
fc:b2:40:08:f6:80:6b:9e:2b:7e:20:49:c7:fd:5b:71:09:1c:
f0:de:0a:be:e3:4f:3f:62:4b:fd:51:01:8b:24:f8:ee:70:d6:
51:08:d6:dc:83:74:38:9d:25:82:9f:d5:fc:14:8c:7b:65:cf:
8f:89:d7:4d:97:81:6a:d8:f2:28:47:95:29:e1:3f:59:28:1c:
52:0d:f6:bd:6a:7a:3a:79:ee:c0:be:4b:ed:55:06:f1:65:37:
c3:dc:9a:51:11:d4:31:68:ca:ec:b4:58:f0:bc:ad:62:c0:8a:
79:cd:0c:5f:c4:a8:2a:b1:4f:8a:c4:42:97:b5:d6:50:5a:61:
c2:46:a9:5c:35:1b:42:2f:91:9f:f0:89:15:51:9b:44:20:58:
29:86:47:81:f6:f0:16:4f:78:0e:ac:5b:cf:4e:ca:63:1b:2f:
33:ab:e7:f7:e3:00:66:7b:25:1c:15:47:09:a4:e8:3b:35:4d:
8c:e9:4f:4f:c7:e3:d1:64:bb:c6:90:8a:fa:2a:14:b4:dc:81:
e2:e3:4e:5b:9d:6b:68:dd:9f:50:9f:9e:85:04:91:42:c7:09:
cd:d1:00:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:01:23 2026 by rpki-client